- Zope - Zope lists

RE: [Zope] Has anyone tried authentication accross multiple serve rs?
by Jay, Dylan 09 Apr '99

09 Apr '99

> -----Original Message----- > From: Michel Pelletier [mailto:michel@digicool.com] > Sent: Thursday, 8 April 1999 23:36 > To: Phillip J. Eby; Jay, Dylan; 'zope(a)zope.org' > Subject: RE: [Zope] Has anyone tried authentication accross multiple > serve rs? > > > > > > -----Original Message----- > > From: Phillip J. Eby [mailto:pje@telecommunity.com] > > Sent: Wednesday, April 07, 1999 11:10 PM > > To: Jay, Dylan; 'zope(a)zope.org' > > Subject: Re: [Zope] Has anyone tried authentication accross multiple > > servers? > > > > > > At 11:29 AM 4/8/99 +1000, Jay, Dylan wrote: > > >I need this for a website I'm setting up so that users can > > download from > > >several different locations around the world. I don't want > > users to have to > > >type in their password twice. I presume there is no way to > > do this via basic > > >authentication which leaves cookies. Has anyone tried this? > > > > > > > I'm in the midst of figuring out how to do authentication > > with cookies. > > The only way I can see to get ZPublisher to work > > intelligently with cookies > > is to hack the "unauthorized" method of the ModulePublisher > > class so that a > > login page can be called. > > > > One caveat for your project: cookies will only work across > > servers if the > > servers share a common domain, e.g.: foo.bar.com and baz.bar.com. > > > > > > UserDb and etcUserFolder can both do cookie based > authentication. It's > not too tricky and kinda snazzy in that you can create your own > login/logout pages, etc. Check out the source of either > package for the > details. I've tried using cookie authentication with UserDB but so far can not get it to work. Everytime I try to login in it presents me with the normal basic authentication header. I believe this maybe something to do with permissions but so far can't figure it out. I am using IIS4 and have turned of basic authentication.

2 1

RE: [Zope] Has anyone tried authentication accross multiple serve rs?
by Brian Lloyd 09 Apr '99

09 Apr '99

> > I've tried using cookie authentication with UserDB but so far > can not get it > to work. Everytime I try to login in it presents me with the > normal basic > authentication header. I believe this maybe something to do > with permissions > but so far can't figure it out. I am using IIS4 and have > turned of basic > authentication. The first thing to do here is to make sure that it is really Zope causing the authentication challenge, or if it is IIS4. You need to have _all_ authentication off in IIS and permissions set to allow "everybody" to run the zope cgi. Can you log into Zope using the superuser name and password? If not, then IIS is attempting to handle authentication itself... Brian Lloyd brian(a)digicool.com Software Engineer 540.371.6909 Digital Creations http://www.digicool.com

1 0

Re: [Zope] Browsers & Backgrounds
by Robert OConnor 09 Apr '99

09 Apr '99

Thanks Chris, >Have you looked at the source being used by the browsers? ;-) Duh -- Use the source bob! It turns out that there were two (body background) tags in the source received by the browser. One is in the (standard_html_header) which I missed and the other was in the (index_html). I guess once IE4 sees the first (body b..) tag it ignores them later while NS45 makes changes for every tag it sees. -bobo connor bob(a)rocnet.com -----Original Message----- From: Christopher Petrilli <petrilli(a)amber.org> To: zope(a)zope.org <zope(a)zope.org> Date: Thursday, April 08, 1999 3:55 PM Subject: Re: [Zope] Browsers & Backgrounds >On Thu, Apr 08, 1999 at 03:28:06PM -0400, Robert OConnor wrote: >> I've tried renaming the file in the index_html and the file >> itself both from Netscape and IE 4. I've shut both browsers >> down and even redialed the ISP to get a new IP but >> the problem remains. >> >> Has anyone else seen this? >> Is there a way to capture the transactions between the >> browser and server to see what is going on? > >Have you looked at the source being used by the browsers? ;-) > >Chris >-- >| Christopher Petrilli ``Television is bubble-gum for >| petrilli(a)amber.org the mind.''-Frank Lloyd Wright >

2 1

Re: [Zope] UserDb/Authentication Questions
by Service Informatique CHSR 09 Apr '99

