*** natea has joined #zope3-dev | 00:03 | |
*** natea_ has joined #zope3-dev | 00:09 | |
*** natea has quit IRC | 00:20 | |
*** BjornT has quit IRC | 00:25 | |
*** BjornT has joined #zope3-dev | 00:26 | |
kamalgill | guys, quick zope 3 config question here...looking at zope.conf, what's zope3's equivalent of zope2's effective-user directive? | 00:26 |
---|---|---|
kamalgill | basically, how do i control what user zope runs as? | 00:27 |
*** srichter has quit IRC | 00:29 | |
kamalgill | basically, i'd like to release a Zope 3 installer for Mac OS X, and I need to set the effective user in zope.conf | 00:30 |
kamalgill | however, zope 3 doesn't appear to have an effective-user directive in zope.conf | 00:31 |
benji | I don't think there's a built-in way to do that in Z3, kamalgill | 00:31 |
*** zbir has quit IRC | 00:31 | |
kamalgill | does Zope 3 run as root? | 00:31 |
LucasMIW | I would assume it run as whatever user starts it. | 00:32 |
benji | nope, we normally run it as a normal user and use Apache or Squid, or something else that's actually bound to port 80 | 00:32 |
benji | "we" being "the people I know" :) | 00:32 |
kamalgill | yikes. seems i bit unusual to run it as a privileged user, no? | 00:32 |
kamalgill | *seems a bit unusual* | 00:33 |
LucasMIW | It does seem like a bit of a risk... | 00:33 |
benji | we don't run it as root, I said "we normally run it as a normal user" | 00:34 |
kamalgill | well, if zope is compromised, the cracker would have access to whatever the user starting up the process has access to on the machine | 00:34 |
kamalgill | seems a bit dangerous | 00:34 |
kamalgill | any reason why the effective-user directive was never ported from Zope 2 to Z3? | 00:35 |
benji | the "normal user" doesn't have to have many privs, you can also run it in a chroot jail | 00:35 |
benji | noone's needed it enough, apparently | 00:36 |
kamalgill | benji: well, it really hampers my ability to release a proper installer for Zope 3 | 00:36 |
kamalgill | in fact, i built an OS X installer at the snow sprint in Austria a couple months ago | 00:37 |
kamalgill | but i never released it due to this apparent security lapse | 00:37 |
kamalgill | seems to me that point-n-click installers would help spread the adoption of Zope 3 | 00:38 |
benji | couldn't you use su -u unpriv_user z3.py (or moral equiv) | 00:38 |
kamalgill | hmm, would i modify zopectl in that case? | 00:39 |
benji | I don't think people would run production sites from a point-n-click installed server though, so I'd just make a security note in the distribution about setting it up properly to run a production server | 00:39 |
whit | well...people don't try to until there are point and click installers ;) | 00:41 |
LucasMIW | I could see that being an issue with a startup item, however - needing a password each time. Are you intending to include a startup item? | 00:41 |
kamalgill | good suggestion, but i'd hate for Zope 3 to receive any negative publicity just because some fellow decided to use the installer on a production system and potentially compromised his setup. | 00:41 |
kamalgill | i'd prefer *not* to include a separate startup item | 00:41 |
kamalgill | we should stick with zopectl | 00:41 |
kamalgill | or zeoctl | 00:41 |
kamalgill | basically, stick to conventions | 00:41 |
LucasMIW | Just mentioning it because I know the Plone Mac OS X install includes one. | 00:42 |
kamalgill | to keep documentation and support easier | 00:42 |
kamalgill | LucasMIW: true, but the separate startup script in the Plone OS X installer is going away ;) | 00:42 |
