[Zope-dev] Zope Tests: 6 OK, 2 Failed

2009-01-20 Thread Zope Tests Summarizer
Summary of messages to the zope-tests list. Period Mon Jan 19 12:00:00 2009 UTC to Tue Jan 20 12:00:00 2009 UTC. There were 8 messages: 8 from Zope Tests. Test failures - Subject: FAILED (failures=2) : Zope[2.buildout]-trunk Python-2.4.5 : Linux From: Zope Tests Date: Mon Jan 19 20:5

[Zope-dev] ZODB change notifications

2009-01-20 Thread Rowan Woodhouse
Hi, I've got two clients accessing the same object at the same time (one is Zope and the other is a worker interfacing to another system). In the worker client I need to detect a change to the value of an attribute made by the Zope client. I can do this by polling the value of the attribute th

Re: [Zope-dev] Salt-weakness in zope.app.authentication passwordmanagers?

2009-01-20 Thread Martijn Faassen
Shane Hathaway wrote: > Uli Fouquet wrote: >> while working on a password manager tool (commandline) for Grok I >> stumbled over the usage of salts in the password managers of >> `zope.app.authentication`. >> >> In short, they seem to generate (and store) a salt number but do not >> make any use of

Re: [Zope-dev] ZODB change notifications

2009-01-20 Thread Laurence Rowe
Rowan Woodhouse wrote: > Hi, > > I've got two clients accessing the same object at the same time (one is > Zope and the other is a worker interfacing to another system). In the > worker client I need to detect a change to the value of an attribute > made by the Zope client. I can do this by pol

Re: [Zope-dev] Salt-weakness in zope.app.authentication passwordmanagers?

2009-01-20 Thread Uli Fouquet
Hi there, Shane Hathaway wrote: > We should really be using the SSHA standard (as defined by LDAP) as a > minimum. SSHA was the default in Zope 2, but someone forgot to bring > this code over to Zope 3. > > http://svn.zope.org/Zope/trunk/lib/python/AccessControl/AuthEncoding.py?rev=94737&view

Re: [Zope-dev] Salt-weakness in zope.app.authentication passwordmanagers?

2009-01-20 Thread Shane Hathaway
Martijn Faassen wrote: > Shane Hathaway wrote: >> We should really be using the SSHA standard (as defined by LDAP) as a >> minimum. SSHA was the default in Zope 2, but someone forgot to bring >> this code over to Zope 3. >> >> http://svn.zope.org/Zope/trunk/lib/python/AccessControl/AuthEncoding.

Re: [Zope-dev] Salt-weakness in zope.app.authentication passwordmanagers?

2009-01-20 Thread Shane Hathaway
Uli Fouquet wrote: > Shane Hathaway wrote: >> http://svn.zope.org/Zope/trunk/lib/python/AccessControl/AuthEncoding.py?rev=94737&view=markup > > Is there some recent documentation about SSHA available? The netscape > links seems to be down. I'm not sure where to find that documentation now (Mozill

Re: [Zope-dev] Salt-weakness in zope.app.authentication passwordmanagers?

2009-01-20 Thread Shane Hathaway
Uli Fouquet wrote: > Is there some recent documentation about SSHA available? The netscape > links seems to be down. I finally found a good source. Look at the Python code at the bottom of this page: http://www.openldap.org/faq/data/cache/347.html Shane ___

Re: [Zope-dev] Zope Tests: 6 OK, 2 Failed

2009-01-20 Thread Tres Seaver
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Zope Tests Summarizer wrote: > Summary of messages to the zope-tests list. > Period Mon Jan 19 12:00:00 2009 UTC to Tue Jan 20 12:00:00 2009 UTC. > There were 8 messages: 8 from Zope Tests. > > > Test failures > - > > Subject: FAILED (fa