RE: [Zope] Important Security Concerns

2000-09-12 Thread Coleman, Bryan

That would cause another whole set of problems, unless apache is inherity
more secure than Medusa. I was really wondering what the risks are
associated with those two options.

- Bryan Patrick Coleman
  Questcon Technologies
  (336)273-2428 ext-416
  [EMAIL PROTECTED]

> -Original Message-
> From: Phil Harris [SMTP:[EMAIL PROTECTED]]
> Sent: Tuesday, September 12, 2000 5:15 AM
> To:   Coleman, Bryan; [EMAIL PROTECTED]
> Subject:  Re: [Zope] Important Security Concerns
> 
> Another option might be to proxy the Zope server through Apache on port
> 80.
> 
> 
> - Original Message -
> From: "Coleman, Bryan" <[EMAIL PROTECTED]>
> To: <[EMAIL PROTECTED]>
> Sent: Tuesday, September 12, 2000 12:43 PM
> Subject: [Zope] Important Security Concerns
> 
> 
> > I almost have my company convinced that Zope is the technology to use
> for
> > our Intranet/Extranet. However they are very concerned with security. I
> have
> > proposed two security schemes that I would like zope community feed back
> on
> > for potential holes.
> >
> > Option A: Poke a hole through our firewall on the primary http port or
> on
> > port 8080 to allow Zope pages through and then require authentication on
> the
> > first page.
> >
> > Option B: Set up a DMZ off the firewall to allow the same as the above.
> >
> > Any feed back would be welcome.
> >
> > - Bryan Patrick Coleman
> >   Questcon Technologies
> >   (336)273-2428 ext-416
> >   [EMAIL PROTECTED]
> >
> >
> > ___
> > Zope maillist  -  [EMAIL PROTECTED]
> > http://lists.zope.org/mailman/listinfo/zope
> > **   No cross posts or HTML encoding!  **
> > (Related lists -
> >  http://lists.zope.org/mailman/listinfo/zope-announce
> >  http://lists.zope.org/mailman/listinfo/zope-dev )

___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )




[Zope] Important Security Concerns

2000-09-12 Thread Coleman, Bryan

I almost have my company convinced that Zope is the technology to use for
our Intranet/Extranet. However they are very concerned with security. I have
proposed two security schemes that I would like zope community feed back on
for potential holes.

Option A: Poke a hole through our firewall on the primary http port or on
port 8080 to allow Zope pages through and then require authentication on the
first page.

Option B: Set up a DMZ off the firewall to allow the same as the above.

Any feed back would be welcome.

- Bryan Patrick Coleman
  Questcon Technologies
  (336)273-2428 ext-416
  [EMAIL PROTECTED]


___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )




[Zope] Access and accounts NT vs ?

2000-09-08 Thread Coleman, Bryan

I am developing an Intranet application for the company I work for.  I am
trying to come up with an easy way to tie in the Zope security model and
users in an external database. Is there a way to manipulate the security
access and have those changes reflected in a database such as Gadlfy?  
I would also like to sync the users with there NT accounts.  I have looked
at the NTusersfolder and can not quite figure out how it is supposed to
work. Being a Unix guy I dont have that much experience with NT. And would
it still be feasible to tie it in with a DB?

- Bryan Patrick Coleman
  Questcon Technologies
  (336)273-2428 ext-416
  [EMAIL PROTECTED]


___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )




[Zope] DTML Question on lines

2000-09-07 Thread Coleman, Bryan

I am trying to itterate through a lines property in the folder so that the
options will drop down. I did not think that the following code would work
but I could not think of anything else.

  
  
  


- Bryan Patrick Coleman
  Questcon Technologies
  (336)273-2428 ext-416
  [EMAIL PROTECTED]


___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )




[Zope] Oracle DB Connection

2000-09-02 Thread Coleman, Bryan

I have tried to install the ZOracleDA product for Zope and there is a little
broken box to the product listing which I am assuming meens it is not
working. I also get an error that says.

ZOracleDA Import Traceback
Traceback (innermost last):
  File "C:\PROGRA~1\QUESTC~1\lib\python\OFS\Application.py", line 396, in
import_products
product=__import__(pname, global_dict, global_dict, silly)
  File "C:\PROGRA~1\QUESTC~1\lib\python\Products\ZOracleDA\__init__.py",
line 91, in ?
import DA
  File "C:\PROGRA~1\QUESTC~1\lib\python\Products\ZOracleDA\DA.py", line 91,
in ?
from db import DB
  File "C:\PROGRA~1\QUESTC~1\lib\python\Products\ZOracleDA\db.py", line 89,
in ?
import DCOracle, DateTime
  File
"C:\PROGRA~1\QUESTC~1\lib\python\Products\ZOracleDA\DCOracle\__init__.py",
line 52, in ?
import sys, Buffer
ImportError: No module named Buffer

I am using Zope 2.2.1, is there another module I should be using or is this
the right one?