LucasMIW | But then, they do all sorts of crazy stuff. | 00:42 |
kamalgill | yeah, all that crazy stuff will go away in the next OS X Plone installer | 00:43 |
LucasMIW | O, happy day! | 00:43 |
kamalgill | trust me, it will (since I'm building it) | 00:43 |
kamalgill | but, back to the effective-user issue | 00:44 |
kamalgill | how difficult would it be to get that directive in Z3's zope.conf? | 00:44 |
*** kamalgill is now known as kamal-nearby | 00:48 | |
LucasMIW | Actually, looking at the zdaemon code, it may still be in there... | 00:56 |
*** benji has quit IRC | 00:57 | |
kamal-nearby | LucasMIW: really? last time i tried to set effective-user in zope.conf, it wasn't recognized. | 01:00 |
LucasMIW | I'm still trying to figure it out... | 01:01 |
kamal-nearby | ok, thx for looking into it. | 01:01 |
*** natea_ has quit IRC | 01:01 | |
LucasMIW | It seems that you may be able to use: | 01:01 |
LucasMIW | <runner> | 01:01 |
LucasMIW | user your_username | 01:01 |
LucasMIW | </runner> | 01:01 |
*** natea has joined #zope3-dev | 01:01 | |
kamal-nearby | hmm, where is this documented? | 01:02 |
kamal-nearby | or, should i say, what code are you looking at? | 01:02 |
LucasMIW | Not seeing docs for it, just reading from lib/python/zdaemon/zdrun.py and lib/python/zdaemon/sample.conf | 01:03 |
LucasMIW | and lib/python/zdaemon/schema.xml | 01:03 |
kamal-nearby | LucasMIW: ok, i'll give it a try. thx. | 01:04 |
LucasMIW | kamal-nearby: Let me know how it works. :) | 01:05 |
kamal-nearby | will do :) | 01:06 |
*** BjornT has quit IRC | 01:13 | |
*** gumpa has left #zope3-dev | 01:46 | |
*** RaFromBRC is now known as RaFromBRC|away | 01:47 | |
*** natea has quit IRC | 02:00 | |
*** natea has joined #zope3-dev | 02:00 | |
*** jinty has quit IRC | 02:01 | |
*** j1m has quit IRC | 02:01 | |
*** TrevorP has quit IRC | 02:05 | |
*** TrevorP has joined #zope3-dev | 02:05 | |
*** RaFromBRC|away is now known as RaFromBRC | 02:06 | |
*** kamal-nearby is now known as kamal-away | 02:13 | |
*** niemeyer has quit IRC | 02:32 | |
*** zbir has joined #zope3-dev | 02:41 | |
*** RaFromBRC is now known as RaFromBRC|away | 03:09 | |
*** natea has quit IRC | 03:28 | |
*** natea has joined #zope3-dev | 03:29 | |
*** RaFromBRC|away is now known as RaFromBRC | 03:29 | |
*** stub has joined #zope3-dev | 03:54 | |
*** kamal-away has left #zope3-dev | 04:07 | |
*** d2m has quit IRC | 04:42 | |
*** d2m_ has joined #zope3-dev | 04:43 | |
*** mexiKON has joined #zope3-dev | 04:43 | |
*** d2m_ is now known as d2m | 04:43 | |
*** philiKON has quit IRC | 04:54 | |
*** yota has quit IRC | 06:27 | |
*** pcardune has quit IRC | 06:51 | |
*** RaFromBRC has quit IRC | 07:49 | |
*** pcardune has joined #zope3-dev | 07:52 | |
*** eins has joined #zope3-dev | 08:07 | |
eins | hi | 08:07 |
*** stub has quit IRC | 08:19 | |
*** sashav has joined #zope3-dev | 08:33 | |
*** dobee has joined #zope3-dev | 08:34 | |
*** sashav has quit IRC | 08:43 | |
*** zagy has joined #zope3-dev | 08:48 | |
*** TrevorP has quit IRC | 08:56 | |
*** TrevorP has joined #zope3-dev | 09:07 | |
*** mexiKON is now known as philiKON | 09:07 | |
*** hdima has joined #zope3-dev | 09:13 | |
*** BjornT has joined #zope3-dev | 09:24 | |
*** dunny has quit IRC | 09:27 | |
*** dunny has joined #zope3-dev | 09:35 | |
*** romanofski has joined #zope3-dev | 09:39 | |
*** eins has quit IRC | 09:59 | |
*** sashav_ has joined #zope3-dev | 09:59 | |
romanofski | moin | 10:02 |
