RE: [Zope] Apache Authentication Problem
Will - This is an issue we've had as well. One thing I would suggest trying is to develop some layer either on top of zope that handles the requests to download the files. An external method or even a Zope Product which reads files off a non-web accessible path, then feeds the data to the web client would suffice. However the benefits of having Apache serve the files is lost. -jim -----Original Message----- From: Will Smith [mailto:witisi@yahoo.com] Sent: Tuesday, August 10, 2004 11:14 AM To: zope@zope.org Subject: [Zope] Apache Authentication Problem We currently have an applition that uses apache to serve alot of large files out of the filesystem (650MB each). I would like to convert the web interface over to zope to unify our site. I would prefer to keep the large files in the filesystem, primarily because we already have tools to manage them there. I also am very comfortable with apache serving these large files, and really do not wish to put this task up to the ZServer. I currently have zope setup behind a VM in apache. I have created a simple product that lists the files and creates the links to the files served by apache. I am able to integrate this info into our site very nicely. Problem... Since zope is not serving the files, I cannot prevent users from accessing them. I can control access to the links, but if you cut and paste the URL apache will server them to anyone, without even logging into zope. Any Ideas? Thanks, Will Smith _______________________________________________ Zope maillist - Zope@zope.org http://mail.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://mail.zope.org/mailman/listinfo/zope-announce http://mail.zope.org/mailman/listinfo/zope-dev ) 271 North Avenue Suite 1210 New Rochelle, NY 10801 ebizQ Links Webinars http://www.ebizq.net/webinars/?campaign=exchange White Papers http://www.ebizq.net/white_papers/?campaign=exchange
Hi,
One thing I would suggest trying is to develop some layer either on top of zope that handles the requests to download the files.
At EuroPython I heard a talk given about the RailRoad project, which lets you serve big files off the filesystem in a Zope environment. From what I remember it was oriented at integrating with the various CMSs (Plone, Silva et al) but it'd be worth taking a look at. Cheers, Dan
Hi I have a Plone-site that has a bunch of registered users. How can I export both usernames AND passwords from the zope-database. I want to use these to access another application. Please don't answer "You just have to write a script", because I don't know how to do that. My config: Linux Plone 2.03 Zope 2.7.1 Python 2.3.3 Kind regards Oystein
Hi, Am Mi, den 11.08.2004 schrieb Øystein Thune um 18:01:
Hi
I have a Plone-site that has a bunch of registered users. How can I export both usernames AND passwords from the zope-database. I want to use these to access another application.
Please don't answer "You just have to write a script", because I don't know how to do that.
Well. You know the answer. You write a script or hire someone to write it for you. Chances are, however, you have crypted passwords with Zope 2.7.1, so the use with other applications may be limited. Regards Tino Wildenhain
Thank you for replying. This could be interesting if I could use the usernames & encrypted passwords directly into a htpasswd file. Anybody knows what kind of encryption is used? Regards Oystein Tino Wildenhain wrote:
Hi,
Am Mi, den 11.08.2004 schrieb Øystein Thune um 18:01:
Hi
I have a Plone-site that has a bunch of registered users. How can I export both usernames AND passwords from the zope-database. I want to use these to access another application.
Please don't answer "You just have to write a script", because I don't know how to do that.
Well. You know the answer. You write a script or hire someone to write it for you. Chances are, however, you have crypted passwords with Zope 2.7.1, so the use with other applications may be limited.
Regards Tino Wildenhain
On Thu, Aug 12, 2004, Øystein Thune wrote:
Thank you for replying. This could be interesting if I could use the usernames & encrypted passwords directly into a htpasswd file. Anybody knows what kind of encryption is used?
Rather than export into an .htpasswd file, you might want to look at mod_auth_mysql or similar apache modules that get the authentication information from an SQL database. This eliminates the need for file system access, and mod_auth_mysql supports groups as well as user, passwords so is quite flexible. Bill -- INTERNET: bill@Celestial.COM Bill Campbell; Celestial Software LLC UUCP: camco!bill PO Box 820; 6641 E. Mercer Way FAX: (206) 232-9186 Mercer Island, WA 98040-0820; (206) 236-1676 URL: http://www.celestial.com/ Once at a social gathering, Gladstone said to Disraeli, ``I predict, Sir, that you will die either by hanging or of some vile disease''. Disraeli replied, "That all depends upon whether I embrace your principles or your mistress".
participants (5)
-
Bill Campbell -
Dan Fairs -
Jim Kutter -
Tino Wildenhain -
Øystein Thune