| *** J1m has quit IRC | 00:01 | |
| *** J1m has joined #zope | 00:03 | |
| *** tiwula has quit IRC | 00:19 | |
| *** [Arfrever] has quit IRC | 00:21 | |
| *** [Arfrever] has joined #zope | 00:24 | |
| *** J1m has quit IRC | 00:26 | |
| *** J1m has joined #zope | 00:27 | |
| *** J1m has quit IRC | 00:27 | |
| *** RichyB has quit IRC | 00:30 | |
| *** RichyB has joined #zope | 00:33 | |
| *** alga has joined #zope | 01:07 | |
| *** m8 has quit IRC | 01:10 | |
| *** dayne has joined #zope | 01:36 | |
| *** _mup_ has quit IRC | 02:00 | |
| *** _mup_ has joined #zope | 02:00 | |
| *** tiwula has joined #zope | 02:12 | |
| *** tiwula has quit IRC | 02:43 | |
| *** Arfrever has quit IRC | 02:43 | |
| *** Arfrever has joined #zope | 03:00 | |
| *** RichyB has quit IRC | 04:31 | |
| *** alga has quit IRC | 04:35 | |
| *** kiorky has quit IRC | 10:18 | |
| *** mr_jolly has joined #zope | 10:20 | |
| *** JT has quit IRC | 10:25 | |
| *** zagy1 has joined #zope | 10:34 | |
| *** zagy has quit IRC | 10:37 | |
| *** ajmitch has quit IRC | 10:46 | |
| *** ajmitch has joined #zope | 10:46 | |
| *** ajmitch has joined #zope | 10:46 | |
| *** TomBlockley has joined #zope | 10:48 | |
| *** JT has joined #zope | 10:50 | |
| *** kiorky has joined #zope | 11:15 | |
| *** JT has quit IRC | 11:15 | |
| *** TomBlockley has quit IRC | 11:23 | |
| *** JT has joined #zope | 12:13 | |
| *** yvl has joined #zope | 12:48 | |
| *** yvl has quit IRC | 12:48 | |
| *** RichyB has joined #zope | 13:03 | |
| *** Big has joined #zope | 13:06 | |
| Big | hey all, is there a way to restrict access on a project running on zope to certain IP ? | 13:06 |
|---|---|---|
| Big | like we do in apache's .htaccess ? | 13:07 |
| betabug | use apache's .htaccess | 13:07 |
| Big | atleast the /html/admin not entire project | 13:07 |
| betabug | your zope site should be served behind apache | 13:07 |
| Big | hmm | 13:07 |
| Big | are you sure? | 13:07 |
| Big | curl --head shows Zope as webserver | 13:07 |
| RichyB | In theory, you can specify the domain from which any user in acl_users can log in from. | 13:07 |
| RichyB | I am not sure whether that functionality actually works. | 13:08 |
| betabug | yes (well, you could use something else as httpd too) | 13:08 |
| *** RichyB has left #zope | 13:08 | |
| *** RichyB has joined #zope | 13:08 | |
| betabug | Big: yes, the server header still says Zope, but any real zope setup should be served behind a real web server | 13:08 |
| RichyB | but 90% of the time, what you want to be doing is putting zope behind apache, with ProxyPass or RewriteRule [P] to pass requests through to the Zope instance. | 13:08 |
| Big | aha | 13:09 |
| RichyB | (or lighttpd or nginx or any other decent webserver) | 13:09 |
| Big | so the Domains part is actually the hostname or IP of user ? | 13:09 |
| RichyB | Think so, but I don't know how well or even if that feature works. | 13:09 |
| betabug | I wouldn't rely on it | 13:10 |
| betabug | I suggest to restrict from the web server | 13:11 |
| Big | but from webserver it will allow me to specify which folder to restrict ? | 13:11 |
| Big | like only admin but not hte frontendfor users ? | 13:11 |
| betabug | sure should be possible | 13:13 |
| Big | how to find out the path of web files in shell? | 13:13 |
| Big | I wasn't the person who set it up in the first place | 13:13 |
| Big | /usr/local/www/Zone28 doesn't shows anything newly created | 13:13 |
| betabug | well, check your apache (or other web server) config files | 13:14 |
| Big | ah, i checked that already nothing is there for sure | 13:14 |
| betabug | do you access the zope service on port 80? | 13:14 |
| Big | yes | 13:15 |
| Big | i see this from shell when i ps | 13:15 |
| Big | /usr/local/bin/python2.4 /usr/local/www/Zope28/lib/python/Zope2/Startup/run.py -C /usr/local/www/Zope28/instances/webdns/etc/zop | 13:15 |
| Big | seems running internal webserver of zope? | 13:15 |
| betabug | that's the zope service | 13:15 |
| betabug | but it's unlikely that they set up zope directly on port 80 | 13:16 |
