From pierre.boizot at gmail.com  Sun Jan  2 08:51:59 2011
From: pierre.boizot at gmail.com (Pierre BOIZOT)
Date: Sun, 2 Jan 2011 14:51:59 +0100
Subject: [Moin-user] Theme do not display
Message-ID: <AANLkTino7cyoJWaH7_wNMGNAomk+wxrOdDw_yezPG1Hx@mail.gmail.com>

Hi all

I try to install moinmoin with lighttpd (CGI) on ubuntu server 10.04. i
installed the 1.9.2 version found in package.

I don't arrive to resolve a problem.  moin moin don't display the theme.


Do you have link on doc , tutorial  to help me?

Happy New Year.

Pierre
Pierre Boizot

My SweetHome<http://www.openstreetmap.org/export/embed.html?bbox=6.6445,46.51747,6.67875,46.5333&layer=mapnik&marker=46.52211,6.66330%22+style%3D%22border:+1px+solid+black%22>

Openstreetmapdiarys <http://www.openstreetmap.org/user/PirBoazo/diary>
BlogPerso <http://pirboazo-sys.blogspot.com/>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.python.org/pipermail/moin-user/attachments/20110102/2c57b291/attachment.html>

From pierre.boizot at gmail.com  Sun Jan  2 04:29:09 2011
From: pierre.boizot at gmail.com (Pierre BOIZOT)
Date: Sun, 2 Jan 2011 10:29:09 +0100
Subject: [Moin-user] moinmoin without theme.
Message-ID: <AANLkTinvu3t6zXa9JR7Uiq0wxhW-+2gaZhvGGrsqHUSS@mail.gmail.com>

Hi all

I try to install moinmoin with lighttpd (CGI) on ubuntu server 10.04. i
installed the 1.9.2 version found in package.

I don't arrive to resolve a problem. as you can see moin moin don't display
the theme.

[image: Screenshot.png]

Do you have link on doc , tutorial  to help me?

Happy New Year.

Pierre
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.python.org/pipermail/moin-user/attachments/20110102/84798272/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: Screenshot.png
Type: image/png
Size: 49128 bytes
Desc: not available
URL: <http://mail.python.org/pipermail/moin-user/attachments/20110102/84798272/attachment.png>

From tw-public at gmx.de  Sun Jan  2 17:19:29 2011
From: tw-public at gmx.de (Thomas Waldmann)
Date: Sun, 02 Jan 2011 23:19:29 +0100
Subject: [Moin-user] moinmoin without theme.
In-Reply-To: <AANLkTinvu3t6zXa9JR7Uiq0wxhW-+2gaZhvGGrsqHUSS@mail.gmail.com>
References: <AANLkTinvu3t6zXa9JR7Uiq0wxhW-+2gaZhvGGrsqHUSS@mail.gmail.com>
Message-ID: <1294006769.29948.1.camel@x300>

> I try to install moinmoin with lighttpd (CGI) on ubuntu server 10.04.
> i installed the 1.9.2 version found in package.

> I don't arrive to resolve a problem. as you can see moin moin don't
> display the theme.

This usually means that the static files are not working / are not
served correctly. If you do not run moin at / (root) url, you may need
to adapt url_prefix_static in your wiki config (there should be a
comment telling this in the sample config).






From pierre at boizot.name  Mon Jan  3 05:33:58 2011
From: pierre at boizot.name (Pierre BOIZOT)
Date: Mon, 3 Jan 2011 11:33:58 +0100
Subject: [Moin-user] moinmoin without theme.
In-Reply-To: <1294006769.29948.1.camel@x300>
References: <AANLkTinvu3t6zXa9JR7Uiq0wxhW-+2gaZhvGGrsqHUSS@mail.gmail.com>
	<1294006769.29948.1.camel@x300>
Message-ID: <AANLkTi=xH4JodwA-M_QsVu16QX072hS3vxqV3xVUrmcr@mail.gmail.com>

Hi all

I found that in acces.log an error 403 :

77.56.104.135 www.boazo.net - [03/Jan/2011:11:13:27 +0100] "GET
/wikiboazo/moin_static192/gugiel/css/common.css HTTP/1.1" 403 345 "
http://www.boazo.net/wikiboazo/cgi-bin/moin.cgi" "Mozilla/5.0 (X11; U; Linux
i686; en-US) AppleWebKit/534.10 (KHTML, like Gecko) Chrome/8.0.552.224
Safari/534.10"

