- Zope - Zope lists

Re: [Zope] Trying to install Zope2-2.12.0b2 on Windows - Progess Report
by martin.gfeller＠comit.ch 22 Jul '09

22 Jul '09

Dear all I've managed to install it, largely thanks to the hint from Andreas Jung. > I haven't got a C compiler installed - I assumed the purpose of the Zope Windows egg was that > I wouldn't need to compile? I found all the required packages on PyPI - but in two cases, the latest version didn't have a Windows egg. I changed requires.txt for the two packages to require a specific version, which have a Windows egg. This installed zope.security == 3.6.0 and zope.hookable == 3.4.0 without problems. My Questions: - Will the final Zope 2.12 egg have specific versions for its dependencies (otherwise, how do you get consistent installations)? - Is there an option in SetupTools that ignores versions of packages which would need to compile? This could be very useful for Windows users, who are afraid to compile. Otherwise, most things seem to run smoothly with Zope 2.12.0.b3 / Py 2.6 under Windows, apart from a few changed imports in (legacy) Products such as GroupUserFolder. Thanks again, and best regards, Martin

3 4

Question about ZSyncer
by Ajay Deshpande 22 Jul '09

22 Jul '09

Hi All: I would like to know if the ZSyncer product can sync data between two DBs on the same instance rather than two instances themselves. Any help is greatly appreciated. TIA, R -- "And the trees are all kept equal By hatchet, axe, and saw"

2 1

HTTP Request Denial of Service Vulnerability
by TsungWei Hu 21 Jul '09

21 Jul '09

I have a Plone 3.2.3 site that runs with Zope 2.10.8 and receive a security notice as follows. Is it sufficient to fix this just installing http://www.zope.org/Products/Zope/Hotfix-2008-08-12 ? Thanks, /marr/ = Name = Zope HTTP Request Denial of Service Vulnerability = Description = A vulnerability in Zope may allow a remote attacker to manually shutdown the system. = Observation = The Zope Web Content Management system has been identified with a critical denial of service vulnerability. A malicious attacker could manually shutdown the target system remotely via a custom web HTTP field request. This vulnerability is especially dangerous as the "kill" packet can be completely forged thereby increasing the difficulty when tracking would be intruders and attackers. = Recommendation = Although the Zope development environment is one of the largest and most widely supported open source web content management solutions, it has been plagued with exploitable vulnerabilities. Due to the nature of the software and shear number of vulnerabilities, Foundstone Labs recommends you consider utilizing a different content management solution and at a minimum upgrade your software. Zope updates can be freely downloaded from www.zope.org

5 8

Pierugo Massolo/IT/ITC/ALSTOM is out of the office.
by pierugo.massolo＠itc.alstom.com 20 Jul '09

20 Jul '09

I will be out of the office starting 20/07/2009 and will not return until 31/07/2009.

1 0

Looking to increase confidence in my Backups
by Cristopher Ewing 20 Jul '09

20 Jul '09

Ho there, I've got a backup strategy that seems to be working fine for me, but I'm ever looking for ways to increase confidence that the backups I'm making of Data.fs are actually functional and can be restored from properly. To that end, I was reading some info on this page: http://wiki.zope.org/ZODB/FileStorageBackup and playing with the fstest and fsrefs scripts referenced there. I've discovered a problem (I think). Here's the scenario: $ python fstest.py -v Data.fs Traceback (most recent call last): File "fstest.py", line 228, in <module> main() File "fstest.py", line 215, in main VERBOSE = VERBOSE + 1 UnboundLocalError: local variable 'VERBOSE' referenced before assignment The same error arises in using fsrefs, although there the line where the error is raised reads VERBOSE += 1 By changing the declaration of VERBOSE from VERBOSE = 0 to VERBOSE = 1 the error goes away, but of course you always get verbose output, which we don't really need or want for automated integrity checks, do we? Am I using the right tool for this job? Is there a better way out there to create automated integrity checks of Data.fs files restored from repozo-generated backups? Thanks C ******************************** Cris Ewing Webmaster, Lead Developer Department of Radiology Web Services University of Washington School of Medicine Work Phone: (206) 616-1288 Cell Phone: (206) 708-9083 Pager: (206) 559-2306 E-mail: cewing(a)u.washington.edu Web: http://www.rad.washington.edu *******************************

1 0

zip_safe flag problem
by Jonas 20 Jul '09

20 Jul '09

Hey! I`m trying to build distro from package as uncompressed egg dir by setting 'zip_safe = false' in setup.py, but setuputils keeps making ziped version of distro anyway, that i don`t want. Any ideas? -- Grüße, Jonas

