- Zope - Zope lists

Zope, IIS, and GIF problem
by Andrew Williams 20 Apr '00

20 Apr '00

I currently have Zope 2.1.6 (configured for remote user) running behind IIS 4.0. The authentication to get into the management screens works fine, as well as viewing the initial zope pages. Unfortunately, I am having problems with the .GIF's associated with the various objects in both IE 5.0 and NS. In addition, IE 5.0 shows the zope hiearchy in the left frame, and the "Welcome to Zope!" in the right frame. I've checked through the how-to's and the mailing list archives, and found that there was a patch needed for pcgi-wrapper.exe. I've checked, and it looks like the patch has already been applied and compiled. Is there anything else I need to be looking at? Thanks for any help, Andrew ______________________________________________________________________ Get Visto.com! Private groups, event calendars, email, and much more. Visto.com. Life on the Dot. Check it out @ http://www.visto.com/info

1 0

RE: [Zope] www.oswg.org runs Zope?
by Mike Fletcher 20 Apr '00

20 Apr '00

ZServerSSL looks interesting, but the setup for NT is atrocious (you have to install Perl, have Visual C++, install an assembler if you want decent speed, etceteras). A version of the library built by the author (or Digital Solutions, or some other trusted source) and ready-to-install would make it a far more practical solution. Make installation an unzip-into-directory and a script to walk through generating the certificate and you'll see adoption far more likely... at least, until Python 1.6 with rumoured SSL sockets built-in arrives :) . Ah well, more work-cost than benefit in my case :) , enjoy, Mike -----Original Message----- From: Tres Seaver [mailto:tseaver@palladion.com] Sent: Wednesday, April 19, 2000 7:00 PM To: zope(a)zope.org; Frank Tegtmeyer Subject: Re: [Zope] www.oswg.org runs Zope? ... Appropriate security engineering requires trading off the costs of protection versus the value of the thing protected. The cost of imposing such high-security tradeoffs on all Zope users, many of whom can mitigate such threats simply by keeping good backups of the Data.fs file, is too high, especially given the alternatives available (Apache+SSL, Roxen+SSL, Ng Pheng Siong's ZServerSSL, etc.) for the more paranoid. ...

2 1

Re: CVS PTK and IOError?
by Paul Browning 20 Apr '00

20 Apr '00

> Message: 2 > From: Mario Lang <mlang(a)home.delysid.org> > To: zope(a)zope.org > Subject: [Zope] CVS PTK and IOError? > Date: Tue, 18 Apr 2000 22:04:45 +0200 > > Hello. > > I just checked out the current version of the PTK base and Demo product from CVS. > I copied the files as stated in the readme.txt, and > my products appear ok (not broken). > When I invoke the Wizard (Portal) and fill in the information, > after submitting the final page (Finish) I get > a Zope IOError. > Any idea what could cause this? > and > > Message: 7 > Date: Tue, 18 Apr 2000 16:07:43 -0700 > From: Michel Pelletier <michel(a)digicool.com> > To: Mario Lang <mlang(a)home.delysid.org> > CC: zope(a)zope.org > Subject: Re: [Zope] CVS PTK and IOError? > [snip] > > Mario, please send the traceback also. If you are not running in debug > mode then it is embedded in the HTML source of the error page. > > I'm *guessing* that you installed the PTK files as one user (perhaps > root) and your Zope is running as another user (perhaps nobody) that > does not have permission to read the files. > This rang a bell with me as I've been playing with the PTK and sometimes got the same error (but not after the end of the install of PTK - during use of some bits). This may not solve Mario's problem but is a warning I think for others who, like me, have been upgrading their Zope installs from the Zope-2.1.x-to-2.1.y.* sort of distributions. The lesson in my case: if you apply one of these upgrades _DON'T_ rename the Zope root directory like I did. You'll get all sorts of path problems and errors like the one Mario reports (again, I stress, this may not be the cause of his problem). Paul -- The Library, Tyndall Avenue, Univ. of Bristol, Bristol, BS8 1TJ, UK E-mail: paul.browning(a)bris.ac.uk URL: http://www.bris.ac.uk/

