- Zope - Zope lists

Shared zope.config file.
by Karl Kopper 21 Jan '04

21 Jan '04

Running Zope-2.7.0-b4 on Linux using an NFS shared instance home, I'd like to share one config file on multiple Zope servers. Can I use a %define or something to create a `/bin/hostname` variable inside of the zope.conf so the lock, log, etc. files are unique? --Karl

3 4

Zope on cygwin incredibly slow?
by Heimo Laukkanen 21 Jan '04

21 Jan '04

Hi ya, has anyone cure for Zope running increbli slow on WinXP and cygwin? It seems that every single request takes many seconds before anything is returned to the browser. On the same hardware Zope runs atleast 10 times faster while booted on linux and a little bit faster if I am running Zope's windows-binaries. -- -huima

6 5

Problems with Iptc_Exif_reading_support product
by Andreas Tille 21 Jan '04

21 Jan '04

Hello I'm using the Iptc_Exif_reading_support product which is available at http://zope.org/Members/ausum/Iptc_Exif_reading_support It show that after restarting Zope one upload of a random image is necessary to let this product worc correctly. If I do not do this I get the error message: Error type: NameError Error value: global name 'verbosedisplays' is not defined Any hint how that can be fixed? BTW, there is no license applied to this product. This makes a software non-free from a Debian point of view and thus I can not package this Product for Debian. Half a year ago I wrote an e-mail to <ausum_studio(a)hotmail.com> which is listed as "Contact Email" for this product to clarify this issue but I've got no response. Anybody knows more about the author? Kind regards Andreas.

3 4

RFC: backward compatibility of PythonScript bindings for 2.6.4 / 2.7.0
by Brian Lloyd 21 Jan '04

21 Jan '04

Hi all - We recently made Zope 2.6.4-rc1 and 2.7.0-rc1 releases which fix a number of issues that were introduced in the Q4 security audit work and the resulting 2.6.3 and 2.7.0-b4 releases. The initial feedback is very good, and at this point I am aware of only one outstanding issue - but it is a sticky one and I want to get some community feedback before deciding exactly how to address it. Background: one of the holes fixed in the security audit was that the current user's access to 'context' and 'container' in a Python Script was not checked when those names were bound to the script for execution. This meant that theoretically a script could have a handle to an object (like the script container) that the user really didn't have permission for. Subsequent attribute accesses or attempted method calls would likely still fail since a security check *would* be performed on those actions, but in principle the script shouldn't have been allowed to get that initial handle to the object. The fix for this was straightforward - do a security check on 'context' and 'container' before binding those objects when the script is getting ready to execute. While this is definitely the Right Thing To Do (tm) from a security standpoint, it poses a bit of a backwards compatibility problem because: - By default, all Python Scripts bind both 'context' and 'container'. This means that all existing Python Scripts in applications, portal tools, etc. have those bindings unless they have been manually changed. - A standard CMF / Plone idiom is to put scripts inside of portal tools (workflow is a primary example). Very often the users who execute the scripts (as a part of workflow, for example) **do not have access to the tool containing the scripts**. These two facts did not cause a problem before, because the security check for the 'container' binding was not being performed at bind-time. Now that it is, many scripts will not work because the user will not have access to the tool containing the script. Worse, the binding check will cause an unauthorized error **even if the script doesn't actually use the 'container' variable, because all existing Python Scripts already have that binding defined by default ;( So as things stand, the way the binding check currently works will cause problems for most everyone using a workflow tool or other tools containing scripts where the user doesn't have access to the script container (the tool itself). This is likely to be a fairly large number of people / sites. I'd like to propose a solution that will hopefully affect far fewer people, while still doing the right thing with regard to security. Currently, if the executing user does not have access to either 'context' or 'container', an Unauthorized exception will be raised at bind-time. *This will happen even if the script does not use either of those names*, which is the root of the problem. I propose to change that behavior so that if the security check on either 'context' or 'container' fails, that name will be bound to None rather than raise an Unauthorized. The effect of that change on existing sites would be: - Existing scripts living in tools which *don't* reference 'container' in their code will continue to work as before without any changes on the part of the site admin - Existing scripts that *do* refer to 'container' in their code (and if the user doesn't have access to it) will break, since 'container' will now be 'None' rather than what the script thought it would be. The fix for such sites is to make sure the user has the appropriate access on the script container. What I like about this is that it potentially requires direct action from fewer site admins. IOW, you only have to fix your permissions if you were already doing something that the security system should have been preventing before. What I don't like is that it is somewhat magical, and now the error you would get (probably 'None has no attribute xxx') if the user doesn't have access to the container doesn't tell you the real problem. That is likely to be compounded by the fact that some site admins will be saved from having to care immediately by this magic, then run into it later, when they might be thoroughly confused if they didn't happen to read this thread as it went by ;) The alternative is to take the 'hard-line' and say that site admins need to visit their script containers and ensure that either a) the users of the scripts have the appropriate permissions on the container or b) they remove the 'container' binding from their scripts if it is not appropriate to give the users access to the script container. Sorry this was so long, but I think these kinds of backward compatibility vs. consistency conundrums require some community buy-in on the path chosen, since *someone* will be unhappy and have to do some manual fixing no matter what. Thoughts? Brian Lloyd brian(a)zope.com V.P. Engineering 540.361.1716 Zope Corporation http://www.zope.com

