- Zope - Zope lists

Re: [Zope] SSL over Multiple Zope/Plone sites?
by Slobodan Jovcic 24 Jan '06

24 Jan '06

Use a wildcard certificate, if all of your subdomains on the server belong to a single domain. > Hi > > I've got a few Plone sites set-up using Apache through Zope. The > question is, I'd like to implement SSL on the site login etc, as > it's not secure without this. There's also one site I'd like to > serve completely over https. However. I'm told that you can't run > SSL on virtual hosts and can only have once SSL site per IP address. > > What would be the way round this? I know I could set-up SSL on Zope > only using the following documentation: > > http://www.zope.org/Members/Ioan/ZopeSSL > > but if I can't carry this through to Apache then I'd have to run > Zope as the web server as well as the application server. > > Thanks > > Michael _________________________________ Slobodan Jovcic Teaching Enhancement Center Office of Instructional Development, UCLA (310) 794 2099

3 4

Security issue with manage_page_header
by Stacy.Ladnier＠noaa.gov 24 Jan '06

24 Jan '06

I have patched the Navigation and Management so the drop-down containing 'Set Preferences' and 'Logout' is displayed in the menu frame. The 'Set Preferences' displays a customized page to the user to set a unique set of options for my application. My product consists of several additional roles and relies heavily on a nested structure of folders and acl_users for granting access. Previously, under 2.7 I set default security for every store, which is a top level container, and the entire site consists of several stores. I have now upgraded to 2.8, created each store as a separate mount point so it has its own ZODB, and security is set at the root level. However, now if a 'Custodian' with an account nested inside of a store chooses to go to 'Set Preferences' they recieve an Unauthorized error. Zope complains on the RESPONSE.setHeader() call contained in manage_page_header. I have gone as far as to set __roles__=None on the manage_page_header and preferences page in my Navigation patch. Only those users with an account established at the root can gain access to the preferences. Otherwise, they recieve an error. If I allow Anonymous all permissions in the Security Tab (BiG bad no no in my case) then users below the root level can gain access to the preferences page. In my understanding of Security, I thought declaring __roles__=None would also allow users to access an object without needing to pass security. What could I possibly be missing???? My site, including the bug, is currently public and to be demoed in two days. Any assistance or guidance is greatly appreciated.

2 1

nxmldocument product and zope 2.8.1
by kjzz.webmaster＠riomail.maricopa.edu 24 Jan '06

24 Jan '06

I am transitioning to zope 2.8.1 and python 2.3.5 and I would like to use the nxmldocument product: http://www.zope.org/Members/philh/nXMLDocument (I am also using Mark Hammond's Win32 extensions, and Microsoft's MSXML 4.0 parser on a windows 2003 server). However, upon startup, I received the following error with the nxmldocument product: Traceback (most recent call last): File "E:\Program Files\Zope-2.8.1-final\lib\python\OFS\Application.py", line 695, in import_product product=__import__(pname, global_dict, global_dict, silly) File "E:\Program Files\Zope\Products\nXMLDocument\__init__.py", line 4, in ? import nXMLDocument File "E:\Program Files\Zope\Products\nXMLDocument\nXMLDocument.py", line 8, in ? import pythoncom File "E:\Python23\lib\site-packages\pythoncom.py", line 3, in ? pywintypes.__import_pywin32_system_module__("pythoncom", globals()) File "E:\Python23\lib\site-packages\win32\lib\pywintypes.py", line 42, in __import_pywin32_system_module__ mod = imp.load_module(modname, None, found, ('.dll', 'rb', imp.C_EXTENSION)) ImportError: DLL load failed: The specified procedure could not be found. Thanks in advance! John Tynan - webmaster KJZZ.org / KBAQ.org 480.774.8462

