- Zope - Zope lists

how to capture a password
by Cornelis J. de Brabander 17 Jan '00

17 Jan '00

I have a zope powered site that uses basic authentication. In addition to the acl_users folder I have a database with user information, like name data and email address. Within this setup I want to give the user the opportunity to have his/her password sent by email in case (s)he has forgotten. How can I solve this problem within the current setup. I can't find a method that delivers a user's password and I fear it does not exist. Cornelis J. de Brabander

3 4

ZOracleDA
by Nemeth Miklos 17 Jan '00

17 Jan '00

I am stress-testing ZOracleDA, and found it almost perfect for large web applications: it supports multi-threaded access and a kind of connection pooling, and quite reliable. However, there are two points, which makes me a bit anxious: (1) Doug Hellman mentioned that ZOracleDA does not stop long running requests when the user cancels the HTTP request. Is it possible for a malicious cracker to conduct a denial-of-service attack exploiting this behaviour? I think this is not a ZOracleDA specific problem, but a general issue with Oracle. Do other technologies (PHP, mod_perl, etc) have a solution for this problem? Is this a real threat? (2) The ZSQL technology does not use bind variables, instead, literal values are included into the SQL statemets. This may be a big problem for Oracle. Oracle has a very primitive mechanism to determine if an SQL statement be parsed or there is one in its cache: it simply compares the SQL statement strings. If you use bind variables (eg. insert into t(c1,c2) values(:bv1,:bv2)) the SQL statement string is always the same, if you use literals (eg insert into t(c1,c2) values('xxx',512.67)) Oracle is forced to parse all SQL statements. We benchmarked this behaviour and found the 20 - 30 % more Oracle resources are used for this extra parsing. Is there a way to force ZOracleDA to use binding instead of literal substitution? NM

4 4

RE: [Zope] Acquisition on dynamically created objects
by Brian Lloyd 17 Jan '00

17 Jan '00

> I have a class in my zope hierachy which implements an __getitem__ > method and return objects which are created on the fly (or taken from > a volatile (_v_) dictonary). > > What do I have to do if I want those objects to take part in the > acquisition machinery. > > Sascha Hi Sascha - Any time that access to your subobjects is not done through a common getattr(), you need to take an extra step to keep the acquisition chain intact. The Acquisition base classes (such as Acquisition.Implicit) override getattr() handling and automatically handle the wrapping of the resulting object when an attribute is accessed via getattr(). In your case, the resulting object is not being "wrapped" correctly since you are not accessing the object via getattr(). What you need to do is: a. make sure the objects in your _v_ dict are acquirers (i.e. that they have Acquisition.Implicit or another acquisition class as a base class) b. instead of returning the actual object that you get from your _v_ dict, you need to call the __of__ method of that object, passing 'self' as the acquisition 'container'. That will return the object "wrapped" in the context of "self" (the "container"). You will then return the _wrapped_ object from your __getitem__ method. A quick example: class Item(Acquisition.Implicit): # Just a simple item class def __init__(self, id): self.id=id class Container(Acquisition.Implicit): # A simple container. We have an _v_dict dictionary # where we keep some instances of Item. def __init__(self): # heres a dummy attribute that we'll define to # test to make sure our items acquire it... self.foobar='foobar' # create some Item instances in our _v_dict... self._v_dict={} self._v_dict['one']=Item('one') self._v_dict['two']=Item('two') def __getitem__(self, key): # implement getitem, and make sure that the resulting # objects are correctly wrapped by 'self' for acquisition. result=self._v_dict[key] result=result.__of__(self) return result Hope this helps! Brian Lloyd brian(a)digicool.com Software Engineer 540.371.6909 Digital Creations http://www.digicool.com

