Zope will not allow access after IP address change
Hello, I cannot seem to access the zope management interface on one of our machines after we moved it to another ISP. All the software is the same, the machine is the same, the only things changed are; 1. /etc/hosts 2. hostname 3. IP address Is there some security or other mechanism in zope that prevents zope from starting? Thanks, Jeremiah
--On 24. Mai 2006 18:06:07 +0200 Jeremiah Foster <jeremiah.foster@theclickstore.se> wrote:
Hello,
I cannot seem to access the zope management interface on one of our machines after we moved it to another ISP. All the software is the same, the machine is the same, the only things changed are;
1. /etc/hosts 2. hostname 3. IP address
Is there some security or other mechanism in zope that prevents zope from starting?
You should access your machine and check your logs for errors. -aj -- ZOPYX Ltd. & Co. KG - Charlottenstr. 37/1 - 72070 Tübingen - Germany Web: www.zopyx.com - Email: info@zopyx.com - Phone +49 - 7071 - 793376 E-Publishing, Python, Zope & Plone development, Consulting
On Wed, 2006-05-24 at 18:14 +0200, Andreas Jung wrote:
--On 24. Mai 2006 18:06:07 +0200 Jeremiah Foster
I cannot seem to access the zope management interface on one of our machines after we moved it to another ISP. All the software is the same, the machine is the same, the only things changed are;
1. /etc/hosts 2. hostname 3. IP address
Is there some security or other mechanism in zope that prevents zope from starting?
You should access your machine and check your logs for errors.
Thank you for the reply. This error looks like the likely suspect; 2006-04-13T14:41:17 ERROR Shared.DC.ZRDB.Connection Error connecting to relational database. Traceback (most recent call last): File "/usr/local/www/Zope28/lib/python/Shared/DC/ZRDB/Connection.py", line 69, in __setstate__ try: self.connect(self.connection_string) File "/usr/local/www/zopeserver/Products/ZMySQLDA/DA.py", line 126, in connect self._v_database_connection=DB(s) File "/usr/local/www/zopeserver/Products/ZMySQLDA/db.py", line 182, in __init__ self.db=apply(self.Database_Connection, (), kwargs) OperationalError: (1045, "Access denied for user 'statementdb'@'localhost' (using password: YES)") It seems to imply that there is a problem with a zope-mysql module which is getting an operational error. But I did not think that mysql was used for authentication. Are there other errors I should be looking out for? Because there are other errors in the logs. Jeremiah
--On 24. Mai 2006 18:44:08 +0200 Jeremiah Foster <jeremiah.foster@theclickstore.se> wrote:
It seems to imply that there is a problem with a zope-mysql module which is getting an operational error. But I did not think that mysql was used for authentication. Are there other errors I should be looking out for? Because there are other errors in the logs.
Well...you should know..it's your server...it's your app :-) Perhaps the DB uses IP-based authentication and so possibly some configuration on the MySQL has to be accomplished...consult your MySQL DA. -aj -- ZOPYX Ltd. & Co. KG - Charlottenstr. 37/1 - 72070 Tübingen - Germany Web: www.zopyx.com - Email: info@zopyx.com - Phone +49 - 7071 - 793376 E-Publishing, Python, Zope & Plone development, Consulting
On Wed, 2006-05-24 at 18:56 +0200, Andreas Jung wrote:
--On 24. Mai 2006 18:44:08 +0200 Jeremiah Foster <jeremiah.foster@theclickstore.se> wrote:
It seems to imply that there is a problem with a zope-mysql module which is getting an operational error. But I did not think that mysql was used for authentication. Are there other errors I should be looking out for? Because there are other errors in the logs.
Well...you should know..it's your server...it's your app :-) Perhaps the DB uses IP-based authentication and so possibly some configuration on the MySQL has to be accomplished...consult your MySQL DA.
I did a fairly normal configuration so I know that I did not hook up MySQL authentication to Zope. What I was asking is does Zope use MySQL for its authentication by _default_. I thought it used it own db for user authentication. So I know that MySQL is working fine, zope works fine, the box has just been switched from one ip to another and zope stops working. Does anyone know about a built-in zope mechanism that controls zope logins based on ip? Thanks.
Jeremiah Foster schrieb: ...
Well...you should know..it's your server...it's your app :-) Perhaps the DB uses IP-based authentication and so possibly some configuration on the MySQL has to be accomplished...consult your MySQL DA.
I did a fairly normal configuration so I know that I did not hook up MySQL authentication to Zope. What I was asking is does Zope use MySQL for its authentication by _default_. I thought it used it own db for
No, it does not use something like mysql by default. There are many people which not even install mysql to their servers...
user authentication. So I know that MySQL is working fine, zope works fine, the box has just been switched from one ip to another and zope stops working.
I forgot the tracing you aparently did, but what does netstat -lntp tell you (linux?) or do you find any host:port in address statements for http-server in zope.conf? Can you list more details of your current installation? (instances, 3rd party products, zeo if any, ...)?
Does anyone know about a built-in zope mechanism that controls zope logins based on ip?