I have an alias
alias.url += ( "/moin_static192" => "/usr/share/moin/htdocs/")

# If you run your wiki script at /mywiki, you need to use this:
    url_prefix_static = '/wikiboazo' + url_prefix_static

who have an idea ?
Pierre


2011/1/2 Thomas Waldmann <tw-public at gmx.de>

> > I try to install moinmoin with lighttpd (CGI) on ubuntu server 10.04.
> > i installed the 1.9.2 version found in package.
>
> > I don't arrive to resolve a problem. as you can see moin moin don't
> > display the theme.
>
> This usually means that the static files are not working / are not
> served correctly. If you do not run moin at / (root) url, you may need
> to adapt url_prefix_static in your wiki config (there should be a
> comment telling this in the sample config).
>
>
>
>
>
> ------------------------------------------------------------------------------
> Learn how Oracle Real Application Clusters (RAC) One Node allows customers
> to consolidate database storage, standardize their database environment,
> and,
> should the need arise, upgrade to a full multi-node Oracle RAC database
> without downtime or disruption
> http://p.sf.net/sfu/oracle-sfdevnl
> _______________________________________________
> Moin-user mailing list
> Moin-user at lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/moin-user
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.python.org/pipermail/moin-user/attachments/20110103/523bb8f8/attachment.html>

From rb.proj at gmail.com  Mon Jan  3 07:31:02 2011
From: rb.proj at gmail.com (R.Bauer)
Date: Mon, 03 Jan 2011 13:31:02 +0100
Subject: [Moin-user] xmlrpc with NTLM and GivenAuth
In-Reply-To: <39080CC9D403A94F992B5A8183FE77BC063771BF@NB-EX-MBX01.diasemi.com>
References: <39080CC9D403A94F992B5A8183FE77BC063771BF@NB-EX-MBX01.diasemi.com>
Message-ID: <ifsfi6$q5f$1@dough.gmane.org>

Hi Mark

can you pleae add a patch to a http://moinmo.in/FeatureRequests/ page

thx
Reimar


Am 28.12.2010 17:19, schrieb Mark Scheufele:
> Hi Moin users,
> 
> I was able to fix the xmlrpc access to the wiki by changing the process() method of the XmlRpcBase class within c:\Python26\Lib\site-packages\MoinMoin\xmlrpc\__init__.py
> 
>             if 'xmlrpc' in self.request.cfg.actions_excluded:
>                 # we do not handle xmlrpc v1 and v2 differently
>                 response = xmlrpclib.Fault(1, "This moin wiki does not allow xmlrpc method calls.")
>             else:
>                 # overwrite any user there might be, if you need a valid user for
>                 # xmlrpc, you have to use multicall and getAuthToken / applyAuthToken
>                 #if the only authMethod is 'given' use the remote_user variable to create user object.
>                 #In this case no calls to getAuthToken and applyAuthToken are necessary 
>                 if 'given' in request.cfg.auth_methods and len(request.cfg.auth_methods) == 1: 
>                     auth_username=request.remote_user.split('\\')[-1]
>                     u=user.User(request, auth_username=auth_username,
>                         auth_method=request.cfg.auth_methods, auth_attribs=('name', 'password'))
>                     logging.info("user is %s" % str(u))
>                 else:
>                     u=user.User(request, auth_method='xmlrpc:invalid')
>                 request.user = u
> 
> 
> I now can use the xmlrpc functions against our wiki.
> 
> Best Regards,
> 
> mark
> 
> 
> _______________________________________________________________________________________
> 
> Dialog Semiconductor GmbH
> Neue Str. 95
> D-73230 Kirchheim
> Managing Director: Dr. Jalal Bagherli
> Chairman of the Supervisory Board: Gregorio Reyes
> Commercial register: Amtsgericht Stuttgart: HRB 231181
> UST-ID-Nr. DE 811121668
> 
> 
> Legal Disclaimer: This e-mail communication (and any attachment/s) is confidential and 
> contains proprietary information, some or all of which may be legally privileged. It is 
> intended solely for the use of the individual or entity to which it is addressed. Access 
> to this email by anyone else is unauthorized. If you are not the intended recipient, any
> disclosure, copying, distribution or any action taken or omitted to be taken in reliance
> on it, is prohibited and may be unlawful.
> 
> ------------------------------------------------------------------------------
> Learn how Oracle Real Application Clusters (RAC) One Node allows customers
> to consolidate database storage, standardize their database environment, and, 
> should the need arise, upgrade to a full multi-node Oracle RAC database 
> without downtime or disruption
> http://p.sf.net/sfu/oracle-sfdevnl