*** j-w has joined #zope3-dev | 10:04 | |
*** MJ has quit IRC | 10:11 | |
*** J1m has joined #zope3-dev | 10:25 | |
*** ignas has joined #zope3-dev | 10:29 | |
*** zagy_ has joined #zope3-dev | 10:38 | |
*** srichter has joined #zope3-dev | 10:45 | |
*** zagy has quit IRC | 10:46 | |
*** MJ has joined #zope3-dev | 11:01 | |
*** sm has quit IRC | 11:12 | |
*** tiredbones has quit IRC | 11:20 | |
*** romanofski has quit IRC | 11:21 | |
*** alga has joined #zope3-dev | 11:22 | |
*** tiredbones has joined #zope3-dev | 11:24 | |
*** romanofski has joined #zope3-dev | 11:29 | |
*** dobee has quit IRC | 11:32 | |
*** dobee has joined #zope3-dev | 11:42 | |
*** einheit_ is now known as SteveA | 11:59 | |
*** zagy has joined #zope3-dev | 12:00 | |
*** sashav_ has quit IRC | 12:06 | |
*** zagy_ has quit IRC | 12:07 | |
*** stub has joined #zope3-dev | 12:16 | |
*** BjornT has quit IRC | 12:26 | |
*** mkerrin has joined #zope3-dev | 12:26 | |
*** sashav has joined #zope3-dev | 12:27 | |
*** BjornT has joined #zope3-dev | 12:27 | |
*** romanofski has quit IRC | 12:29 | |
*** romanofski has joined #zope3-dev | 12:29 | |
*** Aiste has quit IRC | 12:38 | |
*** ChanServ sets mode: +o srichter | 12:44 | |
*** jinty has joined #zope3-dev | 12:45 | |
*** jhauser_ has joined #zope3-dev | 12:45 | |
*** TrevorP has quit IRC | 12:47 | |
*** TrevorP has joined #zope3-dev | 12:48 | |
*** mgedmin has joined #zope3-dev | 12:49 | |
*** jhauser has quit IRC | 12:58 | |
*** Aiste has joined #zope3-dev | 13:01 | |
*** b_52Free has joined #zope3-dev | 13:06 | |
*** tonico has quit IRC | 13:07 | |
b_52Free | stupid noob question qre possible here ? | 13:10 |
*** tonico has joined #zope3-dev | 13:20 | |
*** faassen has joined #zope3-dev | 13:26 | |
*** dunny has quit IRC | 13:37 | |
b_52Free | ok i kniow the question is stupid bur is it possible to compile the ZServer alone ? not alone i mean look in the source code and execute it ? to know how it work ? | 13:47 |
*** sashav has quit IRC | 14:10 | |
*** sashav has joined #zope3-dev | 14:11 | |
*** yota has joined #zope3-dev | 14:23 | |
*** dobee has quit IRC | 14:33 | |
*** baldtrol has joined #zope3-dev | 14:40 | |
srichter | b_52Free: yes, though I would not recommend it | 14:43 |
srichter | ZServer in Zope 3 is a WSGI server | 14:43 |
srichter | Zope 3 is now switching to Twsited, which also provides a WSGI web server | 14:43 |
srichter | (though ZServer s faster) | 14:43 |
b_52Free | srichter, just to see how the stuff work | 14:44 |
b_52Free | twisted you're talking about the api ? | 14:44 |
srichter | no, we are using the twsited Web and FTP server; the Web server is connected via WSGI | 14:44 |
b_52Free | hm http://www.python.org/dev/peps/pep-0333/ | 14:45 |
b_52Free | but i think that zope is a hole and i want to be more than a simple user so i think there is no way i must start with ZSERVER :) | 14:48 |
*** J1m has quit IRC | 14:49 | |
srichter | b_52Free: if you really want to understand the innerworkings of Zope, you should start with the publisher | 14:50 |
srichter | zope.publisher.publish | 14:50 |
b_52Free | hm | 14:51 |
b_52Free | ok | 14:51 |
*** zbir has quit IRC | 15:12 | |
*** sashav has quit IRC | 15:13 | |
*** sashav has joined #zope3-dev | 15:14 | |
*** sashav has joined #zope3-dev | 15:16 | |
baldtrol | before i run off too far down this road, i'm curious... it seems like coupling formlib with viewlets is a really potent way to create a page, but i admit, i haven't even close to mastered the complexities of either one yet. am i looking at these correctly, that they can be used meaningfully together? | 15:23 |
