- Zope - Zope lists

RE: [Zope] Solaris 8 issue?
by Chris McDonough 04 Jan '00

04 Jan '00

This is normal... don't sweat it. Chris McDonough mailto:chrism@digicool.com Digital Creations http://www.digicool.com Publishers of Zope http://www.zope.org > -----Original Message----- > From: Richard Otten [mailto:rotten@colltech.com] > Sent: Tuesday, January 04, 2000 3:02 PM > To: zope(a)zope.org > Subject: [Zope] Solaris 8 issue? > > > Hi, > > I recently (earlier today) installed Zope for the first time. > I am installing it on an Ultra 1, running Solaris 8. > > For my first attempt, I installed the Solaris 2.6 binary version. > It seems to start correctly, however I do get this error when it > kicks off: > > 2000-01-04T19:33:37 PROBLEM(100) ZServer Computing default hostname > > So, not sure what might cause this error I blew away my > install, grabbed > the source, and built it myself (with gcc as the compiler). > > I still get that error. > > A quick search of the web pages and the list archives did not yield > anything that jumped out at me. (It was a rather cursory search...) > > Is there a list of ZServer errors somewhere and what they > might mean? > > I did a little 'grepping' through the source and didn't > find the error. > Again, I could have just looked in the wrong place. > > 1) Is this really a problem, or does it show up for everyone? > 2) Is anyone else successfully using Zope with Solaris 8? > Any 'gotcha's'? > > -- > > This looks like some cool stuff. I am really looking > forward to diving > in and getting things really going. > > -- > Rick Otten > rotten(a)colltech.com > O==+ > > > _______________________________________________ > Zope maillist - Zope(a)zope.org > http://lists.zope.org/mailman/listinfo/zope > ** No cross posts or HTML encoding! ** > (Related lists - > http://lists.zope.org/mailman/listinfo/zope-announce > http://lists.zope.org/mailman/listinfo/zope-dev ) >

1 0

browser security
by Timothy Wilson 04 Jan '00

04 Jan '00

Hi everyone, Here's a quick security question. I'm using ZServer w/ Apache. Someone pointed out to me today that it's possible to access a site like this: http://username:password@mysite.com/ and the user is logged in automatically. Apparently there are cracking tools available that will attempt to guess passwords using this method thereby gaining access to the system. Is there any easy fix for this? -Tim -- Timothy Wilson | "The faster you | Check out: Henry Sibley H.S. | go, the shorter | http://slashdot.org/ W. St. Paul, MN, USA | you are." | http://linux.com/ wilson(a)visi.com | -Einstein | http://www.mn-linux.org/

2 1

Solaris 8 issue?
by Richard Otten 04 Jan '00

04 Jan '00

Hi, I recently (earlier today) installed Zope for the first time. I am installing it on an Ultra 1, running Solaris 8. For my first attempt, I installed the Solaris 2.6 binary version. It seems to start correctly, however I do get this error when it kicks off: 2000-01-04T19:33:37 PROBLEM(100) ZServer Computing default hostname So, not sure what might cause this error I blew away my install, grabbed the source, and built it myself (with gcc as the compiler). I still get that error. A quick search of the web pages and the list archives did not yield anything that jumped out at me. (It was a rather cursory search...) Is there a list of ZServer errors somewhere and what they might mean? I did a little 'grepping' through the source and didn't find the error. Again, I could have just looked in the wrong place. 1) Is this really a problem, or does it show up for everyone? 2) Is anyone else successfully using Zope with Solaris 8? Any 'gotcha's'? -- This looks like some cool stuff. I am really looking forward to diving in and getting things really going. -- Rick Otten rotten(a)colltech.com O==+