From tw-public at gmx.de  Mon Jan  3 08:55:21 2011
From: tw-public at gmx.de (Thomas Waldmann)
Date: Mon, 03 Jan 2011 14:55:21 +0100
Subject: [Moin-user] moinmoin without theme.
In-Reply-To: <AANLkTi=xH4JodwA-M_QsVu16QX072hS3vxqV3xVUrmcr@mail.gmail.com>
References: <AANLkTinvu3t6zXa9JR7Uiq0wxhW-+2gaZhvGGrsqHUSS@mail.gmail.com>
	<1294006769.29948.1.camel@x300>
	<AANLkTi=xH4JodwA-M_QsVu16QX072hS3vxqV3xVUrmcr@mail.gmail.com>
Message-ID: <1294062921.574.1.camel@x300>



> I found that in acces.log an error 403 : 

That means "forbidden" - check your filesystem owner/group/mode for that
stuff.


> 77.56.104.135 www.boazo.net - [03/Jan/2011:11:13:27 +0100]
> "GET /wikiboazo/moin_static192/gugiel/css/common.css HTTP/1.1" 403 345
> "http://www.boazo.net/wikiboazo/cgi-bin/moin.cgi" "Mozilla/5.0 (X11;
> U; Linux i686; en-US) AppleWebKit/534.10 (KHTML, like Gecko)
> Chrome/8.0.552.224 Safari/534.10"

Also, you see it is trying to use gugiel theme. I recommend to start
with the builtin modernized theme and get that working first. Then try
fixing 3rd party themes.






From Pavel.Vinogradov at nixdev.net  Wed Jan  5 11:46:08 2011
From: Pavel.Vinogradov at nixdev.net (Pavel Vinogradov)
Date: Wed, 5 Jan 2011 19:46:08 +0300
Subject: [Moin-user] [bug] [moin2] Password encoding on new user creation
Message-ID: <AANLkTinO3b=XA9i9FTBknBUs=uZNyzK1mOp6cxSrz0Ep@mail.gmail.com>

  Hello.

During work on implementing SSHA256 password encoding for Moin 2.0 i
found small bug in user creation code.

File user.py contain create_user function:

user.py:69
http://bpaste.net/show/12713/

This code encode received password before creating new user. It seems
ok, but this function is used only from

apps/frontend/views.py:589
http://bpaste.net/show/12714/

This function get all arguments from html form, filled by user. But
user newer fill encoded password in browser.

If user create new account with password '{SHA}{SHA}' and all go ok.
But user can't auth with this password and get error:

KeyError: 'enc_password'

It seems like condition 'not password.startswith('{SHA}')'  in
create_user function is not nedded.

-- 
Pavel Vinogradov



From travis+ml-moin-user at subspacefield.org  Wed Jan  5 13:49:26 2011
From: travis+ml-moin-user at subspacefield.org (travis+ml-moin-user at subspacefield.org)
Date: Wed, 5 Jan 2011 10:49:26 -0800
Subject: [Moin-user] installation on ubuntu, migration of data, comments
Message-ID: <20110105184926.GA13409@subspacefield.org>

Regarding:
http://moinmo.in/Documentation

It says consult the local docs directory, but there's none in the ubuntu package.
Whassup, docs?

I'm migrating servers from:
rc  moinmoin-common                      1.5.3-1.2etch2                       Python clone of WikiWiki - common data
ii  python-moinmoin                      1.7.1-3+lenny5                       Python clone of WikiWiki - library

To:
ii  python-moinmoin                      1.9.3-1ubuntu1                       Python clone of WikiWiki - library

And unfortunately, I didn't keep notes on where I put things on the old server, nor the steps I took to configure it.

