plone-users — General mailinglist for users of Plone

Re: [Plone-Users] [Plone-developers] URGENT / ACTION REQUIRED: Plone security vulnerability, hotfix 20150910

[Jean J. <jea...@gm...>]

On Tue, Sep 22, 2015 at 9:20 AM, Nathan Van Gheem <van...@gm...> wrote:
> IMO, it's probably best to monitor:
> https://plone.org/products/plone/security/advisories/all-advisories/RSS

It is the most targeted, but unless an admin is actively checking
they'll miss updates.
Also, the dates in the feed should be correct:
  https://github.com/plone/Products.ATContentTypes/issues/24

-- 
jean                                              . .. .... //\\\oo///\\

Re: [Plone-Users] [Plone-developers] URGENT / ACTION REQUIRED: Plone security vulnerability, hotfix 20150910

[Nathan V. G. <van...@gm...>]

IMO, it's probably best to monitor:
https://plone.org/products/plone/security/advisories/all-advisories/RSS

We should be trying to hit-up all lists with the announcements though.

On Mon, Sep 21, 2015 at 5:55 AM, Jean Jordaan <jea...@gm...>
wrote:

> Hi Kim and all
>
> I've been asked what the proper place is to monitor for Plone security
> alerts. This one was sent to plone-announce, -users, -dev, posted on the
> community site, and to the Plone site.
>
> It doesn't show up at the sourceforge list archive for plone-announce (it
> shows nothing for 2015), so I wanted to check if this list is still
> working.
>
> The other lists and community site are too noisy for sysadmin staff to
> monitor. The RSS feed from the Plone site could work, but RSS is pull,
> which is bad for alerts.
>
> What's the best place to monitor for alerts?
>
> --
> Jean
>
>
> ------------------------------------------------------------------------------
>
> _______________________________________________
> Plone-developers mailing list
> Plo...@li...
> https://lists.sourceforge.net/lists/listinfo/plone-developers
>
>


-- 
Nathan Van Gheem
Solutions Architect
Wildcard Corp

Re: [Plone-Users] [Plone-developers] URGENT / ACTION REQUIRED: Plone security vulnerability, hotfix 20150910

[Jean J. <jea...@gm...>]

Hi Kim and all

I've been asked what the proper place is to monitor for Plone security
alerts. This one was sent to plone-announce, -users, -dev, posted on the
community site, and to the Plone site.

It doesn't show up at the sourceforge list archive for plone-announce (it
shows nothing for 2015), so I wanted to check if this list is still
working.

The other lists and community site are too noisy for sysadmin staff to
monitor. The RSS feed from the Plone site could work, but RSS is pull,
which is bad for alerts.

What's the best place to monitor for alerts?

-- 
Jean

[Plone-Users] CSRF Protection for plone 3.3.1

[eras m. <er...@gm...>]

Dear All,

How to implement automatic csrf protection for plone 3.3.1?
Please Help.

Regards,
Erasmus

[Plone-Users] ANN: eGenix mxODBC Plone/Zope Database Adapter 2.2.3

[eGenix T. M.-A. L. <in...@eg...>]

________________________________________________________________________
ANNOUNCING

                  mxODBC Plone/Zope Database Adapter

                            Version 2.2.3

              for the Plone CMS and Zope server platform

              Available for Plone 4.0-4.3 and Plone 5.0,
                        Zope 2.12 and 2.13, on
        Windows, Linux, Mac OS X, FreeBSD and other platforms

This announcement is also available on our web-site for online reading:
http://www.egenix.com/company/news/eGenix-mxODBC-Zope-DA-2.2.3-GA.html

________________________________________________________________________
INTRODUCTION

The eGenix mxODBC Zope DA allows you to easily connect your Zope or
Plone CMS installation to just about any database backend on the
market today, giving you the reliability of the commercially supported
eGenix product mxODBC and the flexibility of the ODBC standard as
middle-tier architecture.

The mxODBC Zope Database Adapter is highly portable, just like Zope
itself, and provides a high performance interface to all your ODBC
data sources, using a single well-supported interface on Windows,
Linux, Mac OS X, FreeBSD and other platforms.

This makes it ideal for deployment in ZEO Clusters and Zope hosting
environments where stability and high performance are a top priority,
establishing an excellent basis and scalable solution for your Plone
CMS.

Product page:

    http://www.egenix.com/products/zope/mxODBCZopeDA/

________________________________________________________________________
NEWS

The 2.2.3 release of our mxODBC Zope/Plone Database Adapter product is
a patch level release of the popular ODBC database interface for Plone
and Zope. It includes these enhancements and fixes:

Feature Updates
---------------

 * We have integrated a new option to force serialized connects on a
   per Zope connection object basis. This can be used to work around
   bugs in ODBC drivers which are not fully thread-safe in the connect
   phase. The option is disabled per default.