2 1

[ANN] mechagen 1.0.beta1 released
by Balazs Ree 24 Jan '06

24 Jan '06

Mechagen is a tool for generating automatic Zope2 (and Plone) functional tests for the mechanize framework. The mechanize framework can be used to write Zope2 functional tests in a flexible way and is getting also used in Plone products. However, it lacks support for automatic generation of tests. Mechagen is a tool that adds this support. (zope.testbrowser, zope.testrecorder also offer such a framework. Mechagen was not influenced by them and integration with these libraries will be done only later.) The followings characterize the generation process: - All the tests will be ZopeTestCase based python code, so the integration between traditional (non-functional) and functional tests are complete. There is no need for a separate test runner but the same runner runs all the tests, both functional and traditional ones. - The generator automatically records a given interactive series of requests, and generates a test method from it. Although the generated code can be used as a test without any modification, it should rather be thought of as a template to be edited prior to usage. - The generated tests run in the sandbox provided by the ZopeTestCase framework, which ensures that each test runs independently in the custom environment set up for it. - The interactive recording will go forth in exactly the same sandbox that is designated to run the test later. - The generation process should be easy to use, no extra tools should be necessary and the entire process should be easily manageable from within the test runner environment. You cannot test javascript in your pages with this method, but "everything until that". So mechagen cannot replace Selenium but you can do much richer functional testing with it and you can complement these tests with Selenium generated ones. It fully supports Plone. It has a plugin mechanism for extending the generation of checks for your custom page types. The code is beta quality, error reports and comments are welcome. For more information, please visit http://www.zope.org/Members/ree/mechagen . -- Balazs Ree, ree at ree.hu

1 0

CMF 2.0.0-alpha released
by Jens Vagelpohl 23 Jan '06

23 Jan '06

The CMF developer community and Zope Corporation are pleased to announce the release of version 2.0.0-alpha of the Zope Content Management Framework (CMF). This release is intended for testing purposes only; we do not recommend deploying it to production servers. What's new in this release? This alpha represents a first preview of all the changes and features you will see in CMF version 2.0. Some of the highlights are... - GenericSetup-integration as the replacement for the CMFSetup technology started in the CMF 1.5-series - the use of Zope 3-style interfaces throughout, bridged back to Zope 2-interfaces where needed for backwards compatibility - widespread integration with Zope 3/Five technologies, and the folding-in of the previous CMFonFive addon-product - pluggable TypeInformation objects - new-style Actions ... and of course countless bug fixes and other improvements. What is the CMF? The Zope Content Management Framework provides a set of services and content objects useful for building highly dynamic, content-oriented portal sites. As packaged, the CMF generates a site much like the Zope.org site. The CMF is intended to be easily customizable, in terms of both the types of content used and the policies and services it provides. Where do I get it? Download it from http://zope.org/Products/CMF/CMF-2.0.0-alpha Points of interest include: - "Windows ZIP file", http://zope.org/Products/CMF/CMF-2.0.0-alpha/CMF-2.0.0-alpha.zip - "Unix tar/gzip archive", http://zope.org/Products/CMF/CMF-2.0.0-alpha/CMF-2.0.0- alpha.tar.gz - "Release notes", http://zope.org/Products/CMF/CMF-2.0.0-alpha/README.txt - "Change history", http://zope.org/Products/CMF/CMF-2.0.0-alpha/CHANGES.txt - "Installation instructions", http://zope.org/Products/CMF/CMF-2.0.0-alpha/INSTALL.txt Where do I go to learn more? The CMF mailing list (zope-cmf(a)zope.org) has many participants who are active in supporting the CMF. ...to report bugs? The "CMF Collector":http://zope.org/Collectors/CMF is the place to report bugs (please search for existing reports of your issue first!) --------- Jens Vagelpohl jens(a)dataflake.org