2 2

RE: [Zope] IE 4/5 error
by Martijn Pieters 04 Jan '00

04 Jan '00

Please keep copying the Zope list. I may not always be able to answer, and others might want to learna bout this or have insights of their own. > Martijn Pieters wrote: > > Generally, IE is very precise at interpreting the HTTP > standard. It is > > quite probable that your app has an error somewhere that Netscape > > glosses over. > > > One way to you could diagnose this, is by using a HTTP tracer like > > TracePlus32 Web Detective (a demo can be downloaded from > > http://www.sstinc.com/) which will show you exactly what > Netscape and > > Explorer send over the wire, and what answers Zope gives. > This is much > > easier than using a telnet session and typing in your HTTP requests > > manually. It should at least show you what faulty requests > IE sends, and > > from there interpret how IE comes to the conclusion it > should send those > > requests. > > Thanks Martijn! > > I didn't think I yet had enough Zope Zen to right something that a > browser couldn't understand! > > I'll take a look and see what I can find out. Since the code > that causes > the error is very short, I'm going to post it here. > > > ==================================8<===================== > <dtml-var standard_html_header> > > <h1><dtml-var title_or_id></h1> > <h3>Welcome to the Far West Fibers Scale System</h3> > > <strong>Please select the area you would like to work in...</strong> > > <form action="" method="POST"> > <table border="0"> > <tr> > <td align="right"> > <input type="submit" name="Tickets/TicketForm:method" value="Scale > Entry"> > </td><td valign="bottom"> > <a href="Help/HelpforScaleEntry"><h6>Help for Scale Entry</h6></a> > </td> > </tr> > <tr> > <td align="right"> > <input type="submit" name="Suppliers/SupplierForm:method" > value="Suppliers"> > </td><td valign="bottom"> > <a href="Help/HelpforSuppliers"><h6>Help for Suppliers</h6></a> > </td> > </tr> > <tr> > <td align="right"> > <input type="submit" name="Customers/CustomerForm:method" > value="Customers"> > </td><td valign="bottom"> > <a href="Help/HelpforCustomers"><h6>Help for Customers</h6></a> > </td> > </tr> > <tr> > <td align="right"> > <input type="submit" name="Grades/GradeForm:method" value="Grades"> > </td><td valign="bottom"> > <a href="Help/HelpforGrades"><h6>Help for Grades</h6></a> > </td> > </tr> > <tr> > <td align="right"> > <input type="submit" name="Categories/CategoryForm:method" > value="Categories"> > </td><td valign="bottom"> > <a href="Help/HelpforCategories"><h6>Help for Categories</h6></a> > </td> > </tr> > </table> > </form> > <dtml-var standard_html_footer> > ==================================>8===================== > > As I look at this, I think I know what the problem is, and it is a > subject I have been meaning to ask about but haven't. > > I'd be willing to bet that the problem is caused because the Form's > method argument is blank. I did this because I use the > name="form:method" syntax for each of my buttons, and because > I saw that > the URL in the method field was prepended to the URL I was actually > calling. This seemed to be causing some weird interactions, so I just > left the method field blank and the weirdness cleared up. > > What are the pros and cons of using the name="form:method" > type of call > versus using a method="form" call and then calling other > documents based > on the values of the various submit buttons? Hmm... You use the :method modifier here. I know that a / in the method name is tolerated, but it has some influence on the setting of the BASE URL. You'll still need to use a tracer to identify how this goes wrong with Internet Explorer. It could be that the slash is wrongly escaped, or the set base is in error. As you have not included the traceback, I cannot diagnose this properly. The :method modifier is especially handy in forms whose contents may have to be sent to different methods of an object. You only have to specify the objects URL in the action attribute of the form tag, and give the submit buttons appropriate names, and Zope makes sure that the contents of that one form will go to the appropriate method. In your case, it would be better and more readable if you made all the different buttons into individual form objects, each with their own action attribute. You are not trying to send the contents of one form to different Zope object methods depending on what action the user performed. You HTML would look something like this: <td align="right"> <form method="POST" action="Tickets/TicketForm"> <input type="submit" value="Scale Entry"></form> </td><td valign="bottom"> -- Martijn Pieters, Software Engineer | Digital Creations http://www.digicool.com | Creators of Zope http://www.zope.org | mailto:mj@digicool.com ICQ: 4532236 | PGP: http://wwwkeys.nl.pgp.net:11371/pks/lookup?op=get&search=0xA8A32149 -------------------------------------------

2 1

RE: [Zope] .htaccess type authentication
by Michel Pelletier 04 Jan '00

04 Jan '00

The Content Managers Guide contains examples of this and other features of Zope's excellent security model: http://www.zope.org/Documentation/Guides/ZCMG-HTML/ZCMG.5.html -Michel > -----Original Message----- > From: darryl(a)igor.penguinpowered.com > [mailto:darryl@igor.penguinpowered.com] > Sent: Tuesday, January 04, 2000 2:09 PM > To: zope(a)zope.org > Subject: [Zope] .htaccess type authentication > > > I am not clear on how to setup a section of my site that is only > accessable via a password (as I would using Apache and > .htaccess). I am > using the ZServer. > > I have tried unchecked the View options under the security > tab, but this > doesn't do it. Can someone give me a kick? > > -D > > !(wired)?(coffee++):(wired) > > > > > _______________________________________________ > Zope maillist - Zope(a)zope.org > http://lists.zope.org/mailman/listinfo/zope > ** No cross posts or HTML encoding! ** > (Related lists - > http://lists.zope.org/mailman/listinfo/zope-announce > http://lists.zope.org/mailman/listinfo/zope-dev ) >