1 0

RE: [Zope] www.oswg.org runs Zope?
by Jens Vagelpohl 20 Apr '00

20 Apr '00

hi shane, what you're "missing" is the fact that the superuser's name and password are not hardcoded. it's your responsibility to use the zpasswd.py utility in your zope root directory to change the name and password to something hard to guess. but even if you do not change it, the passwords generated during a zope install are random and not guessable. concerning the fact that the "manage" suffix to an address is hardcoded, there's always the possibility for those who run apache in front of zope to write a rewrite rule which shuts out direct access to anything like http://myurl/myfile/manage and a second one that maps any chosen expression to the underlying zope "manage" pages, like http://myurl/myfile/niceweathertoday . jens ---- Jens Vagelpohl jens(a)digicool.com Software Engineer www.digicool.com Digital Creations (888) 344-4332 Got Zope? ---- -----Original Message----- From: zope-admin(a)zope.org [mailto:zope-admin@zope.org]On Behalf Of srl Sent: Wednesday, April 19, 2000 07:34 To: J. Atwood Cc: srl; zope(a)zope.org Subject: Re: [Zope] www.oswg.org runs Zope? Now, the fact that we can add /manage to any URL to edit the data seems like a potential security hole. all it would take to crack a Zope password would be running a password guesser with user 'superuser'. Or am I missing something here? srl On Tue, 18 Apr 2000, J. Atwood wrote: > http://www.oswg.org:8080/oswg/manage > > > That is always a good test.. > > It is.. Squishdot. > > J > > > From: srl <slandrum(a)turing.csc.smith.edu> > > Date: Tue, 18 Apr 2000 17:22:35 -0400 (EDT) > > To: zope(a)zope.org > > Subject: [Zope] www.oswg.org runs Zope? > > > > www.oswg.org > > > _______________________________________________ Shane Renee Landrum slandrum<@>cs.smith.edu ----"Some people enjoy the corporate life. Then again, some people enjoy nipple clamps." --- seen on an ad

8 11

ZClasses and ZCatalog: reindexing problem
by Anthony Monta 20 Apr '00

20 Apr '00

Hi all, I've been trying to create a simple, searchable database of scholarly publications for a university department with a customized ZClass, ZCatalog, and the ZSearch interface but have run into two problems I cannot solve: 1) I can add a new catalog-aware class instance which the Catalog will pick up, but the properties of this new instance (author, pub_title, publisher, year, etc.) are not made available to search results; 2) the addition of this new instance prevents the ZSearch interface from returning results for any other query, even for ones that worked before the addition. I just don't know why this should be. I thought the problem lay with the constructor _add method, but I've read all the tutorials and done the code changes there: still no success. I then thought AlexR's suggestion to create two methods in the ZClass for editing property changes might have something to do with the plumbing of reindexing, but apparently not. I then thought Catalog's reindexing might be messed up by enabled subtransactions, so I disabled them -- but this didn't help either. I can snag the new instance's properties via DTML, so the problem must be with Catalog -- right? I just don't have the Python smarts to get into the source to see what's going wrong -- does anyone have any suggestions? People at this university are excited about Zope, and some influential eyes are following our website's development closely. Grateful for any help, Anthony Monta Department of English Louisiana State University apmonta(a)excite.com BTW, the site is www.english.lsu.edu -- open-source all the way with Linux and Zope, and no admin problems whatsoever. _______________________________________________________ Get 100% FREE Internet Access powered by Excite Visit http://freelane.excite.com/freeisp

3 2

Re: [Zope] www.oswg.org runs Zope?
by Anthony Baxter 20 Apr '00

20 Apr '00

>>> Richard Barrett wrote > But note that Python 1.6 is going to support SSL. See > http://www.python.org/1.6/ which says under the heading Module > Changes: "socket, httplib, urllib - optional OpenSSL support". But I > haven't looked below the surface of this statement. It'll be client-only. There's been a couple of posts to python-crypto on the subject. Anthony -- Anthony Baxter <anthony(a)interlink.com.au> It's never too late to have a happy childhood.