Followed http://moinmo.in/HowTo/UbuntuQuick - more or less:
 aptitude install python-moinmoin libapache2-mod-wsgi
 cp /usr/share/moin/config/wikifarm/{farmconfig.py,mywiki.py} /etc/moin
 mkdir /srv/moin
 cd /srv/moin
 cp /usr/share/moin/server/moin.wsgi .
 mkdir master cache users
 cp -R /usr/share/moin/{data,underlay} /srv/moin/master

Now I'm not sure how to continue, until I sit down and spend a few
hours reading docs which I don't seem to have.

I was hoping this would require fewer thinkons; I've got like 10
services on this server.

Anyone got any suggestions on where to start?

(PS: Having people hit localhost may be fine for a local system, but not so good for a remote server)
-- 
Good code works on most inputs; correct code works on all inputs.
My emails do not have attachments; it's a digital signature that your mail
program doesn't understand. | http://www.subspacefield.org/~travis/ 
If you are a spammer, please email john at subspacefield.org to get blacklisted.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 833 bytes
Desc: not available
URL: <http://mail.python.org/pipermail/moin-user/attachments/20110105/db245f6f/attachment.sig>

From travis+ml-moin-user at subspacefield.org  Wed Jan  5 15:56:21 2011
From: travis+ml-moin-user at subspacefield.org (travis+ml-moin-user at subspacefield.org)
Date: Wed, 5 Jan 2011 12:56:21 -0800
Subject: [Moin-user] installation on ubuntu, migration of data, comments
In-Reply-To: <20110105184926.GA13409@subspacefield.org>
References: <20110105184926.GA13409@subspacefield.org>
Message-ID: <20110105205621.GC2847@subspacefield.org>

On Wed, Jan 05, 2011 at 10:49:26AM -0800, travis+ml-moin-user at subspacefield.org wrote:
> Regarding:
> http://moinmo.in/Documentation
> 
> It says consult the local docs directory, but there's none in the ubuntu package.
> Whassup, docs?

Ah, it's actually in /usr/share/doc/python-moinmoin.

Interesting.
-- 
Good code works on most inputs; correct code works on all inputs.
My emails do not have attachments; it's a digital signature that your mail
program doesn't understand. | http://www.subspacefield.org/~travis/ 
If you are a spammer, please email john at subspacefield.org to get blacklisted.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 833 bytes
Desc: not available
URL: <http://mail.python.org/pipermail/moin-user/attachments/20110105/8150c785/attachment.sig>

From travis+ml-moin-user at subspacefield.org  Tue Jan 11 14:32:24 2011
From: travis+ml-moin-user at subspacefield.org (travis+ml-moin-user at subspacefield.org)
Date: Tue, 11 Jan 2011 11:32:24 -0800
Subject: [Moin-user] installation on ubuntu, migration of data, comments
In-Reply-To: <20110105205621.GC2847@subspacefield.org>
References: <20110105184926.GA13409@subspacefield.org>
	<20110105205621.GC2847@subspacefield.org>
Message-ID: <20110111193224.GD5566@subspacefield.org>

On Wed, Jan 05, 2011 at 12:56:21PM -0800, travis+ml-moin-user at subspacefield.org wrote:
> On Wed, Jan 05, 2011 at 10:49:26AM -0800, travis+ml-moin-user at subspacefield.org wrote:
> > Regarding:
> > http://moinmo.in/Documentation
> > 
> > It says consult the local docs directory, but there's none in the ubuntu package.
> > Whassup, docs?
> 
> Ah, it's actually in /usr/share/doc/python-moinmoin.
> 
> Interesting.
> -- 
> Good code works on most inputs; correct code works on all inputs.
> My emails do not have attachments; it's a digital signature that your mail
> program doesn't understand. | http://www.subspacefield.org/~travis/ 
> If you are a spammer, please email john at subspacefield.org to get blacklisted.

Hey, so I copied my data from the old server to the new one, and ran the migration as such:

moin --config-dir=/etc/moin --wiki-url=https://www.xxx.yyy/path/ThisWiki migration data

It did some stuff, but none of the old pages are visible.