2 1

dtml-tree and branches
by Anton Gyllenberg 17 Jan '00

17 Jan '00

My namespace gets lost when I try to use the `branches' attribute of the `dtml-tree' tag. Example: <dtml-tree branches=some_method> ... </dtml-tree> `some_method' is a dtml-method with the following template: <dtml-return "objectValues(['Folder', 'DTML Document', 'File'])"> Rendering the dtml-tree results in: Error Type: NameError Error Value: objectValues In this particular case I could use brances_expr="objectValues(['Folder', 'DTML Document', 'File'])", but I plan on augmenting the branch-list with some other objects before returning from `some_method'. `some_method' works fine if I call it using <dtml-var "some_method(_.None, _)">, but apparently this is not the way the method is called by the dtml-tree tag. I also tried <dtml-tree branches_expr="some_method(_.None, _)"> Unfortunately, it seems that the namespace where branches_expr is evaluated doesn't contain the namespace variable `_'. What am I doing wrong? How can I use a DTML-method to calculate the list of branches? By the way, if the branches attribute names a nonexistent method, the tree ends up empty without triggering any errors. I really would expect a name error here. Is this a bug? <dtml-tree branches=no_such_method>...</dtml-tree> -> empty tree. Yes, and I'm using: Zope version: Zope 2.1.2 (source release, python 1.5.2, linux2) Grateful for any help, -- Anton Gyllenberg <anton(a)lifix.fi> +358-50-3412792

1 0

ZServer and virtual hosting via Apache + ActiveImage woes.
by Chris Gazley 17 Jan '00

17 Jan '00

Hi there folks, I'm having a bit of trouble in two areas and was wondering if you might be able to give me a hand. First problem: I go to my zite zite_a.mydomain.com/myusername/ which is a zope zite on port 8080 of a machine running Apahe to take care of the virtual hosting. It lets me through to my zite but it translates the URL to zite_a.mydomain.com:8080/myusername/ and I'd like to get it to show up properly, without the ":8080". I don't know too much about this vhost stuff so let me explain it as my friend did. My hostname is an alias for his machine so when i go to my hostname it passes it along to his machine which then gets Apache to pass it along to my zope zerver on port 8080. That all works just fine...technically. The name just gets screwed up. So what i would like to know is...Is this the properway to get Apache and Zope to do what I want it to do? And if not, how? Second problem: I'm using ActiveImage to make a wee menu on my page. When people enter my site without adding "index_html" to zite_a.mydomain.com/cgazley/ the image for HOME is active(in the pressed state) on every page. I've tried various things in the config for that image and cannot get it to act properly unless the full absolute path with index_html is entered. Whatever shall I do? Thanks in advance, Chris Gazley, GoP

1 0

[Fwd: [Zope] mod_rewrite to a different port?]
by Maarten Slaets 17 Jan '00

17 Jan '00

Maarten Slaets wrote: > > Erick Mechler wrote: > > > > Is it possible to use mod_rewrite and have Zope appear on a different > > port? Here's some more info... > > > > Right now I can go to http://my.domain/cgi-bin/Zope/ and see my site > > through Zope. However, I would like to define a RewriteRule to have > > this > > point to http://my.domain:8080. The reasoning for this is because all > > i think it's like this: > > <VirtualHost localhost:8080> > blah > </VirtualHost> > > localhost should be your web server's ip > > > of > > the images in the Zope site are defined using absolute path names with > > respect to the document root. Therefore, all of the images in the > > http://my.domain/cgi-bin/Zope/ site don't work. > > > > I am not using ZServer, but rather Apache + Zope + SSL. > > > > Any help/links/beatings-because-this-is-a-dumb-question will be much > > appreciated. > > > > Regards, > > Erick Mechler > > > > _______________________________________________ > > Zope maillist - Zope(a)zope.org > > http://lists.zope.org/mailman/listinfo/zope > > ** No cross posts or HTML encoding! ** > > (Related lists - > > http://lists.zope.org/mailman/listinfo/zope-announce > > http://lists.zope.org/mailman/listinfo/zope-dev ) > > -- > Maarten Slaets > Web Developer > KPNQwest Belgium > http://www.fonky.com/vcard/MaartenSlaets/ -- Maarten Slaets Web Developer KPNQwest Belgium http://www.fonky.com/vcard/MaartenSlaets/

1 0

Image upload fails on Linux PIII/550
by Michael Hamilton 17 Jan '00

17 Jan '00

I wonder if anyone else is having a similar problem: I have an identical setup on a Pentium PII 266 and a PIII 550. Both running Caldera Open Linux 2.3 with python 1.5.2 and Zope 2.1.2. Both Python and Zope were built from source. Caldera 2.3 uses glibc-2.1.1 egcs-2.91.66 19990314 (egcs-1.1.2 release). Creating new image objects on the PII works fine, i.e. I can view the image after creating it. Creating a new image object on the PIII results in a broken image. I have since transfered the PIII's Python and Zope installations to the PII. The images originally created on the PIII are still broken, but I have no problem creating new ones. I checked for differences in the RPMS installed on both boxes, and I've checked that the environment and user setups are the same. I now suspect there could be a problem in the libraries or compiler, or possibly an architectural assumption/bug in the Zope or Python code. I've seem other image loaded problems reported recently, are these people also using PIII's? I'm working around the problem by putting the images in directory and using the LocalFS product to make them available within Zope. --- Michael Hamilton ( http://home.clear.net.nz/pages/michael.hamilton )

