[Zope] upgrade 2.6 -> 2.7 authentication problem

[Christophe Tronche]

I had the same problem after having switched from python 2.6.2
to 2.6.4, both using the same python2.2.3. Pure Zope (Zserver, not pcgi).

It had to do with the security model having been "reinforced". In particular, 
I believe (but haven't checked in details) security controls have been 
applied to objects included in others through <dtml-var>, while only one 
check was performed on the outermost  method in 2.6.2 (the one called through 
the url).

Just my 0.02 E.

Regards,
Ch. Tronche

On Saturday 06 November 2004 14:08, Lee Harr wrote:
> I am upgrading a number of different things on my server
> and am having some troubles ... not quite sure where to
> look for a solution.
>
> The old server is FreeBSD-4.10 and Zope-2.6.1 behind
> apache using pcgi.
>
> The new system is FreeBSD-5.3. I got Zope-2.7.2 installed
> and copied over my Data.fs and Products from the old
> system.
>
> Now: I can view the site, but I cannot log in.
>
> I did not install pcgi this time, as that seems to have gone
> away. I was having some trouble getting the apache rewrite
> rules correct, so I am just running plain ZServer now.
>
> I am wondering if the pcgi gateway somehow modifies the
> authenitcation information ... so that I would need to be
> running pcgi again in order to get in.
>
> I tried doing "adduser" from the zopectl script, but that gave
> an error -- "resource not available..." (sorry, I do not have
> the exact error message here)
>
> Any hints / suggestions appreciated.
>
> _________________________________________________________________
> FREE pop-up blocking with the new MSN Toolbar - get it now!
> http://toolbar.msn.com/
>
> _______________________________________________
> Zope maillist  -  Zope at zope.org
> http://mail.zope.org/mailman/listinfo/zope
> **   No cross posts or HTML encoding!  **
> (Related lists -
>  http://mail.zope.org/mailman/listinfo/zope-announce
>  http://mail.zope.org/mailman/listinfo/zope-dev )