| Big | it is set as port 80 | 13:16 |
| betabug | check in /usr/local/www/Zope28/instances/webdns/etc/zope.conf | 13:16 |
| betabug | I doubt that they run zope directly on port 80 | 13:16 |
| betabug | and if they do, you should change that immediately | 13:17 |
| Big | why? | 13:17 |
| betabug | because that would mean they start zope as root | 13:17 |
| Big | correct | 13:17 |
| Big | its started as root | 13:17 |
| betabug | which is a big no-no | 13:17 |
| Big | there are couple of processes running as user www | 13:17 |
| Big | chroot'ed maybe? | 13:17 |
| betabug | no | 13:18 |
| betabug | you have Zope 2.8 there, which is really old | 13:18 |
| Big | weird /usr/local/www/Zope28/instances/webdns/etc/zope.conf shows address 8080 | 13:18 |
| betabug | see? | 13:18 |
| Big | yeah the project been running since 2005 as i've been told | 13:18 |
| Big | but its kind of an environment "if its running keep it running" | 13:18 |
| Big | so i'm trting to get things around things | 13:18 |
| betabug | so there is a web server in front | 13:18 |
| Big | yeah seems so | 13:20 |
| Big | there is couple of server.py -h xx.xx.xx.xx -p 80 | 13:20 |
| Big | but seems thats not it | 13:20 |
| betabug | hmm, maybe it's pound | 13:20 |
| Big | yeah! | 13:20 |
| Big | there is pound running | 13:21 |
| betabug | dunno if it could be only pound or if there would be apache too | 13:21 |
| Big | its definietely pound | 13:21 |
| Big | cuz i killed apache zope kept loading | 13:21 |
| Big | but if i shutdown pound its not | 13:22 |
| betabug | I don't have much experience with pound, dunno if it can restrict things | 13:22 |
| Big | from zope's side its not possible? | 13:22 |
| betabug | I don't think there is an easy setting - try with the "domain" field in the user folder / user settings | 13:24 |
| Big | whats the formats of Domains ? | 13:26 |
| Big | the user's hostname or IP ? | 13:26 |
| betabug | probably IP | 13:26 |
| Big | btw why there are two zope instances running? is it for redundency ? | 13:31 |
| Big | because for some reason when i create new users sometiems they have to enter the password two-three times till a page loads, i'm thinking of a conflict in zope or so? | 13:32 |
| betabug | dunno | 13:32 |
| betabug | people use multiple instances to get more performance out of multi processor machines | 13:32 |
| Big | weird non of the newly added users can no longer sign into the project, but they can login to /manage | 13:34 |
| Big | i.e. /html/admin | 13:35 |
| betabug | you tried to set the domain? | 13:36 |
| Big | not yet | 13:36 |
| Big | i added a user to test with | 13:36 |
| Big | i want to see if it works with anyIP then i will add the IP part | 13:37 |
| Big | any log i can check for zope? | 13:38 |
| Big | never mind found Z2.log | 13:39 |
| Big | in both instances | 13:39 |
| Big | and a huge 10-13gb each event.log files | 13:40 |
| betabug | haha, some years worth of logs | 13:41 |
| Big | hehe yeah seems so | 13:41 |
| Big | whats Data.fs ? | 13:43 |
| betabug | the actual database file | 13:43 |
| Big | if the two instances running the application they should match in size, no ? | 13:43 |
| betabug | well, normally if you have 2 instances running the same application, you have a third instance that is running as the "ZEO" database server | 13:44 |
| Big | whats the name of the process? | 13:44 |
| Big | ps aux |grep zeo didnt find any | 13:44 |
| betabug | probably would be python too | 13:45 |
| Big | i found zeo28.sh at /usr/local/etc/rc.dthough | 13:45 |
| betabug | ok, so probably there is a ZEO there | 13:45 |
| betabug | and that would have the "real" data.fs | 13:46 |
| betabug | so likely your setup is pound "balancing" 2 zope instance, which in turn are linked to 1 ZEO db server | 13:46 |
| betabug | well, strictly ZEO isn't only a db server, but nevermind the details :-) | 13:47 |
| Big | this is really making me crazy :-) now all new users i create aren't working | 13:47 |
| betabug | where are you creating them? there might be user folders in various places | 13:48 |