I ran it again, and it just says:

2011-01-11 11:23:16,850 WARNING MoinMoin.log:139 using logging configuration read from built-in fallback in MoinMoin.log module!
2011-01-11 11:23:17,167 INFO MoinMoin.config.multiconfig:93 using farm config: /etc/moin/farmconfig.py
2011-01-11 11:23:17,180 INFO MoinMoin.config.multiconfig:127 using wiki config: /etc/moin/thiswiki.py
Calling migration script for /srv/moin/thiswiki/data, base revision 1090300
Final mig script reached, migration is complete.

So, WTF, my data has been migrated but isn't visible?

In fact, none of the links has any content.

[Tue Jan 11 11:25:26 2011] [error] 2011-01-11 11:25:26,388 INFO MoinMoin.config.multiconfig:127 using wiki config: /etc/moin/thiswiki.py
[Tue Jan 11 11:25:26 2011] [error] 2011-01-11 11:25:26,440 WARNING MoinMoin.Page:1396 The page "MissingPage" could not be found. Check your underlay directory setting.
[Tue Jan 11 11:25:29 2011] [error] 2011-01-11 11:25:29,655 WARNING MoinMoin.Page:1396 The page "MissingPage" could not be found. Check your underlay directory setting.
[Tue Jan 11 11:25:30 2011] [error] 2011-01-11 11:25:30,800 WARNING MoinMoin.Page:1396 The page "MissingPage" could not be found. Check your underlay directory setting.
[Tue Jan 11 11:25:31 2011] [error] 2011-01-11 11:25:31,651 WARNING MoinMoin.Page:1396 The page "MissingPage" could not be found. Check your underlay directory setting.
[Tue Jan 11 11:27:49 2011] [error] 2011-01-11 11:27:49,839 WARNING MoinMoin.Page:1396 The page "MissingPage" could not be found. Check your underlay directory setting.

So, hmm, there's no MissingPage.

Well, I certainly don't see one in the underlay dir, but since it's a fresh copy from this, I don't see why there should be:

# find /usr/share/moin/underlay/ -iname '*issing*'
#

So... is anyone reading this list?  I'm wondering whether I should
wait for a response here, or look elsewhere for help.
-- 
Good code works on most inputs; correct code works on all inputs.
My emails do not have attachments; it's a digital signature that your mail
program doesn't understand. | http://www.subspacefield.org/~travis/ 
If you are a spammer, please email john at subspacefield.org to get blacklisted.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 833 bytes
Desc: not available
URL: <http://mail.python.org/pipermail/moin-user/attachments/20110111/83b0889b/attachment.sig>

From travis+ml-moin-user at subspacefield.org  Tue Jan 11 14:43:38 2011
From: travis+ml-moin-user at subspacefield.org (travis+ml-moin-user at subspacefield.org)
Date: Tue, 11 Jan 2011 11:43:38 -0800
Subject: [Moin-user] installation on ubuntu, migration of data, comments
In-Reply-To: <20110111193224.GD5566@subspacefield.org>
References: <20110105184926.GA13409@subspacefield.org>
	<20110105205621.GC2847@subspacefield.org>
	<20110111193224.GD5566@subspacefield.org>
Message-ID: <20110111194338.GE5566@subspacefield.org>

On Tue, Jan 11, 2011 at 11:32:24AM -0800, travis+ml-moin-user at subspacefield.org wrote:
> So, WTF, my data has been migrated but isn't visible?

Ah, have to access FrontPage.

> In fact, none of the links has any content.

Yeah, HelpContents and FindPage and RecentChanges are all empty.

They were empty upon copying the data and underlay directories over,
they were empty after migrating, they were empty after copying the
underlay dir from /usr/share/moin/underlay, and they're empty after
running migrate data again.

However, at least my old content is there.
-- 
Good code works on most inputs; correct code works on all inputs.
My emails do not have attachments; it's a digital signature that your mail
program doesn't understand. | http://www.subspacefield.org/~travis/ 
If you are a spammer, please email john at subspacefield.org to get blacklisted.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 833 bytes
Desc: not available
URL: <http://mail.python.org/pipermail/moin-user/attachments/20110111/6d79f49f/attachment.sig>

From joshua.tacoma at gmail.com  Tue Jan 11 15:36:27 2011
From: joshua.tacoma at gmail.com (Joshua Tacoma)
Date: Tue, 11 Jan 2011 15:36:27 -0500
Subject: [Moin-user] formatter to javascript?
Message-ID: <AANLkTinqbfm1RQCE6y+zSK489_Zv2fjz8cU7DV8xjOTt@mail.gmail.com>

Hey all, I'm interested in writing a formatter that would produce a
javascript file or module, executable in the browser, based on snippets and
tables in the source.  It could turn a wiki into a literate javascript
development environment.  So I've got some questions:

- Has this already been done?
- Are the security issues so obviously and deeply hairy that no one in their
right mind would do such a thing?
- Does anybody have some tips, suggestions, or questions?  Care to chat
about how this might be done?