Driver Compatibility Enhancements
---------------------------------

 * ODBC driver compatibility updated. Upgraded to the latest mxODBC
   3.3.5 release, adding compatibility enhancements for MS SQL
   Server. See the mxODBC 3.3.5 release announcements for full
   details.

Installation Enhancements
-------------------------

 * Added pip install compatibility to mxODBC Zope DA by creating
   prebuilt archives and uploading a web installer to PyPI. This can
   be useful if you are installing Zope or Plone using a
   requirements.txt type approach, e.g. using

   pip install ThreadLock Products.ZSQLMethods egenix-mxodbc-zopeda

 * Enabled creating wheels from the prebuilt archives, which helps
   when running pip with the wheels package installed. pip then tries
   to build wheels during installation and caches them for future
   reuse.

The complete list of changes is available on the mxODBC Zope DA
changelog page.

    http://www.egenix.com/products/zope/mxODBCZopeDA/changelog.html

mxODBC Zope DA 2.2.0 was released on 2014-12-11. Please see the mxODBC
Zope DA 2.2.0 release announcement for all the new features we have
added.

http://www.egenix.com/company/news/eGenix-mxODBC-Zope-DA-2.2.0-GA.html

For the full list of features, please see the mxODBC Zope DA feature
list:

    http://www.egenix.com/products/zope/mxODBCZopeDA/#Features

The complete list of changes is available on the mxODBC Zope DA
changelog page.


________________________________________________________________________
UPGRADING

Users are encouraged to upgrade to this latest mxODBC Plone/Zope
Database Adapter release to benefit from the new features and updated
ODBC driver support. We have taken special care not to introduce
backwards incompatible changes, making the upgrade experience as
smooth as possible.

For major and minor upgrade purchases, we will give out 20% discount
coupons going from mxODBC Zope DA 1.x to 2.2 and 50% coupons for
upgrades from mxODBC 2.x to 2.2. After upgrade, use of the original
license from which you upgraded is no longer permitted. Patch level
upgrades (e.g. 2.2.0 to 2.2.3) are always free of charge.

Please contact the eGenix.com Sales Team with your existing license
serials for details for an upgrade discount coupon.

If you want to try the new release before purchase, you can request
30-day evaluation licenses by visiting our web-site or writing to
sa...@eg..., stating your name (or the name of the company) and
the number of eval licenses that you need.

    http://www.egenix.com/products/python/mxODBCZopeDA/#Evaluation

________________________________________________________________________
DOWNLOADS

Please visit the eGenix mxODBC Zope DA product page for downloads,
instructions on installation and documentation of the packages:

    http://www.egenix.com/company/products/zope/mxODBCZopeDA/

If you want to try the package, please jump straight to the download
instructions:

    http://www.egenix.com/products/zope/mxODBCZopeDA/#Download

Fully functional evaluation licenses for the mxODBC Zope DA are
available free of charge:

    http://www.egenix.com/products/zope/mxODBCZopeDA/#Evaluation

________________________________________________________________________
SUPPORT

Commercial support for this product is available directly from
eGenix.com.

Please see the support section of our website for details:

    http://www.egenix.com/services/support/

________________________________________________________________________
MORE INFORMATION

For more information on eGenix mxODBC Zope DA, licensing and download
instructions, please write to sa...@eg....

About eGenix (http://www.egenix.com/):

    eGenix is a software project, consulting and product company
    focusing on expert project services and professional quality
    products for companies, Python users and developers.

Enjoy,
-- 
Marc-Andre Lemburg
eGenix.com

Professional Python Services directly from the Source  (#1, Sep 14 2015)
>>> Python Projects, Coaching and Consulting ...  http://www.egenix.com/
>>> mxODBC Plone/Zope Database Adapter ...       http://zope.egenix.com/
>>> mxODBC, mxDateTime, mxTextTools ...        http://python.egenix.com/
________________________________________________________________________
2015-09-18: PyCon UK 2015 ...                               4 days to go
2015-10-21: Python Meeting Duesseldorf ...                 37 days to go

::::: Try our mxODBC.Connect Python Database Interface for free ! ::::::

   eGenix.com Software, Skills and Services GmbH  Pastor-Loeh-Str.48
    D-40764 Langenfeld, Germany. CEO Dipl.-Math. Marc-Andre Lemburg
           Registered at Amtsgericht Duesseldorf: HRB 46611
               http://www.egenix.com/company/contact/

[Plone-Users] URGENT / ACTION REQUIRED: Plone security vulnerability, hotfix 20150910

[<ng...@pl...>]

The Plone security team is releasing the following hotfix that affects all current Plone versions.