1 0

aq_explicit
by kent＠tiamat.goathill.org 04 Jan '00

04 Jan '00

What is the status of aq_explict and Zope 2.0.1 ? > - There is a new attribute, aq_explict that converts an implicit > (or any other) wrapper to an explicit wrapper. This means that > you can get a version of an object that does not implicitly acquire. > For example to see if an object has an unacquired attribute, foo, > you'll be able to: > >  > ... aq_explicit does not prevent acquisition with all objects I've tried. With the above example, if 'foo' is not in the current folder, yet is in the parent folder, the example still succeeds. I.e. there is no difference in behavior with or without aq_explicit. Same holds true for <dtml-with aq_explicit> Am I misinterpreting the purpose of aq_explicit?

1 0

db connection question
by Philip Corp 04 Jan '00

04 Jan '00

Is there a way to pass SQL directly to an odbc database connection from an external method in Zope 2.1.1? I have tried the following: def someMethod(self): r = self.my_odbc_connection.query('select * from some_table') However, it just returns a generic server error. Any help would be really appreciated. Thanks. Phil

1 0

browse through microsoft proxy server
by technology＠mylinuxisp.com 04 Jan '00

04 Jan '00

strange: (inside lan) <> winnt proxy server <> apache + zope <> router <> internet the apache server is on same ip segment and same hub as router. I put the apache/zope server on a fixed ip address. When browsing from inside the winnt proxy server to the apache default page there was no problem viewing it. however when I pointed it to apache/zope I got a microsoft client install page. >From the internet I can view zope all day long. From the same hub as the apache server I can view zope also. If I put the the apache server inside the winnt proxy server like so. apache server on (inside lan)<> winnt proxy server <> router <> internet I can view zope without any problems. Has anyone ever had these kinds of symptoms? cj technology.nospam(a)mylinuxisp.com

1 0

.htaccess type authentication
by darryl＠igor.penguinpowered.com 04 Jan '00

04 Jan '00

I am not clear on how to setup a section of my site that is only accessable via a password (as I would using Apache and .htaccess). I am using the ZServer. I have tried unchecked the View options under the security tab, but this doesn't do it. Can someone give me a kick? -D !(wired)?(coffee++):(wired)

1 0

Contract position available - Please read
by mmurphy＠newmill.com 04 Jan '00

04 Jan '00

To whom it may concern: My name is Mike Murphy and I represent New Millennium Inc., a leading supplier of Software consultants and IT professionals to end clients across the country. We presently have a client that is looking for a consultant with solid ZOPE experience to work as the ZOPE lead on an e-commerce project. I've taken the liberty of outlining the requirement below. Please have a look at it and let me know if you have any interest in persuing this assignment. I can be reached at the numbers below. Location: Ashland, MA Duration: 3 months Employment requirement: MUST be a U.S. citizen or have current employment visa for the U.S. (New Millennium is not set-up to sponsor H1-B work visas.) Description: Our client seeks a web developer experienced with ZOPE (Z object publishing environment), an open market web contact management tool. Zope is the leading Open Source web application server. Zope enables teams to collaborate in the creation and management of dynamic web-based business applications such as intranets and portals. Zope makes it easy to build features such as site search, news, personalization, and e-commerce into your web applications. Project is a web application (financial services) being developed in house by a team utilizing VB 6.0, SQL SV 6.5 and 7.0, Visual Foxpro, and Perl Script. (however none of these skills are REQUIRED as this consultant will act as the ZOPE lead to implement the project and perhaps some knowledge transfer to 1 other individual). Work mostly independently. Prefer to do all or most of the work on site but open to taking some work home. Requirements: 6mo+ (minimal, the more the better) ZOPE experience (practical web development with it). Any Visual Foxpro and Perl big plus. VB, SQL Server and financial applications a plus. Need someone who knows ZOPE and can implement it into a project. Thanks for taking the time to read about this position. If you are not available for this assignment, perhaps you may know of a colleague or friend that can handle this assignment. We offer a referral bonus if you refer someone to us that we place in this position. Please make sure they mention your name to me so I can properly track the placement. Best regards. Mike Murphy New Millennium Inc. 800-381-9507(v) 800-381-8708(f) 401-792-0997 mmurphy(a)newmill.com

1 0