2 1

Can not authenticate witn zope http server
by papi mac 23 Jan '06

23 Jan '06

I have been using Zope 2.7.5 (with python 2.3.5) for a long time on a Red Hat 9 server. I migrated to a new machine 2 weeks ago that has FC4 where I installed Zope 2.8.5 (and python 2.3.5 for its use). The old server started dveloping some internittent crashes that I think could be due to the Promise RAID controller card (looks like I migrated just in time...). The last time I used Zope on that old server was in mid December 2005 and all was fine. However, now when I try to export the wikis I use (ZWiki) to import into the new server, I have a big problem. The old installation will not let me even get to the main web page (the one from where you can access the ZMI). This is in Z2.log: 127.0.0.1 - miguelk [20/Jan/2006:14:22:44 -0300] "GET / HTTP/1.0" 401 594 "" "Lynx/2.8.5dev.7 libwww-FM/2.14 SSL-MM/1.4.1 OpenSSL/0.9.7" If I try with Firefox from a PC on the LAN I also get: 10.1.9.50 - miguelk [20/Jan/2006:15:44:32 -0300] "GET / HTTP/1.1" 401 575 "" "Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7.12) Gecko/20050920 Firefox/1.0.7 SUSE/1.0.7-0.1" In other words http://server-ip:8080 asks for authentication and there is no combination of user names and passwords that will let me pass. It never asked me for this authentication before. I tried to remake the inituser file but it did not help. If I install the very same Zope version (2.7.5) in another directory on the old server and start it I can reach the main page on the new installation fine without any login..This is what I did (using the same zope.conf file on both 2.7.5 installations): a) If I copy the files in instance/var from a fresh install into this one I can reach the web page fine (no http authentication required). I 'm NOT talking about the ZMI, just the main page above it.. So the problem is not the installation. b) I have a backup of the instance/bvar files from April 2005. If I copy them over, I get asked for a login and I put in my usual login and get to the page (I do wonder why it asks for a login) c) If I copy the instance/var files that I want to access to a fresh installation on the same machine I get asked for a login and can not get a working combination, so this points to the instance/var files as the culprits I have 2 questions: a) Why does Zope insiist on authenticating access to the main page and is there a way to tell it to let me access the main page (the one that talks about Zope and lets you access "manage") without a login? b) Does it make sense to keep trying or is Data.fs or some other file corrupted? Thanks a lot. Miguel --------------------------------- Yahoo! Photos Showcase holiday pictures in hardcover Photo Books. You design it and well bind it!

2 4

Re: [Zope] Class instances changing address?
by Gabriel Genellina 23 Jan '06

23 Jan '06

At Friday 20/1/2006 20:07, Jeff Gentry wrote: >As background, the primary class (A) maintains a handle to an instance of >another class (B) which handles interaction w/ a psycopg db >controller. Class A also will instantiate several instances of Class C >and as part of the construction will pass it the handle to class B. So in >summary, A has a B and has 1:n C's, and C has a reference to B. A & B >have physical representations in the ZMI, while instances of C are >'virtual'. If you follow these rules you should be safe: - Never store a reference to a persistent object inside another persistent object; use its id or path to retrieve it when needed. - Never store a reference to a persistent object inside a non-persistent object. - If a persistent object "owns" some other persistent objects, make the first an ObjectManager. - Let Zope manage transactions, and avoid bare try/excepts Of course you can break the rules if you really really know what you are doing but they are a good starting point. And reading about how persistence works is a big help (it appears you've already read it, I think). Gabriel Genellina Softlab SRL

3 2

returning list from PythonScript
by Slobodan Jovcic 23 Jan '06

23 Jan '06

Hi, I'm trying to pass a list of values between the script and external method. ZPT contains the following: <tal:block tal:define="whatever python: container.myExtMethod ( container.myScript() )" /> container.myScript() is a Python Script that returns a list of values. container.myExtMethod() is an External Method expecting that list. However, all it gets is a string representation of the list ( "[]" instead of [] ). How can I pass the list itself? Btw, hard-coding list in ZPT works fine: <tal:block tal:define="whatever python: container.myExtMethod( ['a', 'b', 'c' ] )" /> Thanks, Jovca _________________________________ Slobodan Jovcic Teaching Enhancement Center Office of Instructional Development, UCLA (310) 794 2099