Please make arrangements to install this hotfix as soon as possible.  See below for more information.

https://plone.org/products/plone/security/advisories/20150910-announcement <https://plone.org/products/plone/security/advisories/20150910-announcement> 

https://plone.org/products/plone-hotfix/releases/20150910 <https://plone.org/products/plone-hotfix/releases/20150910> 

Security vulnerability: 20150910 - Multiple vectors
Patches to Zope and Plone for a variety of issues.
Versions Affected: All current Plone versions. 
Versions Not Affected: None.

Nature of vulnerability: Allows creation of members by anonymous users on sites that have self-registration enabled.

The patch can be added to buildouts as Products.PloneHotfix20150910 (available from PyPI) or downloaded from Plone.org

This patch is compatible with all supported Plone versions (i.e. Plone 3, Plone 4, Plone 5). It may work on earlier versions of Plone, but as these are unsupported they have undergone less testing.

This fix covers vulnerabilities spanning multiple versions of Plone.

Immediate Measures You Should Take
Disable self-registration until you have applied the patch.

Installation
Full installation instructions are available on the HotFix release page  <https://plone.org/products/plone-hotfix/releases/20150910>.

Extra Help
Should you not have in-house server administrators or a service agreement looking after your website, you can find consulting companies at plone.com/providers  <http://plone.com/providers>and plone.org/support/network  <https://plone.org/support/network>.

There is also free support  <https://plone.org/support>available online via Plone mailing lists and the Plone IRC channels.

Questions and Answers
Q. What will be involved in applying the patch? 
A. Patches are made available as tarball-style archives that may be unpacked into the “products” folder of a buildout installation and as Python packages that may be installed by editing a buildout configuration file and running buildout. Patching is generally easy and quick to accomplish. 

Q: How were these vulnerability found? 
A: The majority of issues were found as part of audits performed by the Plone Security team. A subset were reported by users. More details will be available upon release of the patch.

Q: My site is highly visible and mission-critical. I hear the patch has already been developed. Can I get the fix before the release date? 
A: No. The patch will be made available to all users at the same time . There are no exceptions.

Q: If the patch has been developed already, why isn't it made available to the public now? 
A: The Security Team is still testing the patch and running various scenarios thoroughly. The team is also making sure everybody has appropriate time to plan to patch their Plone installation(s). Some consultancy organizations have hundreds of sites to patch and need the extra time to coordinate their efforts with their clients.

Q: How does one exploit the vulnerability? 
A: This information will not be made public until after the patch is made available.

General questions about this announcement , Plone patching procedures, and availability of support may be addressed to the Plone support forums  <https://plone.org/support>. If you have specific questions about this vulnerability or its handling, contact the Plone Security Team  <mailto:sec...@pl...>.

To report potentially security-related issues , e-mail the Plone Security Team at sec...@pl... <mailto:sec...@pl...>. We are always happy to credit individuals and companies who make responsible disclosures.

Information for Vulnerability Database Maintainers
We have already applied for CVE numbers for these issues. Further information on individual vulnerabilities (including CVSS scores, CWE identifiers and summaries) is available at the full vulnerability list <https://plone.org/products/plone/security/>

Re: [Plone-Users] Compiling Plone dependencies on Windows Server 2012

[Christoph P. <pin...@gm...>]

 Thanks, Steve, that's something I didn't try yet... :-)
Best regards,
Christoph

2015-09-08 19:24 GMT+02:00 Steve McMahon <st...@dc...>:

> Have you tried installing lxml into your Plone's Python by using a binary
> lxml from PyPI?
>
> https://pypi.python.org/pypi/lxml
>
>
> On Tue, Sep 8, 2015 at 5:31 AM, Christoph Pingel <pin...@gm...>
> wrote:
>
>> Hi all,
>>
>> I'm trying to migrate an existing Plone project to the Windows Server
>> 2012 R2 platform.
>> Plone version is 4.1.6 and it needs lxml >= 3.2.3.
>> I installed the preconfigured standards windows installer vom Enfold
>> Systems and edited buildout.cfg according to my preferences.
>> Now whenever I run buildout, I get the error 'Setup script exited with
>> error: Unable to find vcvarsall.bat' as soon as buildout tries to build
>> lxml.
>>
>> AFAIK, vcvarsall.bat has to do with the choice of compiler on the
>> platform.
>> Python however seems to be built with Virtual C++ 9.0 (since there's a
>> Microsoft.VC90.CRT.Manifest file in the python directory of my instance),
>> but that doesn't necessarily mean that VC90 is installed, right?
>>
>> (Windows isn't my platform *at all*, and last time I had a similar issue
>> I ended up installing cygwin and running everything there which I want to
>> avoid this time.)
>>
>> What is the recommended way to install lxml on the Windows platform, and
>> where is it documented? Any input is appreciated,
>> TIA,
>> Christoph
>>
>>
>>
>>
>> ------------------------------------------------------------------------------
>>
>> _______________________________________________
>> Plone-Users mailing list
>> Plo...@li...
>> https://lists.sourceforge.net/lists/listinfo/plone-users
>>
>>
>