| betabug | and their logins would be valid only "below" that user folder | 13:48 |
| Big | acl_users in the root | 13:49 |
| betabug | what kind of app is running there? plone? | 13:49 |
| Big | no, something custom developed to manage dns records | 13:50 |
| betabug | aha | 13:50 |
| Big | thus the name 'webdns' | 13:50 |
| betabug | dunno then, with plone users would have to be set up through plone | 13:50 |
| betabug | right | 13:50 |
| Big | two of the original users who I changed the password for are working fine | 13:50 |
| Big | the newly created users are no longer fine | 13:50 |
| Big | after deleting multiple zombie users who left the project ages ago :-) | 13:51 |
| Big | let me run only one instance and see if it works, i have a feeling the problem because of multiple instances | 13:52 |
| betabug | maybe | 13:52 |
| betabug | or some caching in pound? | 13:52 |
| Big | do you know how to modify this to start only one instance instead of two? inside the for loop above http://dpaste.org/7Oc3S/ | 13:53 |
| Big | or just uze the zopectl inside the bin folder of that instance to stop it ? | 13:54 |
| betabug | either that or change the zope28_instances list as mentioned in those comments | 13:55 |
| Big | Error Value: You are not allowed to access 'index.html' in this context | 13:56 |
| Big | thats what the new user is getting after trying to enter the pass for multiple times | 13:56 |
| betabug | maybe you havne't set the proper roles for that user? | 13:57 |
| Big | the user can login to /manage with the owner/manager permission | 14:00 |
| Big | but not to the project running there /html/admin | 14:00 |
| betabug | check the security tab of that part to see what role he needs there | 14:00 |
| Big | under the project itself? | 14:05 |
| betabug | in the zope management interface | 14:05 |
| Big | yes im there | 14:05 |
| Big | Acquire permission settings? are checked | 14:05 |
| *** mr_jolly has quit IRC | 14:05 | |
| betabug | well, just look what roles are needed | 14:06 |
| betabug | and then make sure your newly created users have those roles | 14:06 |
| *** giampaolo has joined #zope | 14:08 | |
| *** mr_jolly has joined #zope | 14:10 | |
| Big | no luck | 14:12 |
| Big | hmm | 14:15 |
| Big | seems working | 14:15 |
| Big | let me try from anotehr browser | 14:15 |
| Big | unfortunately due the use of pound its taking the server's forwarding IP not the the user's vistiting IP which showsin Z2.log | 14:18 |
| Big | in the Domains part for restriction | 14:18 |
| betabug | hmm, right | 14:22 |
| betabug | maybe pound can restrict | 14:22 |
| Big | ill start digging into that, but it'll be more hard compared to zope | 14:22 |
| Big | because it will restrict the entire visits including the aplication users | 14:23 |
| *** giampaolo has quit IRC | 14:47 | |
| *** giampaolo has joined #zope | 14:48 | |
| *** alga has joined #zope | 14:49 | |
| *** giampaolo has quit IRC | 14:55 | |
| Big | where is Zope webserver setting ? | 15:11 |
| *** J1m has joined #zope | 15:16 | |
| *** J1m has quit IRC | 15:19 | |
| *** J1m has joined #zope | 15:38 | |
| *** Big has left #zope | 15:46 | |
| *** Big has joined #zope | 15:46 | |
| *** ccomb has joined #zope | 16:03 | |
| *** J1m has quit IRC | 16:05 | |
| *** J1m has joined #zope | 16:09 | |
| *** binjured has left #zope | 16:10 | |
| *** ccomb has quit IRC | 17:26 | |
| *** RichyB has quit IRC | 17:49 | |
| *** giampaolo has joined #zope | 18:06 | |
| *** allisterb has joined #zope | 18:16 | |
| *** J1m has quit IRC | 19:31 | |
| *** J1m has joined #zope | 19:32 | |
| *** J1m has quit IRC | 19:48 | |
| *** m8 has joined #zope | 20:13 | |
| *** m8 has quit IRC | 20:14 | |
| *** m8 has joined #zope | 20:14 | |
| *** J1m has joined #zope | 20:55 | |
| *** J1m has quit IRC | 21:04 | |
| *** J1m has joined #zope | 21:33 | |
| *** J1m has quit IRC | 21:34 | |
| *** sfulmer has joined #zope | 22:52 | |
| *** alexpilz has joined #zope | 22:56 | |
| *** giampaolo has quit IRC | 23:04 | |
Generated by irclog2html.py 2.15.1 by Marius Gedminas - find it at mg.pov.lt!