baldtrol | jeff shell's discussion here http://mail.zope.org/pipermail/zope3-dev/2006-February/018273.html indicates i'm on the right track, but i'm notorious for reading things the way i want them to be, and not necessarily as they are ;) | 15:24 |
*** niemeyer has joined #zope3-dev | 15:32 | |
*** zbir has joined #zope3-dev | 16:03 | |
*** sawdog has joined #zope3-dev | 16:17 | |
*** gumpa has joined #zope3-dev | 16:31 | |
*** oferw has joined #zope3-dev | 16:31 | |
*** sashav has quit IRC | 16:37 | |
*** ignas has quit IRC | 16:50 | |
*** alga has quit IRC | 16:55 | |
*** mgedmin has quit IRC | 16:55 | |
*** Aiste has quit IRC | 16:57 | |
*** sawdog has quit IRC | 16:58 | |
*** benji has joined #zope3-dev | 17:05 | |
*** alga has joined #zope3-dev | 17:06 | |
*** mgedmin has joined #zope3-dev | 17:06 | |
*** Aiste has joined #zope3-dev | 17:08 | |
*** natea has quit IRC | 17:09 | |
*** ignas has joined #zope3-dev | 17:13 | |
*** hdima has quit IRC | 17:16 | |
*** sawdog has joined #zope3-dev | 17:19 | |
*** natea has joined #zope3-dev | 17:23 | |
*** stub has quit IRC | 17:30 | |
*** ignas_ has joined #zope3-dev | 17:31 | |
*** ignas has quit IRC | 17:31 | |
*** ignas__ has joined #zope3-dev | 17:31 | |
*** rockyburt has joined #zope3-dev | 17:36 | |
*** BjornT_ has joined #zope3-dev | 17:36 | |
*** BjornT has quit IRC | 17:37 | |
*** BjornT_ is now known as BjornT | 17:38 | |
*** ignas has joined #zope3-dev | 17:38 | |
*** natea_ has joined #zope3-dev | 17:39 | |
*** d2m has quit IRC | 17:39 | |
*** _ignas has joined #zope3-dev | 17:43 | |
*** ignas_ has quit IRC | 17:48 | |
*** ignas__ has quit IRC | 17:53 | |
*** ignas_ has joined #zope3-dev | 17:56 | |
*** ignas has quit IRC | 17:57 | |
*** ignas__ has joined #zope3-dev | 17:57 | |
*** natea has quit IRC | 18:01 | |
*** alga has quit IRC | 18:02 | |
*** _ignas has quit IRC | 18:03 | |
*** srichter has quit IRC | 18:08 | |
*** ignas_ has quit IRC | 18:14 | |
*** romanofski has quit IRC | 18:16 | |
*** tonico has quit IRC | 18:22 | |
*** j-w has quit IRC | 18:25 | |
*** sm has joined #zope3-dev | 18:28 | |
*** romanofski has joined #zope3-dev | 18:32 | |
*** d2m has joined #zope3-dev | 18:44 | |
*** mgedmin has quit IRC | 18:45 | |
*** Aiste has quit IRC | 18:46 | |
*** tonico has joined #zope3-dev | 18:52 | |
*** ignas__ has quit IRC | 18:53 | |
*** Aiste has joined #zope3-dev | 18:55 | |
*** mgedmin has joined #zope3-dev | 18:56 | |
*** MJ has quit IRC | 19:01 | |
*** kamalgill has joined #zope3-dev | 19:01 | |
*** natea_ has quit IRC | 19:02 | |
*** HammerToe has joined #zope3-dev | 19:03 | |
*** natea has joined #zope3-dev | 19:03 | |
HammerToe | anyone here know the whereabouts of a macos zope3 installer? I'm sure I remember Stephan or someone at the snow sprint mentioning one | 19:03 |
whit | you want to talk to kamalgill | 19:04 |
kamalgill | somebody mention my name? | 19:05 |
HammerToe | kamalgill: did you mention something about a z3 macos installler at the snowsprint? | 19:05 |
kamalgill | yes, i built an OS X Zope 3 installer at the snow sprint | 19:05 |
HammerToe | I can't get python 2.4.2 installed on here | 19:05 |
HammerToe | kamal: where is it? | 19:05 |
HammerToe | oh, and is it tiger or jaguar? I'm still running jag | 19:06 |
kamalgill | it's on tiger, but it should work on jaguar | 19:06 |
kamalgill | i haven't officially released it since i had some questions about the effective-user directive | 19:06 |
HammerToe | kamal: ok well any place I can grab it from? | 19:07 |