Re: [Plone-Users] Compiling Plone dependencies on Windows Server 2012

[Steve M. <st...@dc...>]

Have you tried installing lxml into your Plone's Python by using a binary
lxml from PyPI?

https://pypi.python.org/pypi/lxml


On Tue, Sep 8, 2015 at 5:31 AM, Christoph Pingel <pin...@gm...>
wrote:

> Hi all,
>
> I'm trying to migrate an existing Plone project to the Windows Server 2012
> R2 platform.
> Plone version is 4.1.6 and it needs lxml >= 3.2.3.
> I installed the preconfigured standards windows installer vom Enfold
> Systems and edited buildout.cfg according to my preferences.
> Now whenever I run buildout, I get the error 'Setup script exited with
> error: Unable to find vcvarsall.bat' as soon as buildout tries to build
> lxml.
>
> AFAIK, vcvarsall.bat has to do with the choice of compiler on the
> platform.
> Python however seems to be built with Virtual C++ 9.0 (since there's a
> Microsoft.VC90.CRT.Manifest file in the python directory of my instance),
> but that doesn't necessarily mean that VC90 is installed, right?
>
> (Windows isn't my platform *at all*, and last time I had a similar issue I
> ended up installing cygwin and running everything there which I want to
> avoid this time.)
>
> What is the recommended way to install lxml on the Windows platform, and
> where is it documented? Any input is appreciated,
> TIA,
> Christoph
>
>
>
>
> ------------------------------------------------------------------------------
>
> _______________________________________________
> Plone-Users mailing list
> Plo...@li...
> https://lists.sourceforge.net/lists/listinfo/plone-users
>
>

Re: [Plone-Users] customize login form for captcha

[Mike M. <mi...@we...>]

I'm successfully using collective.recaptcha 1.1.3 on a plone 3.3.6 site.

On 19 August 2015 at 13:10, eras mus <er...@gm...> wrote:

> Hi,
>
> I need to add captcha for login form.
> I am using plone 3.3.1.
> I've installed collective.captcha 1.7
>
> Customized login_form
> http://pastebin.com/qyfT8MuF
> and Customized login_form_validate (Validate login)
> http://pastebin.com/Dw8ctuSR
>
> I am get the captcha field in login form . Eventhough I enter
> username, password and captcha field correctly I am not able to login
> successfully. I am rediected to login page again.
> Anything else to be done?
>
>
> ------------------------------------------------------------------------------
> _______________________________________________
> Plone-Users mailing list
> Plo...@li...
> https://lists.sourceforge.net/lists/listinfo/plone-users
>



-- 
Mike Metcalfe

082 903 8268
mi...@we...
www.webtide.co.za

[Plone-Users] customize login form for captcha

[eras m. <er...@gm...>]

Hi,

I need to add captcha for login form.
I am using plone 3.3.1.
I've installed collective.captcha 1.7

Customized login_form
http://pastebin.com/qyfT8MuF
and Customized login_form_validate (Validate login)
http://pastebin.com/Dw8ctuSR

I am get the captcha field in login form . Eventhough I enter
username, password and captcha field correctly I am not able to login
successfully. I am rediected to login page again.
Anything else to be done?

Re: [Plone-Users] Catalog index for cioppino.twothumbs

[Andreas M. <ma...@gm...>]

Hi David,

Am 13.08.2015 um 12:42 schrieb David Siedband:
> Hi Andreas,
>
>>> I’ve installed cioppino.twothumbs 1.7 into one of my Plone 4.3 sites.
>>>
>>> I’m interested to sort catalog search results based on their rating.
>>>
>>> When I look at portal_catalog, I see an index named
>>> “positive_ratings", but it seems to be empty: no distinct values, no
>>> objects indexed.
>>>
>>> Is this a bug, or an unfinished feature?  Anyone have indexing
>>> working for cioppino.twothumbs ratings…  advice about how to
>>> fix/implement?
>>
>> I use it for a project with Dexterity content types and it seemed to
>> work as expected (https://github.com/tdf/tdf.extensionsuploadcenter). I
>> get indexed ratings in portal_catalog.
>
> Hmm, what are the index names you’re seeing?  Is it “positive_ratings”
> or something else.

it is positive_ratings.

I only use the product with

<div tal:content="structure project/@@rate-if-you-dare"/> in the page
template. And some of my catalog querries are sorted by positive_ratings.

