- Zope - Zope lists

Apache2 rewrite gives frustrating 403 error
by Flemming Bjerke 05 Apr '06

05 Apr '06

I hope someome can help me solving this problem: My apache2 rewrite statement to zope/plone make persistently 403 error. (Exactly the same statement has worked before.) From sites-available/zope: NameVirtualHost 213.173.259.117 <VirtualHost 213.173.259.117> DocumentRoot /var/www/virtual/globalfordring.dk ServerName globalfordring.dk ServerSignature On CustomLog /var/log/apache2/globalfordring.dk-access.log combined ErrorLog /var/log/apache2/globalfordring.dk-error.log LogLevel debug RewriteEngine On ProxyVia On RewriteRule ^/(.*)$ http://globalfordring.dk:8083/VirtualHostBase/http/globalfordring.dk:80/por… [L,P] </VirtualHost> If I remove the rewrite rule, a browser reads html-files from the DocumentRoot. I can also browse zope directly: http://globalfordring.dk:8083/portaler/globalfordring. But, when I rewrites this url to globalfordring.dk, I get: You don't have permission to access / on this server. The happens if I exchange RewriteRule with: ProxyPass / http://localhost:8083/portaler/globalfordring ProxyPassReverse / http://localhost:8080/globalfordring I don't understand what is wrong? Flemming The server is a debian stable, Sarge, with apache2.0.54, og zope278 is compiled with its own python 2.3.5. There is a a virtualhostmoster in /. The problem does not disappear when I disable the iptables firewall. mods-enabled: actions.load auth_plain.load mod_python.load perl.load php4.load proxy_connect.load proxy.load userdir.conf cgi.load perl.conf php4.conf proxy.conf proxy_ftp.load rewrite.load userdir.load error-log: [client 62.66.183.58] client denied by server configuration: proxy:http://globalfordring.dk:8083/VirtualHostBase/htt p/globalfordring.dk:80/portaler/globalfordring/VirtualHostRoot/

2 1

Problem with ExtFile
by Bruno Grampa 05 Apr '06

05 Apr '06

Hello, i've a problem with ExtFile 1.4.4 installed in a Zope 2.8.6 (on RHES4). The redirection, at the end of file creation doesn't work. To test the problem you have to create these methods: The first one is called 'form': --- <dtml-var standard_html_header> <form action="write" method="post" enctype="multipart/form-data" name="form1"> <p> Insert <p> Id <input type="text" name="id"><br> <b>File</b><input type="file" name="file" value=""> <br> <input type="submit" value="Send"> </form> <dtml-var standard_html_footer> --- The second one is called 'write': --- <dtml-comment> <dtml-call manage_addProduct['ExtFile'].manage_addExtFile(id=REQUEST['id'],title='',descr='',file=REQUEST['file'],content_type='', permission_check=0)"> </dtml-comment> <dtml-call "manage_addProduct['ExtFile'].manage_addExtImage(id=REQUEST['id'],title='',descr='',file=REQUEST['file'],content_type='',create_prev=1, maxx='100', maxy='100', ratio=1, permission_check=0)"> <dtml-var standard_html_header> Ok, done. <dtml-var standard_html_footer> --- If i use manage_addExtImage i got the "Ok, done" message; if i use manage_addExtFile no, just a piece of page (junk?). I can't understand why, can someone help me? Thanks! Bruno

3 3

manage_convertIndexes on large-ish catalogs
by Chris Withers 05 Apr '06

05 Apr '06

Hi All, Moving a site from 2.7 to 2.9, so I need to run manage_covertIndexes. The only problem is that, on the main catalog, this sends the machine into swap death. Anyone else experienced this? If so, how did you getaround it? cheers, Chris -- Simplistix - Content Management, Zope & Python Consulting - http://www.simplistix.co.uk

3 4

bug in zeo runner in Zope 2.8.6 ?
by Vlada Macek 04 Apr '06

04 Apr '06

When I run "zeoctl start" having "user zope" (where zope is an unprivileged user) directive in zeo.conf on a virgin instance directory, at first log/zeo.log file with root owner is created, then the process drops its privileges and timeouts, since it is not able to re-open the logfile. The problem is not imminent when starting ZEO like this: su zope bin/runzeo. That's because there is no chance of creating the logfile as root. I don't know whether this is already fixed in later stable versions, but since 2.8.6 is still a recommended one for at least Plone and maybe there are another fools like me who want to run ZEO unprivileged using zeoctl, I'm reporting it. :) -- \//\/\ (Sometimes credited as 1494 F8DD 6379 4CD7 E7E3 1FC9 D750 4243 1F05 9424.) [ When you find a virus in mail from me, then I intended to infect you, ] [ since I use SW that is not distributing malware w/o my knowledge. ]