kamalgill | i was planning on building one for the latest 3.2.1 release | 19:07 |
kamalgill | do you need it asap? | 19:07 |
HammerToe | kamal: well only if you had it handy | 19:08 |
HammerToe | it is mainly python 2.4.2 i can't get installed | 19:08 |
kamalgill | HammerToe, well, if you just need Python, there's a new universal binary installer for 2.4.3 | 19:08 |
kamalgill | http://www.python.org/download/releases/2.4.3/ | 19:08 |
kamalgill | or, do you absolutely need 2.4.2? | 19:08 |
HammerToe | no 2.4.3 will do | 19:09 |
HammerToe | all I can see in fink is 2.4.1 and that is wanting to compile x11 too | 19:09 |
*** oferw has quit IRC | 19:09 | |
HammerToe | I have to say, I think they've done a damn goood job on the python.org redesign | 19:10 |
kamalgill | HammerToe: http://www.python.org/ftp/python/2.4.3/Universal-MacPython-2.4.3.dmg | 19:10 |
HammerToe | kamal: thanks, found it :) | 19:10 |
kamalgill | np | 19:10 |
philiKON | HammerToe, darwinports is pretty good with up-to-date packages | 19:11 |
*** zagy has quit IRC | 19:17 | |
*** romanofski is now known as rom|aw | 19:17 | |
*** sm has quit IRC | 19:25 | |
*** sm has joined #zope3-dev | 19:25 | |
mgedmin | I'm a bit confused | 19:31 |
mgedmin | what does zope.i18n.translate do when the msgid is a tuple? | 19:31 |
mgedmin | or am I misreading the code of the SelectWidget? | 19:32 |
* mgedmin slaps his forehead | 19:32 | |
mgedmin | _("foo", "bar") is not a tuple, but a messageid, obviously | 19:33 |
*** HammerToe has quit IRC | 19:44 | |
*** MJ has joined #zope3-dev | 19:50 | |
*** kamalgill is now known as kamal | 19:51 | |
*** kamal is now known as kamal-nearby | 19:51 | |
*** zagy has joined #zope3-dev | 20:03 | |
*** newpers has joined #zope3-dev | 20:17 | |
*** newpers has left #zope3-dev | 20:17 | |
*** mgedmin has quit IRC | 20:24 | |
*** mgedmin has joined #zope3-dev | 20:24 | |
*** kamal-nearby is now known as kamalgill | 20:25 | |
*** baldtrol has quit IRC | 20:31 | |
*** RaFromBRC has joined #zope3-dev | 20:43 | |
*** jinty has quit IRC | 20:45 | |
*** faassen has quit IRC | 20:48 | |
*** alga has joined #zope3-dev | 20:48 | |
*** jinty has joined #zope3-dev | 20:56 | |
*** sashav has joined #zope3-dev | 20:58 | |
*** Aiste has quit IRC | 21:03 | |
*** mgedmin has quit IRC | 21:08 | |
*** alga has quit IRC | 21:14 | |
*** b_52Free has quit IRC | 21:14 | |
*** b_52Free has joined #zope3-dev | 21:21 | |
*** whit has quit IRC | 21:30 | |
*** whit has joined #zope3-dev | 21:34 | |
*** Aiste has joined #zope3-dev | 21:35 | |
*** pcardune has quit IRC | 21:45 | |
*** tonico has quit IRC | 21:47 | |
*** dunny has joined #zope3-dev | 22:01 | |
*** srichter has joined #zope3-dev | 22:16 | |
*** mexiKON has joined #zope3-dev | 22:19 | |
*** tonico has joined #zope3-dev | 22:25 | |
*** whit is now known as whit|run | 22:32 | |
*** BjornT has quit IRC | 22:32 | |
*** jinty has quit IRC | 22:33 | |
*** Aiste is now known as Aiste|away | 22:35 | |
*** pcardune has joined #zope3-dev | 22:38 | |
*** zbir has quit IRC | 22:38 | |
*** zbir has joined #zope3-dev | 22:40 | |
*** philiKON has quit IRC | 22:40 | |
*** zagy has quit IRC | 23:00 | |
*** BjornT has joined #zope3-dev | 23:03 | |
*** zagy has joined #zope3-dev | 23:03 | |
*** zagy has quit IRC | 23:11 | |
*** ChanServ sets mode: +o srichter | 23:16 | |
*** mkerrin has quit IRC | 23:33 | |
*** srichter has quit IRC | 23:35 | |
*** srichter has joined #zope3-dev | 23:40 | |
*** sawdog has left #zope3-dev | 23:43 |
Generated by irclog2html.py 2.15.1 by Marius Gedminas - find it at mg.pov.lt!