Regards,
Andreas

-- 
## Developer LibreOffice
## Freie Office-Suite für Linux, Mac, Windows
## http://LibreOffice.org
## Support the Document Foundation (http://documentfoundation.org)
## Meine Seite: http://www.amantke.de 

Re: [Plone-Users] Catalog index for cioppino.twothumbs

[David S. <tec...@oc...>]

Hi Andreas,

>> I’ve installed cioppino.twothumbs 1.7 into one of my Plone 4.3 sites.
>> 
>> I’m interested to sort catalog search results based on their rating.
>> 
>> When I look at portal_catalog, I see an index named “positive_ratings", but it seems to be empty: no distinct values, no objects indexed.
>> 
>> Is this a bug, or an unfinished feature?  Anyone have indexing working for cioppino.twothumbs ratings…  advice about how to fix/implement?
> 
> I use it for a project with Dexterity content types and it seemed to
> work as expected (https://github.com/tdf/tdf.extensionsuploadcenter). I
> get indexed ratings in portal_catalog.

Hmm, what are the index names you’re seeing?  Is it “positive_ratings” or something else.

I’m calling the rating view inline, in order to integrate it with Ploneboard.  The votes are recorded just fine, and the ratings persist through page-reloads.

What should I be looking for to debug this?  Some sort of event being triggered by the vote action?

Thanks,
--
David Siedband
http://zentraal.com

Re: [Plone-Users] Catalog index for cioppino.twothumbs

[Andreas M. <ma...@gm...>]

Hello,

Am 09.08.2015 um 10:10 schrieb David Siedband:
> I’ve installed cioppino.twothumbs 1.7 into one of my Plone 4.3 sites.
>
> I’m interested to sort catalog search results based on their rating.
>
> When I look at portal_catalog, I see an index named “positive_ratings", but it seems to be empty: no distinct values, no objects indexed.
>
> Is this a bug, or an unfinished feature?  Anyone have indexing working for cioppino.twothumbs ratings…  advice about how to fix/implement?
>

I use it for a project with Dexterity content types and it seemed to
work as expected (https://github.com/tdf/tdf.extensionsuploadcenter). I
get indexed ratings in portal_catalog.

Regards,
Andreas

-- 
## Developer LibreOffice
## Freie Office-Suite für Linux, Mac, Windows
## http://LibreOffice.org
## Support the Document Foundation (http://documentfoundation.org)
## Meine Seite: http://www.amantke.de 

[Plone-Users] Catalog index for cioppino.twothumbs

[David S. <tec...@oc...>]

I’ve installed cioppino.twothumbs 1.7 into one of my Plone 4.3 sites.

I’m interested to sort catalog search results based on their rating.

When I look at portal_catalog, I see an index named “positive_ratings", but it seems to be empty: no distinct values, no objects indexed.

Is this a bug, or an unfinished feature?  Anyone have indexing working for cioppino.twothumbs ratings…  advice about how to fix/implement?

Thanks,
--
David Siedband
http://zentraal.com

Re: [Plone-Users] Plone 3.3..1 captcha

[Andrea C. <and...@re...>]

Hi,
for PloneFormGen you can use recaptcha too (it has a native support):
http://docs.plone.org/working-with-content/managing-content/ploneformgen/captcha.html

For contact form there is this product if you don't want to customize it:
https://pypi.python.org/pypi/collective.captchacontactinfo (the base is
always collective.recaptcha)

And for the login, i think that you should customize it by yourself ;)

2015-08-05 8:20 GMT+02:00 Mike Metcalfe <mi...@we...>:

> I use collective.recaptcha (ver 1.1.3) in a production plone 3.3.6 site.
>
>
> On 5 August 2015 at 07:14, eras mus <er...@gm...> wrote:
>
>> Hi All,
>>
>> I am using Plone 3.3.1. and PloneFormGen 1.5.2.
>> I want to add captcha for plone forms like  login form, contact form
>> etc. and also for forms created by using PloneFormGen.
>> Could anyone suggestt a suitable add on ?
>>
>>
>> ------------------------------------------------------------------------------
>> _______________________________________________
>> Plone-Users mailing list
>> Plo...@li...
>> https://lists.sourceforge.net/lists/listinfo/plone-users
>>
>
>
>
> --
> Mike Metcalfe
>
> 082 903 8268
> mi...@we...
> www.webtide.co.za
>
>
> ------------------------------------------------------------------------------
>
> _______________________________________________
> Plone-Users mailing list
> Plo...@li...
> https://lists.sourceforge.net/lists/listinfo/plone-users
>
>


-- 
Andrea Cecchi - RedTurtle Technology
E-mail:      andrea.cecchi AT redturtle DOT it
Web site: http://www.redturtle.net
Phone:     +39 0532 1915958
Fax:          +39 0532 287070

Re: [Plone-Users] Plone 3.3..1 captcha

[Mike M. <mi...@we...>]

I use collective.recaptcha (ver 1.1.3) in a production plone 3.3.6 site.