2 1

Zope and Tomcat troubles
by Mads Munch Hansen 04 Apr '06

04 Apr '06

Hi, Since I installed Zope on my server Tomcat has stoped working, and I was wondering if any of you knew of a solution. When I try to load the management interface for TomCat, all I get is a blank page, the same when I try to log into OpenXchange... I installed zope from the Plone Suse 10 rpm bundle on a Suse 10 box. I hope this isn't too much off topic, but I'm quite sure Zope related. Thanks in advance, Mads Munch Hansen

3 2

Zope.org = Zope.com?
by Andreas Krasa 04 Apr '06

04 Apr '06

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello everybody, it seems that currently all HTTP requests to www.zope.org and dev.zope.org are forwarded to www.zope.com. I find it hard to believe that this is a desired behavior... But if yes, where can Zope itself and Zope products be downloaded? The Zope.com site contains tons of nice eye-candy and marketing-yadayada but no resources for developers whatsoever. Regards, Andreas Krasa :: Andreas Krasa WU > ZID > Information Center :: fon: +43/1/31336/6996 Augasse 2-6 > 1090 Wien > .at :: fax: +43/1/31336/789 :: icq: 2059600 :: pgp key-id: 0xDA178BDC -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.2.1 (MingW32) iD8DBQFEMO42fmH5mdoXi9wRAmORAJ0QzixhttxVnX/3N0er70AgWMB15wCcDyHd ufTmW/NYj8N6WIUCkyeZBYo= =DdsT -----END PGP SIGNATURE-----

5 5

External Methods
by Dennis Allison 04 Apr '06

04 Apr '06

When Zope is run in production (as opposed to debug) mode, modifications to External Methods are not sensed. What's the programatic way to get them all refreshed?

4 6

python 2.4.3
by David Bear 04 Apr '06

04 Apr '06

Since python 2.4.3 has just been released, are there any comments/recommendatiosn about running zope 2.9.2 with that version? The zope site and installed docs recommend python 2.4.2, but it appears the 2.4.3 is a nice bug fix release. it would be nice to be able to use it. -- David Bear What's the difference between private knowledge and public knowledge?

3 3

how to build a search date range parameter in a search form
by Lucia Colombo 04 Apr '06

04 Apr '06

Hi all I'm trying to build a search form which gets as an input a year and searches for all objects which have a (custom) date index set within such year. So after having built a list of the available years to query on, I added in the search form: <select name=" getAnno.query:record:list " id="getAnno" tabindex="" tal:attributes="tabindex tabindex/next;"> <tal:options repeat="year years_list"> <option value="#" tal:define="start_date python:DateTime(int(year), 1, 1); end_date python:DateTime(int(year), 12, 31); date_range python:[start_date, end_date];" tal:attributes="value date_range" tal:content="year"> 2000 </option> </tal:options> </select> <input type="hidden" name=" getAnno.range:record" value="minmax" /> (getAnno is my custom date index) but then I get into the query the string ["DateTime('2006/01/01'), DateTime('2006/12/31')"] instead of the list of dates. Actually what I get is a syntaz error, as it is: getAnno {'query': ["[DateTime('2005/01/01'), DateTime('2005/12/31')]"], 'range': 'minmax'} How do I get the parameter to be a list of dates? thanks&bye Lucia

3 3

Question about Zope and security
by Cyrille Bonnet 03 Apr '06

03 Apr '06

Hi there, I have been telling all my clients about how great Zope is for security: fine-grained permissions, security framework, roles, etc. Now, one of my clients has a security expert who took a close look at how Zope authenticates users. The results were not good. The main problem is that Zope stores the username and password in a cookie in clear text (base64 encoded). Even though it only happens in their internal network, my client wasn't too happy, because it makes them vulnerable to a man-in-the-middle attack. I know, the odds of that happening are low, but storing the username and password in clear text is clearly not best practice. So, my question is: is there a way to secure Zope authentication? I did find Dieter Mauer's DigestAuth product: http://www.dieter.handshake.de/pyprojects/zope/#DigestAuth It looks good. I have used other produts from Dieter before and was very pleased with the quality of his code. Now, have other people used it? Does it work with WebDAV? How secure is it (I am no security/encryption expert)? Also, if it is good, why is not part of default Zope?? Finally, a little side story: you know how in Windows XP, you can connect a drive to a WebDAV server? Well, if you install Service Pack 2, you can't use that feature to connect to Zope anymore. Interestingly enough, it seems that it is precisely because of that authentication vlunerability: Win XP SP2 refuses to connect to a WebDAV that doesn't at least encode the username/password in Digest authentication... Any comment or pointers are very welcome. Cyrille

11 18