Thanks,
- Josh
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.python.org/pipermail/moin-user/attachments/20110111/36265cfa/attachment.html>

From moinmoin at sheep.art.pl  Tue Jan 11 15:41:58 2011
From: moinmoin at sheep.art.pl (Radomir Dopieralski)
Date: Tue, 11 Jan 2011 21:41:58 +0100
Subject: [Moin-user] formatter to javascript?
In-Reply-To: <AANLkTinqbfm1RQCE6y+zSK489_Zv2fjz8cU7DV8xjOTt@mail.gmail.com>
References: <AANLkTinqbfm1RQCE6y+zSK489_Zv2fjz8cU7DV8xjOTt@mail.gmail.com>
Message-ID: <AANLkTinm3O_X+PtRQVF6gYByk5Ba5N9Vf80+GOCbK8dg@mail.gmail.com>

On Tue, Jan 11, 2011 at 9:36 PM, Joshua Tacoma <joshua.tacoma at gmail.com> wrote:
> Hey all, I'm interested in writing a formatter that would produce a
> javascript file or module, executable in the browser, based on snippets and
> tables in the source. ?It could turn a wiki into a literate javascript
> development environment. ?So I've got some questions:
> - Has this already been done?
> - Are the security issues so obviously and deeply hairy that no one in their
> right mind would do such a thing?
Yes, there are security issues. Basically, the javascript on the page
has access to the cookie (and thus the session) of the user who is
browsing the page, and can act in that user's name on the wiki, doing
anything the user can do.

[...]
-- 
Radomir Dopieralski, http://sheep.art.pl



From joshua.tacoma at gmail.com  Tue Jan 11 16:33:23 2011
From: joshua.tacoma at gmail.com (Joshua Tacoma)
Date: Tue, 11 Jan 2011 16:33:23 -0500
Subject: [Moin-user] formatter to javascript?
In-Reply-To: <AANLkTinm3O_X+PtRQVF6gYByk5Ba5N9Vf80+GOCbK8dg@mail.gmail.com>
References: <AANLkTinqbfm1RQCE6y+zSK489_Zv2fjz8cU7DV8xjOTt@mail.gmail.com>
	<AANLkTinm3O_X+PtRQVF6gYByk5Ba5N9Vf80+GOCbK8dg@mail.gmail.com>
Message-ID: <AANLkTinHQhatsg2xvajJ7c5B9CiFiYtQo7OJ6eMeBA=p@mail.gmail.com>

On 11 January 2011 15:41, Radomir Dopieralski <moinmoin at sheep.art.pl> wrote:
> On Tue, Jan 11, 2011 at 9:36 PM, Joshua Tacoma <joshua.tacoma at gmail.com> wrote:
> > - Are the security issues so obviously and deeply hairy that no one in their
> > right mind would do such a thing?
> Yes, there are security issues. Basically, the javascript on the page
> has access to the cookie (and thus the session) of the user who is
> browsing the page, and can act in that user's name on the wiki, doing
> anything the user can do.

Thanks, I was wondering about that... some ways to fix this:

- Enable the formatter only on certain pages (is this possible?), keep
restrictive ACLs on those pages, and make sure visitors and
contributors are informed about the risks of using the site.
- Enable the formatter only for localhost clients, and setup a
read-only proxy on the same machine that is accessed through a
distinct domain name, so that normal protections against cross-site
scripting block access to the wiki.
- Only generate JSON (from tables or yaml snippets) and maybe invent a
simple DSL or two that could be translated to reliably safe
javascript, for operations over the JSON data.