09 Apr '99

>Also, the way my site works, I would like to allow the user to >authenticate of their own accord, rather than wait until they try to I found that if you create a page wich define __name and __password, eg: **MyLoginPage** <form action=LoginSuccessfull method=post> <input type=text name=__name> <input type=text name=__password> <input type=submit> </form> **LoginSuccessfull** <p>You have logged in!</p> If __name and __password are correct, the user is automagically logged with that name and that password, and the LoginSuccessfull page is displayed. However, if the __name and the __password aren't correct, you get the unauthorized page. To Logout the user, MyLogoutPage expire the __ac cookie. However I didn't like these way of doing. So I wrote an exthernal method that compute an __ac value from two variables: name and password (not __name and __password, to avoid acl_users do the authentification itself), or return None if these are not correct. That way, if the result is not None, I set a cookie with name __ac and the value I got from the external method. You could write your own external method by looking at the source of UserDb.

1 0

Object DB Capacity
by Craig Villamor 09 Apr '99

09 Apr '99

We are currently in the process of building a site with Zope that we anticipate will have a large object database. We have some concerns about scalability as the database continues to grow. What is the maximum capacity of the Zope object database? At what point does performance begin to degrade? Is it possible to have multiple Zope servers, each with a subset of objects, working together to "load balance"? How about multiple object databases on one zope installation? Any help would be appreciated.

2 1

RE: [Zope] UserDb/Authentication Questions
by Jeffrey Shell 08 Apr '99

08 Apr '99

[SNIP!] > To facilitate this, I'd > like to put a > button on my main screen that says "Login" when the user is not > authenticated, and "Logout" when they are. I can make a link to > /company/acl_users/docLogin and /company/acl_users/docLogout > respectively, > but I figure there's a better, more Zopish way to do this. > Any ideas? I've > got the button part figured out (ie. I can easily change what > is shown on > the page based on whether they are logged in or not), I just > can't figure > out where to send them when they click it. *sigh* don't you love Outlook formatting? Anyways, I can't answer your other questions right offhand, but you can make a "logout" page very easily that doesn't even need to call the docLogout in the UserDB. Basically, you have to delete the cookie (which the default docLogout might not be doing in the current release). Using the following code effectively logs a user out when using cookie authentication.  Making an arbitrary "login" document is a little bit trickier. To ensure that the proper authentication is raised, make your own "docLogin" document that is protected (ie, Anonymous can't view it). This will raise the docLogin document in UserDB when the user clicks on it. You might want to do something like tracking the HTTP_REFERRER (REFERER?) header to return the user to the page they were on when they clicked the "login" link. You can even make your own form that mimics the docLogin form (submits the same parameters) whose action is a protected document. I've used this in a project where an unknown user needs to register, and part of that registration is a username and password. After they registered, they could enter the "members" area of the site and start working immediately, but I (a) wanted to keep that member area protected, and (b) didn't want to say to the user "Congratulations, now try out that new username and password by entering them again now!". Solution? I copied the <INPUT> tags from the UserDB docLogin form and changed their HTML type to "hidden" and set their value to the new username and password I had just acquired from the registration process, and set the target to the Member folder which required a Member role to View. It worked beautifully and gave me that resounding feeling of "mmm , Zope just kicks ass" (feelings of Zope kicking ass are of my personal opinion and does not necessarily reflect the views of Digital Creations. ;) .jPS

1 0

RE: [Zope] Whats the correct way...
by Michel Pelletier 08 Apr '99

08 Apr '99

> -----Original Message----- > From: raver(a)box.dust.za.net [mailto:raver@box.dust.za.net] > Sent: Monday, April 05, 1999 3:26 PM > To: zope(a)zope.org > Subject: [Zope] Whats the correct way... > > > Hi! > > First off all I want to apologize if this question is way off > topic here, > but I'm stuck and don't know where else to turn my question. > > Heres the situation: > > I've made a form to let people search a database where they > can choose wich > datafields is going to be shown in the result (this is done > by several > checkboxes). Now if I pass this forms data onto a ZSQLmethod that > handles the sql select query (variable names from the > checkboxes are handled > by ' - scentences') I end up with an error if > not all of the > checkboxes are checked out. > > What would be the correct way to have this handled? (Choose > what data to be > displayed) > You may find yourself in a situation where the attribute must exist in your DTML (and you want it to be a value or something else) but it may or may not be passed in by a calling form. To handle this, try:   ... (Then use data)   Here, if 'data' exists in REQUEST then it will override the default of ''. A rather sickening DTML construct like this is used in NotMail DTML in folder.dtml. Does this help? -Michel > Sture Lygren > > _______________________________________________ > Zope maillist - Zope(a)zope.org > http://www.zope.org/mailman/listinfo/zope > > (For developer-specific issues, use the companion list, > zope-dev(a)zope.org - http://www.zope.org/mailman/listinfo/zope-dev ) >