2 2

ZSyncer-0.71 problems
by Dennis Allison 20 Jul '09

20 Jul '09

Zope 2.11, Python 2.4 The authentication issue has been resolved. Our Zopes run with Pound as a reverse proxy front-end. Current versions of Pound demand conformity to the http protocol which ZSyncer violates. The error returned was interpreted incorrectly as an Authentication Error. Connecting directly within the subnet resolved that problem. Now there is another problem. My setup has at the source machine has user:pass@<target-url><target-port>/zsyncerinstance as the destination and selects the ConnectionMgr and relative paths. The user:pass is a special user for transfers and has Manager permissions. In our setup, the zsyncerinstance is in the root directory so it should make no difference. Experimentally, it makes no difference--unchecking the relaive feature throws the same error. "Sync" throws an error with a traceback: # EOFError # # Traceback (most recent call last): File "/opt/Zope2.11/lib/python/DocumentTemplate/DT_Try.py", line 149, in render_try_except result = render_blocks(self.section, md) File "/opt/Zope2.11/lib/python/DocumentTemplate/DT_Util.py", line 196, in eval return eval(code, d) File "", line 0, in ? File "/opt/zope/zinstances/xxx/Products/ZSyncer/ZSyncer.py", line 438, in manage_compare include_base=1) File "/opt/zope/zinstances/xxx/Products/ZSyncer/ZSyncer.py", line 991, in _compare_path dest_base_info, dest_sub_info = self._getRemoteList(remote, path) File "/opt/zope/zinstances/xxx/Products/ZSyncer/ZSyncer.py", line 1211, in _getRemoteList return serverconn.manage_listObjects(path) File "/opt/zope/zinstances/xxx/Products/ZSyncer/ConnectionMgr.py", line 183, in __call__ ok,rd = cPickle.loads(data) EOFError which has me baffled. Any suggestions? Other folks have been using ZSyncer without problems on Zope 2.11. Dieter, you contributed the ConnectionMgr patch -- do you have any idea where things might be failing?

2 1

Re: [Zope] ZSyncer fails to do authenticate under Zope 2.11
by Daryl Daly 16 Jul '09

16 Jul '09

> Date: Wed, 15 Jul 2009 18:01:58 -0700 (PDT) > From: Dennis Allison <allison(a)shasta.stanford.edu> > I am getting 401 errors with ZSyncer-0.7.1 using a configuration which > worked with Zope 2.9 and an earler version of the ZSyncer product. Both > use Python 2.4. Has anyone seen this problem? Can you recommend a fix? > Is the CVS version of ZSyncer on Sourceforge a better choice? This may not be much help but I am using this version of ZSyncer on Zope 2.11.2 and Python 2.4.6. Authentication is working fine. My configuration has migrated through various Zope versions. I am syncing between two Zope instances having the same version. Daryl.

1 0

Re: [Zope] ZSyncer fails to do authenticate under Zope 2.11
by Paul Winkler 16 Jul '09

16 Jul '09

No, sorry, I have never tried to run it with Zope later than 2.9 and I have zero time to experiment with it. - PW On Thu, Jul 16, 2009 at 09:26:20AM -0600, Dennis Allison wrote: > Pleas for assistance aside, any ideas as to what might be broken? We depend > upon this Product in our development process. > > On Thu, Jul 16, 2009 at 8:37 AM, Paul Winkler <slinkp(a)gmail.com> wrote: > > > Nobody (including me) is maintaining ZSyncer at all. > > > > I'll take this opportunity to once again call for volunteers to take > > up the reins... anybody care enough about ZSyncer to maintain it? > > > > - Paul > > > > On Wed, Jul 15, 2009 at 06:01:58PM -0700, Dennis Allison wrote: > > > I am getting 401 errors with ZSyncer-0.7.1 using a configuration which > > > worked with Zope 2.9 and an earler version of the ZSyncer product. Both > > > use Python 2.4. Has anyone seen this problem? Can you recommend a fix? > > > Is the CVS version of ZSyncer on Sourceforge a better choice? > > > > -- > > > > Paul Winkler > > http://www.slinkp.com > > _______________________________________________ > > Zope maillist - Zope(a)zope.org > > http://mail.zope.org/mailman/listinfo/zope > > ** No cross posts or HTML encoding! ** > > (Related lists - > > http://mail.zope.org/mailman/listinfo/zope-announce > > http://mail.zope.org/mailman/listinfo/zope-dev ) > > -- Paul Winkler http://www.slinkp.com

1 0

Re: [Zope] zc.recipe.egg
by Baiju M 16 Jul '09

16 Jul '09

On Fri, Jul 17, 2009 at 2:41 AM, Jonas<emiteris(a)gmail.com> wrote: > On Thursday 16 July 2009 11:04:13 Baiju M wrote: >> On Fri, Jul 17, 2009 at 12:58 AM, Jonas<emiteris(a)gmail.com> wrote: >> > Hallo, >> > >> > Can somebody tell me what is the purpose of zc.recipe.egg. It just puts >> > eggs in eggs directory from servers or it does a bit more??? >> >> May be you are looking for this: >> http://pypi.python.org/pypi/zc.recipe.egg >> > > Yes, but there is some general information that this recipe istalls eggs, where > how, what kind of installation I wasn`t able to find in this documentation. Can > you explain about this recipe in short. Thanks :) Please spend some time with Buildout documentation: http://www.buildout.org/ http://pypi.python.org/pypi/zc.buildout Regards, Baiju M

1 0