5 5

RE: [Zope] Zope Database Crash?
by Gary Spivey 21 Jan '04

21 Jan '04

Thanks for the response. Actually, you are right about the 503's. I get those when Zope wasn't working at all (it was early AM). What I get with the bug is this .. ============================================================= Error Type: NameError Error Value: global name 'func' is not defined Troubleshooting Suggestions This resource may be trying to reference a nonexistent object or variable global name 'func' is not defined. The URL may be incorrect. The parameters passed to this resource may be incorrect. A resource that this resource relies on may be encountering an error. For more detailed information about the error, please refer to the error log. If the error persists please contact the site maintainer. Thank you for your patience ============================================================= I have tried running with apache shutdown and going to :8080/manage. It just gets this error. Cheers, Gary -----Original Message----- From: Jake [mailto:jake@zopezone.com] Sent: Wednesday, January 21, 2004 9:46 AM To: Gary Spivey Cc: zope(a)zope.org; plone-users(a)lists.sourceforge.net Subject: Re: [Zope] Zope Database Crash? The 503 error sounds like Apache not Zope. It sounds like Apache can't connect to Zope. What do you get when you start Zope in debug mode? Does it right out errors? Does it start? If it does not start, try moving (get a copy) the Data.fs and see if it starts. Is should give you an error at the very least. If Zope is starting, but the problem is connecting from Apache to Zope, try to log onto Zope through its own IP and port number your-domain.com:8080/manage Jake -- http://www.ZopeZone.com Gary Spivey said: > I am using plone ... > Zope2.7b3 > python 2.3.2 > RedHat9 > CMF-1.4.2 > archetypes1.2.3 > CMFBoard-1.4.2 > CMFPlone2.0-RC2 > PortalTransforms-1.0.2 > Zwiki-0-27-0cvs > > Yesterday after a reboot, apache is fine, but Zope doesn't work anymore. I > get a 503 message. Can't get to the management interface - nothing. So I > made a brand new zope instance just to check out everything else and it > works fine. > Ok - so I think maybe it is the database? And I run the fsrestore on it > and > it says it deletes zero records. The database stayed the same, but the > index > changes. However, this does nothing to solve my problem. The system still > says 503. I tried copying my database over to the new zope instance. That > didn't work either. > > Does anybody have any clear direction on a way ahead? Right now I have an > entire website (most relatively new work that hasn't been backed up yet) > that is completely useless as it quit working one day. Can I at least > retrieve some things from the database? Is the problem the database? Any > other ideas? > > If you can point me to any manuals that I can RTFM that would be helpful > as > well as I found out about fsrestore via that source of all information - > google. > > Thanks for any help. > > Gary > > > > > _______________________________________________ > Zope maillist - Zope(a)zope.org > http://mail.zope.org/mailman/listinfo/zope > ** No cross posts or HTML encoding! ** > (Related lists - > http://mail.zope.org/mailman/listinfo/zope-announce > http://mail.zope.org/mailman/listinfo/zope-dev ) >

2 1

Duplicated keys in BTreeFolder2
by FLORAC Thierry 21 Jan '04

21 Jan '04

Hi, I currently use a BTreeFolder2 inherited class, called "users", to store my site users profiles. My problem is that for a few records (~50 for 5700 users), I have duplicated keys in my folder, pointing to the same record ; if I remove one of these records, the other keys stay into the folder, pointing to nothing !! My questions now are : - how can I avoid these duplicated keys (as long as I only add my users profiles via a simple Python script which shouldn't break keys, with : if not context.users.has_key(username): context.users.manage_addProduct['MyProduct'].manage_addUserProfile(username) - is it possible to rebuild the folder keys, without breaking the pointed records ?? Thanks, Thierry -- Linux every day, keeps Dr Watson away... http://gpc.sourceforge.net -- http://www.ulthar.net

