- Zope - Zope lists

[ANNOUNCE] ZServerSSL and Encrypting Monitor
by Ng Pheng Siong 01 Feb '00

01 Feb '00

Hello, I am pleased to announce the release of M2Crypto 0.03. M2Crypto = Python + OpenSSL + SWIG. It makes accessible to the Python programmer DH, DSA, RSA, symmetric ciphers, message digests, HMACs and sufficient SSL functionality to implement servers and clients. Of interest to the Zope community will be the Zope 2.1.3-compatible HTTPS server and encrypting Medusa monitor, and XMLrpc-over-HTTPS. M2Crypto is available here: http://www.post1.com/home/ngps/m2 Feedback is most appreciated. -- Ng Pheng Siong <ngps(a)post1.com> * http://www.post1.com/home/ngps

1 0

RE: [Zope] cookie problem
by Martijn Pieters 01 Feb '00

01 Feb '00

> -----Original Message----- > From: Hung Jung Lu [mailto:hungjunglu@hotmail.com] > > Perhaps your problem is that you are not reading/writing your > pickled file by using the binary tag as in 'rb' or 'wb'. > > myFile = open('myFileName', 'rb') > myPickledString = myFile.read() > myFile.close() > > .... > > myFile = open('myFileName', 'wb') > myPickledString = urllib.unquote_plus( > REQUEST.cookies['myCookieName']) > myFile.write(myPickledString) > myFile.close() > Erm.. .you guys realizing that you are opening a gaping security hole here? A malicious someone can contruct any pickle they like and send it to your server. In theory you could send the pickle of a Medusa monitor handler that'd open a unsecured monitor server on any given port, and allow the malicious person to access your Zope process _unrestricted_. Just to name an example. Don't trust pickles from the web. It's the reason why Zope only allows imports from the filesystem. -- Martijn Pieters, Software Engineer | Digital Creations http://www.digicool.com | Creators of Zope http://www.zope.org | mailto:mj@digicool.com ICQ: 4532236 | PGP: http://wwwkeys.nl.pgp.net:11371/pks/lookup?op=get&search=0xA8A32149 -------------------------------------------

1 0

Zope & ZPyGreSQLDA
by Jatwood＠bwanazulia.com 01 Feb '00

01 Feb '00

I know this might seem crazy but I don't know what the syntax of the connection string is supposed to be for ZPyGreAQL (I looked all over, read the README, looked newsgroups and mailing lists). I have a PyGreSQL database called zope and a username of zopeid for that database. Any help would be great. Thanks, JMA ____________ Jake(a)atwood.org Ohh La La Dot Org

3 2

Re: Versions and FTP access
by John Eikenberry 01 Feb '00

01 Feb '00

Hello all, I was reading through the achives in relation to this issue, and I was wondering if anyone was working on a solution. Our designers use various tools to edit html and these tools will need to be able to publish into a zope version. So for versions to be of use to us, we absolutely need to be able to access a version through some non-web interface (either ftp, webdav or something else). If no one else is or has plans to work on this, we will have to do it (for Zope to be a viable long term solution). I'd like to discuss the possible solutions. I personally think making the version traversable via ftp is the best solution (though webdav might be better, I don't know much about it at this moment). Michel noted that there may be some problems with absolute_url, but I'm not sure I understand the problem for simple file access (put/get) via traversal. Thoughts? --- John Eikenberry [jae(a)kavi.com - http://zhar.net/] ______________________________________________________________ "A society that will trade a little liberty for a little order will deserve neither and lose both." --B. Franklin

2 1

RE: [Zope] Need help : Zope servers hanging.
by Rob Page 01 Feb '00

01 Feb '00

> That's *exactly* the situation I have! > It's a method that doesn't display any HTML headers (it does some DB > stuff though) and displays some HTML (including a table). It's called > as a code 'block' from a document I have. > > *Many* thanks for pointing that ought to me Sam. > > DC Folks: Would this constitute a bug, should I (or Sam!) file a > report with the Collector? I'd play it safe and stash this in the Collector... Tks, --Rob