- Bryan Patrick Coleman
  Questcon Technologies
  (336)273-2428 ext-416
  [EMAIL PROTECTED]



___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )




RE: [Zope] Is Zope slow?

2000-07-07 Thread Coleman, Bryan

Was that Zap or Zope/Medusa. I have run some benchmarks that favored apache
serving the same "static" content that Zope/Medusa was serving.

- Bryan Patrick Coleman
  Questcon Technologies
  (336)273-2428
  [EMAIL PROTECTED]

> -Original Message-
> From: Andy McKay [SMTP:[EMAIL PROTECTED]]
> Sent: Thursday, July 06, 2000 10:15 AM
> To:   [EMAIL PROTECTED]
> Subject:  Re: [Zope] Is Zope slow?
> 
> >  -maybe we could discuss network services/hoster_performance?
> 
> This is more of a problem for most people. One evening whilst bored we
> calculated that Zope could happily serve enough people to fill up our
> pipe... so the bottle neck is our connection.
> 
> Mind you we'd had a beer or two so calculations could be flawed.
> 
> >
> > michael
> > drawingincode
> >
> >
> > ___
> > Zope maillist  -  [EMAIL PROTECTED]
> > http://lists.zope.org/mailman/listinfo/zope
> > **   No cross posts or HTML encoding!  **
> > (Related lists -
> >  http://lists.zope.org/mailman/listinfo/zope-announce
> >  http://lists.zope.org/mailman/listinfo/zope-dev )
> >
> 
> 
> ___
> Zope maillist  -  [EMAIL PROTECTED]
> http://lists.zope.org/mailman/listinfo/zope
> **   No cross posts or HTML encoding!  **
> (Related lists - 
>  http://lists.zope.org/mailman/listinfo/zope-announce
>  http://lists.zope.org/mailman/listinfo/zope-dev )

___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )




[Zope] DTML syntax' not OO?

2000-06-23 Thread Coleman, Bryan

DTML syntax' not OO? Coming from python trying to learn DTML is very
awkward. It seems that there is a different way of doing everything and this
has been very frustrating. Is there an underlying theme to the syntax I am
not picking up on or was this not a concern for creating the language. The
short hand for variables is an example, because it is so different from the
long hand method. The python tags are a little better but the documentation
on them is a little sketchy. The right editor would be able to use them just
as easily as the  style.

- Bryan Patrick Coleman
  Questcon Technologies
  (336)273-2428
  [EMAIL PROTECTED]


___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )




[Zope] DTML newbie question on summation

2000-06-02 Thread Coleman, Bryan

I can't seem to add variables using let. I just get a concatination of the
integers. I am using ...



The days represent hours but are stored as integers in the database.

- Bryan Patrick Coleman
  Questcon Technologies
  (336)273-2428
  [EMAIL PROTECTED]


___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )




RE: [Zope] Medusa vs. Apache

2000-05-26 Thread Coleman, Bryan

If performance is a concern I would go with Apache. It is much more robust
and faster than Medusa. I have load tested them both and Apache leaves
Medusa far behind. 

- Bryan Patrick Coleman
  Questcon Technologies
  (336)273-2428
  [EMAIL PROTECTED]


> -Original Message-
> From: Petru Paler [SMTP:[EMAIL PROTECTED]]
> Sent: Wednesday, May 24, 2000 11:13 AM
> To:   Jilani Khaldi
> Cc:   Zope ML
> Subject:  Re: [Zope] Medusa vs. Apache
> 
> > Hi All,
> > I wonder if it is more convenient to stay with Apache or to move to
> > Medusa for a best use of Zope?
> 
>If you don't need any of the Apache features go with ZServer/Medusa.
> 
> -Petru
> 
> 
> ___
> Zope maillist  -  [EMAIL PROTECTED]
> http://lists.zope.org/mailman/listinfo/zope
> **   No cross posts or HTML encoding!  **
> (Related lists - 
>  http://lists.zope.org/mailman/listinfo/zope-announce
>  http://lists.zope.org/mailman/listinfo/zope-dev )

___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )




[Zope] Zope Product tools.

2000-05-18 Thread Coleman, Bryan

I was wondering if there were any products for the following Genre's
configuration managment, Project managment, bug tracking, cvs browsing
etc

Basically anything that would help with Development and testing.

For that matter it would be cool to see what kind of application type
products are available for Zope use.

- Bryan Patrick Coleman
  Questcon Technologies
  (336)273-2428
  [EMAIL PROTECTED]


___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )