- Zope - Zope lists

sending a encrypted login URL
by Joseph Thomas (s) 05 Mar '09

05 Mar '09

We'd like to construct a zope login URL of the form on another server: http://zope.domain:port/context/logged_in?__ac_name=uzzzzzz&__ac_passwor d=xxxxxxx&submit=Log+in where the ac_name and ac_password parameters are encrypted using zope public key (?) and have the parameters decrypted when zope receives the request and login the user. Is there an API or some way to encrypt the username and password on the 3rd party app server and configure zope so that it treats the parameters as encrypted values rather than plaintext? Joseph Thomas College of American Pathologists http://www.cap.org <http://www.cap.org/> Consider our environment; please print this e-mail only if truly necessary. Thank you!

4 6

FW: sending a encrypted login URL
by Joseph Thomas (s) 04 Mar '09

04 Mar '09

-----Original Message----- From: Joseph Thomas (s) Sent: Wednesday, March 04, 2009 10:50 AM To: 'lists(a)zopyx.com' Subject: RE: [Zope] sending a encrypted login URL I think I get what you're suggesting, but let me clarify. I actually wanted the sensitive portions of URL to be encrypted..because it will be link on a page that says "login to zope"..but I wouldn't want the user or a snooper to be able to view the page source and figure out the URL pattern and the username/password. SSL will ensure that the transport between the browser and the zope server will be encrypted using PKI, but I really want to obfuscate the user name and password parameters in the login URL. So that that if some1 where to view the source they'd see garbled username/password parameters. I suppose I could use the PKI to encrypt the username/password with my zope server's public key (but is there a API to do this on a J2EE container) and then have my zope server decrypt using its private key (but how would zope know that the username/password parameters are 2 be treated as encrypted data)? -----Original Message----- From: Andreas Jung [mailto:lists@zopyx.com] Sent: Wednesday, March 04, 2009 10:38 AM To: Joseph Thomas (s) Cc: zope(a)zope.org Subject: Re: [Zope] sending a encrypted login URL -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Use SSL and you're done. - -aj On 04.03.2009 17:29 Uhr, Joseph Thomas (s) wrote: > We'd like to construct a zope login URL of the form on another server: > > > > http://zope.domain:port/context/logged_in?__ac_name=uzzzzzz&__ac_password=x… > <http://zope.domain:port/context/logged_in?__ac_name=uzzzzzz&__ac_password=x…> > > > > > > where the ac_name and ac_password parameters are encrypted using zope > public key (?) and have the parameters decrypted when zope receives the > request and login the user. > > > > Is there an API or some way to encrypt the username and password on the > 3^rd party app server and configure zope so that it treats the > parameters as encrypted values rather than plaintext? > > > > Joseph Thomas > > College of American Pathologists > > http://www.cap.org <http://www.cap.org/> > > > > > ------------------------------------------------------------------------ > > _______________________________________________ > Zope maillist - Zope(a)zope.org > http://mail.zope.org/mailman/listinfo/zope > ** No cross posts or HTML encoding! ** > (Related lists - > http://mail.zope.org/mailman/listinfo/zope-announce > http://mail.zope.org/mailman/listinfo/zope-dev ) - -- ZOPYX Ltd. & Co. KG - Charlottenstr. 37/1 - 72070 Tübingen - Germany Web: www.zopyx.com - Email: info(a)zopyx.com - Phone +49 - 7071 - 793376 Registergericht: Amtsgericht Stuttgart, Handelsregister A 381535 Geschäftsführer/Gesellschafter: ZOPYX Limited, Birmingham, UK - ------------------------------------------------------------------------ E-Publishing, Python, Zope & Plone development, Consulting -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (Darwin) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAkmurnAACgkQCJIWIbr9KYylKQCgn3WWP5SzGrrAQbJIQXv7Bfac 3fwAoIiI4iwtVBFVRg7jtZu5Vgy5fw3f =MHol -----END PGP SIGNATURE----- Consider our environment; please print this e-mail only if truly necessary. Thank you!

2 1

Traversal and five
by Miles 03 Mar '09

03 Mar '09

Hi, In Zope 2.9.9, is there a way to register a traversal adapter and if so how? I've googled for examples, but haven't found anything pertinent. I'm not clear where to find the API for the adapter, and also if this is used in as old a zope as 2.9.9. Can anyone confirm? Thanks, Miles

2 1

chameleon.zpt and zope3.4
by JeanMichel FRANCOIS 01 Mar '09

01 Mar '09

Hi, chameleon require zope.i18n >= 3.5. I m using zope3.4 throw KGS, so i have zope.i18n == 3.4. Is there a way to use chameleon on 3.4 ? -JeanMichel

2 2

Help with my first steps
by deconya 21 Feb '09

21 Feb '09

Hi Im new in this list and I need help for my first steps. Im received a server with zope installed to administer 3 webs but one has the problem that fails the configuration to establish the initial page. Im searching where you can configure to publish the webs but I could see the process to publish but no where you can put the initial page inside zope. Im sure the question es stupid but I need to resolve urgently this problem and Im not pacience to read all the manual. Someone can help me? Thanks and Best regards

3 2

Filesystem Directory View Child Folders
by Garito 21 Feb '09

21 Feb '09

Hi! I have a filesystem directory view that has 2 child folders But when I switch to debug mode off the 2 folders disappears Is this the normal FDV behaviour or I have any kind of problem? Thanks! -- Mis Cosas http://blogs.sistes.net/Garito Zope Smart Manager http://blogs.sistes.net/Garito/670