2 1

acquisition and __bobo_traverse__
by Dylan Reinhardt 21 Jan '04

21 Jan '04

Hi All, I have a situation where I want one object to alias methods that are actually provided by a different object. This is being done in __bobo_traverse__ in a Python product that subclasses Folder I can call another object's method easily enough, but when I do this, it will resolve all names in the context of the *calling* object, not the method's physical container. That makes a certain amount of sense, perhaps... but it isn't what I *want* to happen. I've tried various combinations like: obj.method obj.method.__of__(self) obj.method.__of__(obj) All with no joy... in each case, the method is the correct method but names are resolved by the *calling* object, not by the returned method's container. Any ideas how to make this work the way I want it to? TIA, Dylan

2 4

Zope Database Crash?
by Gary Spivey 21 Jan '04

21 Jan '04

I am using plone ... Zope2.7b3 python 2.3.2 RedHat9 CMF-1.4.2 archetypes1.2.3 CMFBoard-1.4.2 CMFPlone2.0-RC2 PortalTransforms-1.0.2 Zwiki-0-27-0cvs Yesterday after a reboot, apache is fine, but Zope doesn't work anymore. I get a 503 message. Can't get to the management interface - nothing. So I made a brand new zope instance just to check out everything else and it works fine. Ok - so I think maybe it is the database? And I run the fsrestore on it and it says it deletes zero records. The database stayed the same, but the index changes. However, this does nothing to solve my problem. The system still says 503. I tried copying my database over to the new zope instance. That didn't work either. Does anybody have any clear direction on a way ahead? Right now I have an entire website (most relatively new work that hasn't been backed up yet) that is completely useless as it quit working one day. Can I at least retrieve some things from the database? Is the problem the database? Any other ideas? If you can point me to any manuals that I can RTFM that would be helpful as well as I found out about fsrestore via that source of all information - google. Thanks for any help. Gary

2 1

RE: [Zope] Zope on cygwin incredibly slow?
by Meilicke, Scott 21 Jan '04

21 Jan '04

Zope running in debug mode on windows (windows binaries) is very slow compared to linux. Removing debug mode speeds up zope considerably. Perhaps the same can be said for cygwin based zope? -Scott -----Original Message----- From: Heimo Laukkanen [mailto:huima@iki.fi] Sent: Monday, January 19, 2004 12:55 AM To: zope(a)zope.org; plone-users(a)lists.sourceforge.net Subject: [Zope] Zope on cygwin incredibly slow? Hi ya, has anyone cure for Zope running increbli slow on WinXP and cygwin? It seems that every single request takes many seconds before anything is returned to the browser. On the same hardware Zope runs atleast 10 times faster while booted on linux and a little bit faster if I am running Zope's windows-binaries. -- -huima _______________________________________________ Zope maillist - Zope(a)zope.org http://mail.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://mail.zope.org/mailman/listinfo/zope-announce http://mail.zope.org/mailman/listinfo/zope-dev ) The information contained in this email message may be privileged and is confidential information intended only for the use of the recipient or any employee or agent responsible for delivering it to the intended recipient. Any unauthorized use, distribution or copying of this information is strictly prohibited and may be unlawful. If you have received this communication in error, please notify the sender immediately and destroy the original message and all attachments from your electronic files.

2 1

RE: [Zope] Which statistics analysis tool is most useful for websitesusing Zope?
by Bill Etheredge 21 Jan '04

21 Jan '04

We have had good success using AWSTATS with Zope-based sites. Bill The Mesa Group -----Original Message----- From: Richard Ettema [mailto:richard.ettema@yoursolutions.com] Sent: Wednesday, January 21, 2004 8:04 AM To: zope(a)zope.org Subject: [Zope] Which statistics analysis tool is most useful for websitesusing Zope? Hi, I am trying to find a useful site stats analysis tool that is capable of providing accurate stats including page views, visitor numbers, impressions per day/month etc etc. The problem I am finding with tools like Webalizer is that they can't cope with my zope based sites that don't use standard page name file extensions (like .html, .htm, etc). Any suggestions on tools to look at would be great as most I have come across either don't provide much useful information or can't cope with the lack of file extension name. I have just found AWstats and will try that next but any other ideas would be great. Thanks for your help. Richard.

1 0