What exactly do you mean with that? You can restrict accounts to special domains (not that this makes much sense...) Regards Tino Wildenhain
On Fri, 2006-05-26 at 09:44 +0200, Tino Wildenhain wrote:
I forgot the tracing you aparently did, but what does netstat -lntp tell you (linux?) or do you find any host:port in address statements for http-server in zope.conf?
The zope.conf has no host:port lines, I installed a standard vanilla zope.conf and just checked it again for any IP-related directives. I am running FreeBSD with this zope instance. The netstat output looks like this: tcp4 0 0 h031.g.port80.8080 c83-252-226-210..61399 ESTABLISHED Which shows a process (most likely zope) listening on port 8080, where it was configured to listen, with an established connection to a client.
Can you list more details of your current installation? (instances, 3rd party products, zeo if any, ...)?
Here is a list of my Porudcts directory; DocFinderTab FSCounter GroupUserFolder LocalFS Localizer QuickImporter QuickLinks ZMIBookmarks ZMySQLDA stripogram
Does anyone know about a built-in zope mechanism that controls zope logins based on ip?
What exactly do you mean with that? You can restrict accounts to special domains (not that this makes much sense...)
Sorry, I was unclear. What I would like to know is there a mechanism enabled by default in zope that limits access to the management interface if the IP number in Data.fs does not correspond to the IP address of the machine upon which zope is running. This seems unlikely I know but may have a security application. What has happened to us is we have moved the machine from one hosting provider to another and zope will not allow us to authenticate. It runs, it is listening on the right port, all our passwords fail to work. I cannot even create an emergency user with zpasswd.py. I can't figure out why this is. Jeremiah
On Wed, 2006-05-24 at 18:14 +0200, Andreas Jung wrote:
--On 24. Mai 2006 18:06:07 +0200 Jeremiah Foster
I cannot seem to access the zope management interface on one of our machines after we moved it to another ISP. All the software is the same, the machine is the same, the only things changed are;
1. /etc/hosts 2. hostname 3. IP address
Is there some security or other mechanism in zope that prevents zope from starting?
You should access your machine and check your logs for errors.
Another error I see is; 2006-05-02T12:35:03 ERROR Zope Could not import Products.ZMySQLDA Traceback (most recent call last): File "/usr/local/www/Zope28/lib/python/OFS/Application.py", line 695, in import_product product=__import__(pname, global_dict, global_dict, silly) File "/usr/local/www/zopeserver/Products/ZMySQLDA/__init__.py", line 91, in ? import DA File "/usr/local/www/zopeserver/Products/ZMySQLDA/DA.py", line 92, in ? from db import DB File "/usr/local/www/zopeserver/Products/ZMySQLDA/db.py", line 99, in ? from MySQLdb.converters import conversions File "/usr/local/lib/python2.3/site-packages/MySQLdb/__init__.py", line 34, in ? from sets import ImmutableSet ImportError: cannot import name ImmutableSet This appears to point to the fact that zope cannot import Products.ZMySQLDA but it has already been installed on this machine. Furthermore, this should not prevent logins to the management interface should it? Jeremiah
Jeremiah Foster wrote:
On Wed, 2006-05-24 at 18:14 +0200, Andreas Jung wrote:
--On 24. Mai 2006 18:06:07 +0200 Jeremiah Foster
I cannot seem to access the zope management interface on one of our machines after we moved it to another ISP. All the software is the same, the machine is the same, the only things changed are;
1. /etc/hosts 2. hostname 3. IP address
Is there some security or other mechanism in zope that prevents zope from starting?
You should access your machine and check your logs for errors.
Another error I see is;
2006-05-02T12:35:03 ERROR Zope Could not import Products.ZMySQLDA Traceback (most recent call last): File "/usr/local/www/Zope28/lib/python/OFS/Application.py", line 695, in import_product product=__import__(pname, global_dict, global_dict, silly) File "/usr/local/www/zopeserver/Products/ZMySQLDA/__init__.py", line 91, in ? import DA File "/usr/local/www/zopeserver/Products/ZMySQLDA/DA.py", line 92, in ? from db import DB File "/usr/local/www/zopeserver/Products/ZMySQLDA/db.py", line 99, in ? from MySQLdb.converters import conversions File "/usr/local/lib/python2.3/site-packages/MySQLdb/__init__.py", line 34, in ? from sets import ImmutableSet ImportError: cannot import name ImmutableSet
This appears to point to the fact that zope cannot import Products.ZMySQLDA but it has already been installed on this machine. Furthermore, this should not prevent logins to the management interface should it?
Jeremiah
_______________________________________________ Zope maillist - Zope@zope.org http://mail.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://mail.zope.org/mailman/listinfo/zope-announce http://mail.zope.org/mailman/listinfo/zope-dev )
I would assume your zope does not start at all. this is why you can not access it. go to your zope instance an start it with zopectrl fg robert
On Wed, 2006-05-24 at 21:05 +0200, robert rottermann wrote: [snip]
I would assume your zope does not start at all. this is why you can not access it. go to your zope instance an start it with zopectrl fg robert
No, zope is running, and has been running. But I will test it with zopectl fg
participants (4)
-
Andreas Jung -
Jeremiah Foster -
robert rottermann -
Tino Wildenhain