1 0

RE: [Zope] Zope and CSS
by Peter Bengtsson 20 Apr '00

20 Apr '00

Is this the proper way of testing which browser you use? I copied the code below and it doesn't work, on other words, I get the NOT netscape case even in NN. (NN4.7 by the way) -----Original Message----- From: zope-admin(a)zope.org [mailto:zope-admin@zope.org]On Behalf Of ed colmar Sent: Thursday, April 20, 2000 5:16 AM To: zope(a)zope.org Subject: Re: [Zope] Zope and CSS You could also try linking your stylesheet as a <dtml-var> instead of linking it as a URL. like this: This goes anywhere in the header. I put mine in standard_html_header. <STYLE TYPE="text/css"> <dtml-if netscape>  <dtml-else>  </dtml-if> </STYLE> ----- The stylesheets should be regular zope methods with id's: "your_netscape_stylesheet" , and "your_other_stylesheet". >I am also sending two different stylesheets depending on the browser (IE or NS). Don't ask why! :) _______________________________________________ Zope maillist - Zope(a)zope.org http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )

2 1

ZMySQLDA-1.1.4 and MySQLdb-0.1.2
by Curtis Maloney 20 Apr '00

20 Apr '00

Greetings, Anyone who has tried to use these two products together may have noticed the patch ZMySQLDB.patch breaks on db.py Well, I've just hand rolled it in, and it appears to work. Here is a patch file i've made from the original file and the one i'm now using. Apply it from inside the ZMySQLDA directory to db.py -- Have a better one, Curtis. <dtml-var standard_work_disclaimer>

2 2

ZClasses and ZCatalog: reindexing problem
by Anthony Monta 20 Apr '00

20 Apr '00

Hi all, I've been trying to create a simple, searchable database of scholarly publications for a university department with a customized ZClass, ZCatalog, and the ZSearch interface but have run into two problems I cannot solve: 1) I can add a new catalog-aware class instance which the Catalog will pick up, but the properties of this new instance (author, pub_title, publisher, year, etc.) are not made available to search results; 2) the addition of this new instance prevents the ZSearch interface from returning results for any other query, even for ones that worked before the addition. I just don't know why this should be. I thought the problem lay with the constructor _add method, but I've read all the tutorials and done the code changes there: still no success. I then thought AlexR's suggestion to create two methods in the ZClass for editing property changes might have something to do with the plumbing of reindexing, but apparently not. I then thought Catalog's reindexing might be messed up by enabled subtransactions, so I disabled them -- but this didn't help either. I can snag the new instance's properties via DTML, so the problem must be with Catalog -- right? I just don't have the Python smarts to get into the source to see what's going wrong -- does anyone have any suggestions? People at this university are excited about Zope, and some influential eyes are following our website's development closely. Grateful for any help, Anthony Monta Department of English Louisiana State University apmonta(a)excite.com BTW, the site is www.english.lsu.edu -- open-source all the way with Linux and Zope, and no admin problems whatsoever. _______________________________________________________ Get 100% FREE Internet Access powered by Excite Visit http://freelane.excite.com/freeisp

1 0

RE: [Zope] newbie requiring assitance..acquisition
by Peter Bengtsson 20 Apr '00

20 Apr '00

This should work: <dtml-with foo> <dtml-var bar> </dtml-with> Where 'foo' is the "lower level" folder and 'bar' is a document or method in the "lower level" folder. -----Original Message----- From: zope-admin(a)zope.org [mailto:zope-admin@zope.org]On Behalf Of Kevin Gorman Sent: Thursday, April 20, 2000 12:54 PM To: zope(a)zope.org Subject: [Zope] newbie requiring assitance..acquisition To all, I have the basic concept of acquisition under my belt but have ran into a situation requiring me to draw upon DTML documents form a "lower level". I was just wondering how one would go about this in the most effiecient manner. I have used the PARENTS[n] method and am able to retreive these dtml documents but they reveal all of the HTML formatting.. where as when drawing from above I receive only the "html" formatted text. How can I combat this problem? Does it have somethings to do with setting the properties..? Thanks frustrated in NB, Kevin _______________________________________________ Zope maillist - Zope(a)zope.org http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )

1 0