1 0

ZMySQLDA weirdness
by Tony McDonald 01 Feb '00

01 Feb '00

Can anyone tell me why I'm getting this traceback in a ZMySQLDA product on a new Zope site I've put up? ZMySQLDA Import Traceback Traceback (innermost last): File "/home/nnle/MEDFAC_SERVER/lib/python/OFS/Application.py", line 387, in import_products product=__import__(pname, global_dict, global_dict, silly) File "/home/nnle/Zope-2.1.0b1-src/lib/python/Products/ZMySQLDA/__init__.py", line 106, in ? File "/home/nnle/Zope-2.1.0b1-src/lib/python/Products/ZMySQLDA/DA.py", line 108, in ? File "/home/nnle/Zope-2.1.0b1-src/lib/python/Products/ZMySQLDA/db.py", line 106, in ? ImportError: ld.so.1: python: fatal: libmysqlclient.so.6: open failed: No such file or directory The thing is, I have a MySQL library in /usr/local/python/lib/ and ... ...the path /home/nnle/Zope-2.1.0b1-src doesn't exist! :{ Tone

2 1

RE: [Zope] Need help : Zope servers hanging.
by Michel Pelletier 01 Feb '00

01 Feb '00

> -----Original Message----- > From: Tony McDonald [mailto:tony.mcdonald@ncl.ac.uk] > Sent: Monday, January 31, 2000 4:25 AM > To: Zope List > Subject: [Zope] Need help : Zope servers hanging. > > > Hi all, > I need some help here - over the past few days two different Zope > servers have gone into the 'hanging' state, where they don't reply to > further requests. When the first event happened I didn't take a > 'top', today, I've managed to get one. The process causing the > problem is 12482. From previous messages, I believe that the python > CPU can go up to 100%, obviously this isn't happening here. This > happened when I asked the Zope server to make a MySQL query. The > MySQL server is running fine and I can get to it from a command line > interface. > > Both servers are Zope 2.1.2 source distributions running > under Solaris 5.6 Note that 2.1.2 has a known hanging problem under high load. This bug is fixed in 2.1.3 -Michel

2 1

[ZGotW] Issue #2 Entry
by Zope Guru of the Week 01 Feb '00

01 Feb '00

=================================================================== Issue #2 -- How to Import a Static Web Site into Zope =================================================================== Status: Open Zen Level: Novice (1/8) Keywords: Management Interface Submitted by: ithomas christmas(a)mail.sd70.bc.ca ------------------------------------------------------------------- How can one most easily (with the least typing) import an existing static website into Zope? The site contains: * image files * multiple HTML/JavaScript files including internal and external links After doing it by hand for a small site I decided there had to be better way. ------------------------------------------------------------------- Entry from: Pam Crosby pam(a)digicool.com ------------------------------------------------------------------- Using the load_site.py program shipped with Zope works for images files as well. I have found in my experiences with the program, uploading compressed files causes errors. I load compressed files individually. -------------------------------------------------------------------

1 0

changing the default document
by Eron Lloyd 01 Feb '00

01 Feb '00

Hey guys, I wanted to change the default method from index_html to index_dtml. I did the work-around by adding the top-level "<dtml-var index_dtml>" trick, but I was wondering where within the source could I permanently change this? Also, is there an easy way that I could make Zope add an index_dtml instead of index_html each time I go to add a folder that needs a public interface? I kinda looked at the source but I'm not real good with Python (yet), so it might have slipped me by. Thanks in advance, Eron

4 6

Zope and proxy servers
by Alexander Limi 01 Feb '00

01 Feb '00

Zopistas, I recently stumbled over a document that shows how to run ZServer via mod_proxy in Apache(1). Link to the document at the bottom(2). So I thought this might be the ideal solution for us, as we don't need any of the standard web-server functions, as the whole site is made in Zope. (with a turnaround time like no other project I've ever attempted :) So, if we set up the Squid(3) proxy/webcache to forward all requests to port 8080 to port 80, is there anything in particular to watch out for? If I understand the documentation correctly, this will both be the fastest solution (eliminating FastCGI/PCGI and the Zope.cgi issue entirely), and simultaneously allow us to run other Apache sites on the box (for other domains), therefore also being the most flexible solution from our standpoint. Please comment if I'm right or wrong on this. Regards, Alexander Limi http://mp3.no PS: please CC this to me if you answer, because of some stupid filtering done on our univerity network, we can't use our MXs anymore, and we haven't got around to setting up a new mailinglist solution yet. Yeah, procmail, I know :) (1) http://www.zope.org/Members/anser/apache_zserver/ (2) Yeah, I know, to much time on alt.sysadmin.recovery. Now where did I put that LART... (3) http://www.squid-cache.org/

2 2