On 5 August 2015 at 07:14, eras mus <er...@gm...> wrote:

> Hi All,
>
> I am using Plone 3.3.1. and PloneFormGen 1.5.2.
> I want to add captcha for plone forms like  login form, contact form
> etc. and also for forms created by using PloneFormGen.
> Could anyone suggestt a suitable add on ?
>
>
> ------------------------------------------------------------------------------
> _______________________________________________
> Plone-Users mailing list
> Plo...@li...
> https://lists.sourceforge.net/lists/listinfo/plone-users
>



-- 
Mike Metcalfe

082 903 8268
mi...@we...
www.webtide.co.za

[Plone-Users] Plone 3.3..1 captcha

[eras m. <er...@gm...>]

Hi All,

I am using Plone 3.3.1. and PloneFormGen 1.5.2.
I want to add captcha for plone forms like  login form, contact form
etc. and also for forms created by using PloneFormGen.
Could anyone suggestt a suitable add on ?

Re: [Plone-Users] plone.session 3.5.2 install in plone 3.3.1

[Daniel J. <dt...@jo...>]

Hi there,

    have you got Products.ResourceRegistries 2.0a1 or later?

See reference to authenticated here:
https://github.com/plone/Products.ResourceRegistries/blob/e64ba5c6f9f81e15c1a18eaa827465904b4266f6/CHANGES.rst#20a1---2009-11-16

cheers,
Daniel

On 29/07/15 08:43, eras mus wrote:
> Hi All,
>
> Using Plone 3.3.1 .I tried to install plone.session 3.5.2.
> Added it to buildout and rerun.
> It was successful. In Add-on Products, i am able to see Session
> refresh support 3.5.2.
> But when i try to install. I get error.
> http://pastebin.com/te8METB1
>
> ------------------------------------------------------------------------------
> _______________________________________________
> Plone-Users mailing list
> Plo...@li...
> https://lists.sourceforge.net/lists/listinfo/plone-users

[Plone-Users] plone.session 3.5.2 install in plone 3.3.1

[eras m. <er...@gm...>]

Hi All,

Using Plone 3.3.1 .I tried to install plone.session 3.5.2.
Added it to buildout and rerun.
It was successful. In Add-on Products, i am able to see Session
refresh support 3.5.2.
But when i try to install. I get error.
http://pastebin.com/te8METB1

Re: [Plone-Users] Server Version disclosure

[Servilio A. P. <afr...@rh...>]

On Mon, Jul 13 2015, eras mus wrote:

> Hi All,
>
> I have to disable server version disclosure.
>
> Apache is in the front-end of plone.Added the following in apache configuration
>
> ServerTokens Prod
> ServerSignature Off
>
> When acessing the site by using
> wget -S https://www.mydomain.com --no-check-certificate
>
> I still get
> Server: Zope/(Zope 2.10.9-final, python 2.4.6, linux2) ZServer/1.1 Plone/3.3.1
>
> I don't want this server information to be displayed.
> Anything more to be done? Please help.

Have you tried using the Header directive[1] from mod_headers? Either the «edit*»
or «unset» actions might work.

Servilio

Footnotes:

[1] http://httpd.apache.org/docs/2.4/mod/mod_headers.html#header

-- 

Servilio Afre Puentes
Programmer/Analyst, SHARCNET project
RHPCS | http://www.rhpcs.mcmaster.ca
SHARCNET | https://sharcnet.ca
Compute/Calcul Canada | http://www.computecanada.ca

905-525-9140, x22540

Re: [Plone-Users] ZRS and plone.app.theming

[Mike M. <mi...@we...>]

Got it! I deleted the theme from master and uploaded it again and it
replicated the theme correctly and continues to do so.

Thanks for your advice, Nathan and Kim.

BTW, I learnt today that diazo themes are stored in /portal_resources.