4 5

Class instances changing address?
by Jeff Gentry 22 Jan '06

22 Jan '06

Hello ... I'm running Zope 2.7.3 w/ python 2.4.1. I'm in the process of developing a FS based product as a primary class w/ many sub-classes. I've been experiencing a problem which I thought I had completely nixed but apparently only partly so and now am out of ideas as to what might be the source of the problem. As background, the primary class (A) maintains a handle to an instance of another class (B) which handles interaction w/ a psycopg db controller. Class A also will instantiate several instances of Class C and as part of the construction will pass it the handle to class B. So in summary, A has a B and has 1:n C's, and C has a reference to B. A & B have physical representations in the ZMI, while instances of C are 'virtual'. What is happening at times is that all of a sudden any call from C to B (ie C is accessing the DB) will result in Zope reporting that it could not find the psycopg controller, and indeed when this happens, any call through B via C will show that B can not find any DB controllers (using SQLConnectionIDs()). When I looked a bit closer, I had C's instance of B do a 'print instanceOfB' before calling out to B, which looked like this in the console: <B instance at 2a9d564da0> What I found was at the moment that things stopped working, the address of the instance was changed, which explains a lot. However, I can not figure out why this would happen - as far as I can tell the B instance is not being reassigned in any capacity in my code. Also, this seems to happen a bit nondeterministically (although I'm sure it isn't really) in that the same set of operations will not always have the same result here - it might cause the above switch/failure in one run through but not the next 3 times. I wish I could post some relevent code but the code base but given that I'm not at all sure what section of the code might be causing this and the code base is several thousand lines long, that'sn ot really possible :( What I was hoping was that people might have some ideas as to what I might be doing wrong here (and admittedly I tought myself Zope & Python mostly from other Zope products and trial & error so there might be some key issue that I'm totally missing). Thanks in advance Jeff

4 9

What product to choose?
by Karlo Lozovina 22 Jan '06

22 Jan '06

First of all, greetings to everyone :)! I have been given a task to choose appropriate software for developing two projects, that is - web pages. I'm quite familiar with many software products available out there, but I don't have the time to thoroughly test each one and then decide which one to use. So, this is the place where you guys come in - I will briefly as possible describe specifications of both projects and I would like to hear from you what would be the best platform to implement both projects. First one is something like a mathematical encyclopedia and online collaboration tool - mix between MathWorld (http://mathworld.wolfram.com/) and a Wiki of some kind (http://www.wikipedia.org) The most important feature is this: users must be able to edit documents using syntax similar to LaTeX (no WYSIWYG-like editor), because after all web will contain a lot's of math formulas and expressions, and most of the users are already accustomed with (La)TeX. There is a similar implementation in LatexWiki (http://mcelrath.org/Notes/LatexWiki) addon for ZWiki, which is Zope 2 based, but I haven't tested that one out so I can't really say is that exactly what I need. Second most important feature is that of interconnections of articles - for example: when I define and write let's say Pitagora's theorem, I want to be able to "include" (much like C's #include <>, and Python's import something) into other documents. This way all the material can be defined in central repository and broken into small pieces (theorems, proofs, tasks...) and then reorganized as needed. Second web is much less complicated - it's intended to be a mix between news portal and searchable database of medical and similar products. Currently, I'm reviewing few options for implementing those two projects - plain Zope 2 or a Zope 2 based CMS (Plone, ZWiki, etc). If there is a Zope 2 based CMS that satisfies most of my requirements, I wouldn't mind using that. But, since Zope 2 will be someday replaced by Zope 3, I'm not that happy to use an already outdated product. That brings me to my next question - would it be smart to try to develop this using Zope 3? Is it mature and production ready enough? There is a third possibility, try to do it from scratch using Python (since that is the only language I'm good in that is suited for web development), but that seems like to big hassle. I'm mostly biased forwards Zope 3, since it's quite a new product with (I hope :>) bright future - i'm just not sure someone with zero Zope knowledge (although, I know Python quite well) can develop both projects in under a half a year. There, that's all I can think of now, any thoughts, ideas, URL's are very much appreciated. Thank you in advance. -- Karlo Lozovina - Mosor

3 2