2 1

UserDb/Authentication Questions
by Jeff K. Hoffman 08 Apr '99

08 Apr '99

Hello everyone! I have been working on a site recently, and have come across a problem when using the UserDb product. Say I have a site as follows: + / + company - acl_users (UserDb) - index_html + events - index_html + members - index_html The data in the members folder is only accessible to users with the 'Members' role. The acl_users object, a UserDb instance contained in the company folder, contains login information for all the members of the site. When a user browses to /company/events/members, they get the login web form (I am using cookie-based auth.) The user logs in, and if all goes well, they arrive at the following URL: /company/events/members/events/members For some reason, UserDb or Zope is adding an extra events/members onto the URL. I can't figure out what I'm doing wrong. Also, the way my site works, I would like to allow the user to authenticate of their own accord, rather than wait until they try to access data they don't have permission to. This works better for a variety of reasons, on of which is because I can change the look of certain parts of the site based on their roles. To facilitate this, I'd like to put a button on my main screen that says "Login" when the user is not authenticated, and "Logout" when they are. I can make a link to /company/acl_users/docLogin and /company/acl_users/docLogout respectively, but I figure there's a better, more Zopish way to do this. Any ideas? I've got the button part figured out (ie. I can easily change what is shown on the page based on whether they are logged in or not), I just can't figure out where to send them when they click it. Any ideas? Thanks, jkh

1 0

Browsers & Backgrounds
by Robert OConnor 08 Apr '99

08 Apr '99

When I use this html tag: <body background="grytxtr7.jpg" bgcolor="#FFFFFF"> It shows up in Netscape 4.5 but not IE 4 as the expected background. (Win98) On another Non Zope site, this tag works fine with IE4. I've tried renaming the file in the index_html and the file itself both from Netscape and IE 4. I've shut both browsers down and even redialed the ISP to get a new IP but the problem remains. Has anyone else seen this? Is there a way to capture the transactions between the browser and server to see what is going on? -bobo connor bob(a)rocnet.com

2 1

ZServer won't run
by Philip Aylesworth 08 Apr '99

08 Apr '99

Well, I decided to take the plunge into ZServer. I installed it on my system but it won't run. I tryed the patch to start.py that was suggested for another ZServer problem but that didn't help. I assume that since I am using Zope 1.10.2 that I do not need to replace lib/python/OFS/Folder.py with the one suplied with ZSEever. I am running Zope 1.10.2 on Redhat Linux 5.2. My Zope directory is /usr/local/Zope I modified start.py as such: #!/usr/local/Zope/bin/python # configuration variables # IP_ADDRESS='192.168.1.16' HOST='pc16.regalint.com' DNS_IP='192.168.1.12' HTTP_PORT=9673 FTP_PORT=8021 PCGI_PORT=88889 PID_FILE='Zope.pid' MODULE='Main' LOG_FILE='ZServer.log' Here is what I get: [root@pc16 ZServer]# ./start.py Traceback (innermost last): File "./start.py", line 17, in ? from medusa import resolver,logger,http_server,asyncore File "./medusa/resolver.py", line 181, in ? import asyncore File "./medusa/asyncore.py", line 427, in ? import FCNTL ImportError: No module named FCNTL But it does exist: find .. -name FCNTL\* ../lib/python1.5/plat-linux2/FCNTL.pyc ../lib/python1.5/plat-linux2/FCNTL.py ../lib/python1.5/plat-linux2/FCNTL.pyo Can anyone help? Thanks, Phil A. ------------------------------------------------------------------- Philip Aylesworth Information Systems Manager phila(a)regalint.com PGP public key: http://www.regalint.com/PGPkeys/phila.html

1 0