1 0

mod_rewrite to a different port?
by Erick Mechler 17 Jan '00

17 Jan '00

Is it possible to use mod_rewrite and have Zope appear on a different port? Here's some more info... Right now I can go to http://my.domain/cgi-bin/Zope/ and see my site through Zope. However, I would like to define a RewriteRule to have this point to http://my.domain:8080. The reasoning for this is because all of the images in the Zope site are defined using absolute path names with respect to the document root. Therefore, all of the images in the http://my.domain/cgi-bin/Zope/ site don't work. I am not using ZServer, but rather Apache + Zope + SSL. Any help/links/beatings-because-this-is-a-dumb-question will be much appreciated. Regards, Erick Mechler

1 0

Howto use Zope and IIS together in remote user mode
by Ava 17 Jan '00

17 Jan '00

Hello, I've written an HOWTO explaining how to setup Zope and IIS together in remote user mode. It is available at http://www.zope.org/Members/jephte/HOWTO/IIS_and_Zope_in_REMOTE_USER_mode Regards, Jephte CLAIN minf7(a)educ.univ-reunion.fr

1 0

Re: Sybase and locale!
by Dave Cole 17 Jan '00

17 Jan '00

>>>>> "hjl" == Hung Jung Lu <hungjunglu(a)hotmail.com> writes: hjl> I just saw another message in the Python eGroup list regarding hjl> Sybase installation problem with the locale. I had the same hjl> problem while dealing with Sybase on Zope. So I guess I'd post my hjl> own message again here, together with the other person's hjl> message. In short, when installing Sybase on Linux machines, MAKE hjl> SURE THAT YOU HAVE THE RIGHT LOCALE INFO IN YOUR locales.dat hjl> FILE. I guess in the Zope Sybase README.txt file (both on-line hjl> and in the distribution) hjl> http://www.zope.org/Products/DA/SybaseDA/README.txt Hmmm... I just had a look at the Zope Sybase stuff. If I had known that SybaseDA existed, I probably would not have written my module. I had been using Python for less than a month when I wrote my module, (same goes for Sybase). hjl> it would be a good idea to add a line of comment regarding the hjl> locale. (As simple as asking the user to double check the locale hjl> environment variable LC_ALL, and make sure that his/her hjl> locales.dat file includes the right locale name for his/her hjl> machine platform.) hjl> (A side comment: Dave Cole just release a new Python Sybase hjl> module, and his version is 0.4 hjl> http://www.egroups.com/group/python-list/75697.html? hjl> http://www.itga.com.au/~djc/sybase.html hjl> I don't know whether there is a duplication of effort here. But hjl> it would be good if Digicool and Dave could coordinate a bit. Looking at the Digicool module, they were a lot more clever than me. They did a fairly thin C wrapper on top of the relevant Sybase libraries, then implemented all of the higher level code to drive the libraries in Python. I wish I had been that clever. hjl> As I am having some glitches using Sybase from Zope, I may hjl> attempt to access Sybase directly from Python.) If my stuff does not work, you have to play with C code. If the Zope stuff does not work, you can play with the Python code quite a bit to hopefully make it work. >> I do not know if this has been said in any of these two groups >> before, but here's a bit of advice: If you try to compile ctsybase >> python module to use with Sybase under Linux (or any other OS, for >> that matter) and get a core dump when you try to import it (doesn't >> matter if it's statically linked or a dynamic module), make sure >> your locale (LC_ALL env. variable) is available in sybase's >> locales file (locales/locales.dat). It took me some three hours >> yesterday night to locate the problem (thanks, redhat, for >> stripping the python executable and cut the way to valuable >> debugging information :-)). If your locale is not available, either >> change locale or add it to the locales file as an ``alias''. After playing around with ctsybase module for a while I decided to build my own. I had fixed up a couple of problems in ctsybase, and was still getting seg-faults. I also needed to have bulkcopy capability, and realised that it would not be too hard to start again from the example code that Sybase provide. - Dave

1 0