2 1

Zope2 and XMLRPC methods
by Rowan Woodhouse 21 Feb '09

21 Feb '09

Hi, I'm having some trouble getting XML-RPC methods going on Zope2/Five. I've got the following in my configure.zcml: <configure xmlns="http://namespaces.zope.org/zope" xmlns:browser="http://namespaces.zope.org/browser" xmlns:five="http://namespaces.zope.org/five" xmlns:xmlrpc="http://namespaces.zope.org/xmlrpc"> <include package="zope.app.publisher.xmlrpc" file="meta.zcml" /> <include package="zope.app.security" file="meta.zcml" /> <xmlrpc:view for="MZCore.interface.IMZTag" methods="smeg" class="MZCore.MZTag.MZTag.MZTagXmlRpcInterface" permission="zope.Public" /> </configure> and MZTag.py has the following in it: from zope.app.publisher.xmlrpc import XMLRPCView class MZTagXmlRpcInterface(XMLRPCView): def smeg(self): """something """ return 'hello!' But when I try to access the method via XML-RPC as follows (where aaa is and object that implements IMZTag) >>> s = ServerProxy('http://admin:admin@192.168.69.135:9673/aaa') >>> s.smeg() I get an error back saying "Cannot locate object at: http://192.168.69.135:9673/aaa/smeg" I'm at a loss now as what to try next. If I change the method name in either the configure.zcml or python files I get an error back saying that the method cannot be found when the .zcml file is parsed so I know it is being included. Does anyone have any ideas? Thanks, Rowan

3 3

Come to the Zope Sprint @ PyCon 2009
by Lennart Regebro 20 Feb '09

20 Feb '09

There will be a Zope + Friends sprint @ PyCon 2009, to work on Zope and Zope-related technologies like Grok, Repoze, Deliverence etc. http://us.pycon.org/2009/sprints/projects/zope/ Because of the Repoze overlap with WSGI based frameworks we plan to work closely together with the WSGI/Pylons/TurboGears/Repoze sprint happening at the same time, so this will be a supercool webframwork sprint! Everyone is welcome! It is not necessary to sign up beforehand, but it is recommended for planning purposes. Either put your name on the wiki-page yourself, or mail me and I will add you. http://us.pycon.org/2009/sprints/projects/zope/ For general information on the sprints, see: http://us.pycon.org/2009/sprints/ or ask me. Help out / Learn / Have fun! -- Lennart Regebro http://regebro.wordpress.com/ +33 661 58 14 64

1 0

Weird "undefined symbol: PyUnicodeUCS{2|4}_AsEncodedString" errors
by Chris Withers 18 Feb '09

18 Feb '09

Hi All, I wonder if anyone has seen errors like these before... Scenario is as follows, two Zope instances and a zeo server all running from the debian zope2.9 packages. All the control scripts for these instances fail with the following error when used: Traceback (most recent call last): File "/usr/lib/zope2.9/lib/python/Zope2/Startup/zopectl.py", line 322, in ? main() ... File "/usr/lib/zope2.9/lib/python/persistent/__init__.py", line 19, in ? from cPersistence import Persistent, GHOST, UPTODATE, CHANGED, STICKY ImportError: /usr/lib/zope2.9/lib/python/persistent/cPersistence.so: undefined symbol: PyUnicodeUCS4_AsEncodedString However, when run as a cron job as follows: @daily /var/lib/zope2.9/instance/x/bin/zopectl run /var/lib/zope2.9/instance/x/Products/Stepper/run.py -q / jobs ...the control scripts behave properly and the stepper jobs get run. To solve the problem, I built python from source and installed the latest Zope 2.9 from source. Now, all the instances behave fine, except the above cron job now fails with the following: Traceback (most recent call last): File "/opt/Zope-2.9/lib/python/Zope2/Startup/zopectl.py", line 334, in ? exitstatus = main() ... File "/opt/Zope-2.9/lib/python/persistent/__init__.py", line 19, in ? from cPersistence import Persistent, GHOST, UPTODATE, CHANGED, STICKY ImportError: /opt/Zope-2.9/lib/python/persistent/cPersistence.so: undefined symbol: PyUnicodeUCS2_AsEncodedString So, the problem seems inverted now and the error is about UCS2 rather than UCS4. Anyone ever seen anything like this? What is that symbol and why would it be there when run from a shell and not there when run from cron? cheers, Chris -- Simplistix - Content Management, Zope & Python Consulting - http://www.simplistix.co.uk

5 5

Periodic task in a Zope 2 environment
by Marco Bizzarri 18 Feb '09

18 Feb '09

Hi all. A little of background, before. I need to run some tasks, inside a zope environment, in a periodic way. Even though I could resort to using cron and wget, I do not like the solution too much, also because it requires me to rely on something completly external to the application to schedule the task itsel (I need to update the cron to change how often a job is run... ). Now, I can see I can run a task using zopectl run + a script. My script would therefore be something like: while True: do something sleep(for sometime) of course, there are dozen of ways to write this in a better way, but that is not the problem. My problem is understanding if it is possible to run such a script via the zdaemon. Can anyone shred some light on this topic? Is there a better way to run such tasks in Zope 2 environments? Regards Marco -- Marco Bizzarri http://notenotturne.blogspot.com/ http://iliveinpisa.blogspot.com/

5 10