On 13 July 2015 at 16:22, Nathan Van Gheem <van...@gm...> wrote:

> It's possible, you need to wipe the data from your secondary zeo server
> and re-start the replication.
>
> On Mon, Jul 13, 2015 at 4:21 PM, Nathan Van Gheem <van...@gm...>
> wrote:
>
>> Well, how are you changing the css in the theme? If you're doing it TTW,
>> it is stored in the zodb. If you're doing it on the FS, it's not.
>>
>> In any case, you should never have to turn off read-only on a slave,
>> update, then turn it read-only again. Something is wrong--it doesn't work
>> that way. In fact, making a change to the ZODB on a slave, would make the
>> replication get out of sync and it won't replicate anymore.
>>
>> On Mon, Jul 13, 2015 at 4:14 PM, Mike Metcalfe <mi...@we...>
>> wrote:
>>
>>> I just double checked, changing css in a theme on master does not get
>>> replicated to the slave. I can only presume that the theme is not stored in
>>> the zodb.
>>>
>>> On 13 July 2015 at 14:39, Nathan Van Gheem <van...@gm...> wrote:
>>>
>>>> The whole point of ZRS is to be able to have data replicated. If things
>>>> are edited in the database on master, they should be replicated to the
>>>> secondary read-only zeo.
>>>>
>>>> Are you certain it's replicating correctly?
>>>>
>>>> On Mon, Jul 13, 2015 at 2:27 PM, Mike Metcalfe <mi...@we...>
>>>> wrote:
>>>>
>>>>> Hi Nathanm
>>>>>
>>>>> On 13 July 2015 at 12:59, Nathan Van Gheem <van...@gm...> wrote:
>>>>>
>>>>>> You are still using a primary zeo server right? Assuming you're
>>>>>> talking about doing changes TTW. Why not just change the skin on the
>>>>>> primary and it'll get replicated out.
>>>>>>
>>>>>
>>>>> I'm not sure what you mean by a primary zeo. I have 2 zeo clusters, a
>>>>> master that replicates to a specific port and a slave that replicates from
>>>>> that port (with all clients in readonly mode). When I make style changes in
>>>>> the master TTW I don't get that replicated to the slave. However,
>>>>> activating/deactivating the skin on the master does affect the slave.
>>>>>
>>>>
>>>>
>>>>
>>>> --
>>>> Nathan Van Gheem
>>>> Solutions Architect
>>>> Wildcard Corp
>>>>
>>>
>>>
>>>
>>> --
>>> Mike Metcalfe
>>>
>>> 082 903 8268
>>> mi...@we...
>>> www.webtide.co.za
>>>
>>
>>
>>
>> --
>> Nathan Van Gheem
>> Solutions Architect
>> Wildcard Corp
>>
>
>
>
> --
> Nathan Van Gheem
> Solutions Architect
> Wildcard Corp
>



-- 
Mike Metcalfe

082 903 8268
mi...@we...
www.webtide.co.za

Re: [Plone-Users] ZRS and plone.app.theming

[Nathan V. G. <van...@gm...>]

It's possible, you need to wipe the data from your secondary zeo server and
re-start the replication.

On Mon, Jul 13, 2015 at 4:21 PM, Nathan Van Gheem <van...@gm...>
wrote:

> Well, how are you changing the css in the theme? If you're doing it TTW,
> it is stored in the zodb. If you're doing it on the FS, it's not.
>
> In any case, you should never have to turn off read-only on a slave,
> update, then turn it read-only again. Something is wrong--it doesn't work
> that way. In fact, making a change to the ZODB on a slave, would make the
> replication get out of sync and it won't replicate anymore.
>
> On Mon, Jul 13, 2015 at 4:14 PM, Mike Metcalfe <mi...@we...> wrote:
>
>> I just double checked, changing css in a theme on master does not get
>> replicated to the slave. I can only presume that the theme is not stored in
>> the zodb.
>>
>> On 13 July 2015 at 14:39, Nathan Van Gheem <van...@gm...> wrote:
>>
>>> The whole point of ZRS is to be able to have data replicated. If things
>>> are edited in the database on master, they should be replicated to the
>>> secondary read-only zeo.
>>>
>>> Are you certain it's replicating correctly?
>>>
>>> On Mon, Jul 13, 2015 at 2:27 PM, Mike Metcalfe <mi...@we...>
>>> wrote:
>>>
>>>> Hi Nathanm
>>>>
>>>> On 13 July 2015 at 12:59, Nathan Van Gheem <van...@gm...> wrote:
>>>>
>>>>> You are still using a primary zeo server right? Assuming you're
>>>>> talking about doing changes TTW. Why not just change the skin on the
>>>>> primary and it'll get replicated out.
>>>>>
>>>>
>>>> I'm not sure what you mean by a primary zeo. I have 2 zeo clusters, a
>>>> master that replicates to a specific port and a slave that replicates from
>>>> that port (with all clients in readonly mode). When I make style changes in
>>>> the master TTW I don't get that replicated to the slave. However,
>>>> activating/deactivating the skin on the master does affect the slave.
>>>>
>>>
>>>
>>>
>>> --
>>> Nathan Van Gheem
>>> Solutions Architect
>>> Wildcard Corp
>>>
>>
>>
>>
>> --
>> Mike Metcalfe
>>
>> 082 903 8268
>> mi...@we...
>> www.webtide.co.za
>>
>
>
>
> --
> Nathan Van Gheem
> Solutions Architect
> Wildcard Corp
>



-- 
Nathan Van Gheem
Solutions Architect
Wildcard Corp

Re: [Plone-Users] ZRS and plone.app.theming

[Nathan V. G. <van...@gm...>]

Well, how are you changing the css in the theme? If you're doing it TTW, it
is stored in the zodb. If you're doing it on the FS, it's not.

