[Zope] login failure zope with gentoo

J Cameron Cooper jccooper at jcameroncooper.com
Thu Sep 4 19:11:36 EDT 2003


Riccardo Gaggero wrote:

>i have a gentoo box
>and testing my zope installation http://ipserver:8080 the index page is ok
>but i want display the http://ipserver:8080/manage the login failure
>from zope book
>The initial user name and password are 'admin' and 'tnLQ6imA'.
>This user not work
>I have change the user zope (its group was "user" now its "zope-2_6_1") its
>right????
>Login gentoo with user zope
>Run the script
>/usr/bin/python zpasswd.py --username=root --password=root
>/usr/share/zope/zope-2.6.1/inituser
>no error messages
>
>Check the file /usr/share/zope/zope-2.6.1/inituser
>--------
>root:{SHA}3Hbp8MAAbo+RngxRXGbbujmC94U=
>---------
>
...

>but login failure wit user root psw root (the psw is easy but its one
>test!!)
>  
>
You confuse system users with Zope users. Your system user (the user 
Zope runs *as*) seems to be good. It should not be root, should not have 
access to anything outside Zope, and should be able to read it's own 
stuff, and write to zope/var.

Your Zope users are entirely different. The initial user created by the 
install and its password should have worked. Otherwise, use the 
procedure outlined in doc/SECURITY.txt to get an 'emergency user' so you 
can get in and fix the passwords. Remember to restart Zope after doing 
an inituser or access change.

http://cvs.zope.org/Zope/doc/SECURITY.txt?rev=HEAD&content-type=text/vnd.viewcvs-markup

          --jcc

-- 
"Code generators follow the 80/20 rule. They solve most of the problems, but not all of the problems. There are always features and edge cases that will need hand-coding. Even if code generation could build 100 percent of the application, there will still be an endless supply of boring meetings about feature design."
(http://www.devx.com/java/editorial/15511)





More information about the Zope mailing list