In any case, you should never have to turn off read-only on a slave,
update, then turn it read-only again. Something is wrong--it doesn't work
that way. In fact, making a change to the ZODB on a slave, would make the
replication get out of sync and it won't replicate anymore.

On Mon, Jul 13, 2015 at 4:14 PM, Mike Metcalfe <mi...@we...> wrote:

> I just double checked, changing css in a theme on master does not get
> replicated to the slave. I can only presume that the theme is not stored in
> the zodb.
>
> On 13 July 2015 at 14:39, Nathan Van Gheem <van...@gm...> wrote:
>
>> The whole point of ZRS is to be able to have data replicated. If things
>> are edited in the database on master, they should be replicated to the
>> secondary read-only zeo.
>>
>> Are you certain it's replicating correctly?
>>
>> On Mon, Jul 13, 2015 at 2:27 PM, Mike Metcalfe <mi...@we...>
>> wrote:
>>
>>> Hi Nathanm
>>>
>>> On 13 July 2015 at 12:59, Nathan Van Gheem <van...@gm...> wrote:
>>>
>>>> You are still using a primary zeo server right? Assuming you're talking
>>>> about doing changes TTW. Why not just change the skin on the primary and
>>>> it'll get replicated out.
>>>>
>>>
>>> I'm not sure what you mean by a primary zeo. I have 2 zeo clusters, a
>>> master that replicates to a specific port and a slave that replicates from
>>> that port (with all clients in readonly mode). When I make style changes in
>>> the master TTW I don't get that replicated to the slave. However,
>>> activating/deactivating the skin on the master does affect the slave.
>>>
>>
>>
>>
>> --
>> Nathan Van Gheem
>> Solutions Architect
>> Wildcard Corp
>>
>
>
>
> --
> Mike Metcalfe
>
> 082 903 8268
> mi...@we...
> www.webtide.co.za
>



-- 
Nathan Van Gheem
Solutions Architect
Wildcard Corp

Re: [Plone-Users] ZRS and plone.app.theming

[Mike M. <mi...@we...>]

I just double checked, changing css in a theme on master does not get
replicated to the slave. I can only presume that the theme is not stored in
the zodb.

On 13 July 2015 at 14:39, Nathan Van Gheem <van...@gm...> wrote:

> The whole point of ZRS is to be able to have data replicated. If things
> are edited in the database on master, they should be replicated to the
> secondary read-only zeo.
>
> Are you certain it's replicating correctly?
>
> On Mon, Jul 13, 2015 at 2:27 PM, Mike Metcalfe <mi...@we...> wrote:
>
>> Hi Nathanm
>>
>> On 13 July 2015 at 12:59, Nathan Van Gheem <van...@gm...> wrote:
>>
>>> You are still using a primary zeo server right? Assuming you're talking
>>> about doing changes TTW. Why not just change the skin on the primary and
>>> it'll get replicated out.
>>>
>>
>> I'm not sure what you mean by a primary zeo. I have 2 zeo clusters, a
>> master that replicates to a specific port and a slave that replicates from
>> that port (with all clients in readonly mode). When I make style changes in
>> the master TTW I don't get that replicated to the slave. However,
>> activating/deactivating the skin on the master does affect the slave.
>>
>
>
>
> --
> Nathan Van Gheem
> Solutions Architect
> Wildcard Corp
>



-- 
Mike Metcalfe

082 903 8268
mi...@we...
www.webtide.co.za

Re: [Plone-Users] ZRS and plone.app.theming

[T. K. N. <ng...@pl...>]

Yes, that's the idea. You'd also set this "Absolute path prefix" so Diazo would know where to fetch those files.

    Kim

> On Jul 13, 2015, at 8:30 AM, Mike Metcalfe <mi...@we...> wrote:
> 
> Hi Kim,
> 
> On 13 July 2015 at 13:44, T. Kim Nguyen <ng...@pl... <mailto:ng...@pl...>> wrote:
> I think for a lot of theme changes (e.g. images, CSS files) you could serve them from a remote absolute URL you can specify in the advanced settings. That way you could make changes to those resources and they should appear on both your sites.
> 
> Are you saying I can tick the "Read Network" field on advanced and specify the "Rule File" as an URL to the master's theme?
> 
>