...what do you think?
-- Josh



From newz at bearfruit.org  Tue Jan 11 16:45:07 2011
From: newz at bearfruit.org (Matthew Nuzum)
Date: Tue, 11 Jan 2011 15:45:07 -0600
Subject: [Moin-user] formatter to javascript?
In-Reply-To: <AANLkTinHQhatsg2xvajJ7c5B9CiFiYtQo7OJ6eMeBA=p@mail.gmail.com>
References: <AANLkTinqbfm1RQCE6y+zSK489_Zv2fjz8cU7DV8xjOTt@mail.gmail.com>
	<AANLkTinm3O_X+PtRQVF6gYByk5Ba5N9Vf80+GOCbK8dg@mail.gmail.com>
	<AANLkTinHQhatsg2xvajJ7c5B9CiFiYtQo7OJ6eMeBA=p@mail.gmail.com>
Message-ID: <AANLkTimXK6yhg7-jbPuS5rRfAbZ4rt4NwZFmWia8DjLg@mail.gmail.com>

On Tue, Jan 11, 2011 at 3:33 PM, Joshua Tacoma <joshua.tacoma at gmail.com>wrote:

> On 11 January 2011 15:41, Radomir Dopieralski <moinmoin at sheep.art.pl>
> wrote:
> > On Tue, Jan 11, 2011 at 9:36 PM, Joshua Tacoma <joshua.tacoma at gmail.com>
> wrote:
> > > - Are the security issues so obviously and deeply hairy that no one in
> their
> > > right mind would do such a thing?
> > Yes, there are security issues. Basically, the javascript on the page
> > has access to the cookie (and thus the session) of the user who is
> > browsing the page, and can act in that user's name on the wiki, doing
> > anything the user can do.
>
> Thanks, I was wondering about that... some ways to fix this:
>
> - Enable the formatter only on certain pages (is this possible?), keep
> restrictive ACLs on those pages, and make sure visitors and
> contributors are informed about the risks of using the site.
> - Enable the formatter only for localhost clients, and setup a
> read-only proxy on the same machine that is accessed through a
> distinct domain name, so that normal protections against cross-site
> scripting block access to the wiki.
> - Only generate JSON (from tables or yaml snippets) and maybe invent a
> simple DSL or two that could be translated to reliably safe
> javascript, for operations over the JSON data.
>
>
Creating a formatter that just spits out JSON from data in the page should
be quite safe. Then you (the site owner) have some javascript code in the
theme that grabs this json and does interesting things with it.

Allowing a user to insert Javascript (or a DSL later converted to JS) in the
page that is then run in a browser by whomever later comes to view that page
is not a good plan.

-- 
Matthew Nuzum
newz2000 on freenode, skype, linkedin, identi.ca and twitter

"An investment in knowledge pays the best interest." -Benjamin Franklin
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.python.org/pipermail/moin-user/attachments/20110111/6812c46f/attachment.html>

From mark.scheufele at diasemi.com  Wed Jan 12 03:41:35 2011
From: mark.scheufele at diasemi.com (Mark Scheufele)
Date: Wed, 12 Jan 2011 08:41:35 +0000
Subject: [Moin-user] installation on ubuntu, migration of data, comments
In-Reply-To: <20110111194338.GE5566@subspacefield.org>
References: <20110105184926.GA13409@subspacefield.org>
	<20110105205621.GC2847@subspacefield.org>
	<20110111193224.GD5566@subspacefield.org>
	<20110111194338.GE5566@subspacefield.org>
Message-ID: <39080CC9D403A94F992B5A8183FE77BC0639FF4B@NB-EX-MBX01.diasemi.com>

Hi,

to install Help and System pages open a browser go to the url http://<your wiki url>/LanguageSetup and install All System and Help pages.

mark

-----Original Message-----
From: travis+ml-moin-user at subspacefield.org [mailto:travis+ml-moin-user at subspacefield.org] 
Sent: Dienstag, 11. Januar 2011 20:44
To: moin-user at lists.sourceforge.net
Subject: Re: [Moin-user] installation on ubuntu, migration of data, comments

On Tue, Jan 11, 2011 at 11:32:24AM -0800, travis+ml-moin-user at subspacefield.org wrote:
> So, WTF, my data has been migrated but isn't visible?

Ah, have to access FrontPage.

> In fact, none of the links has any content.

Yeah, HelpContents and FindPage and RecentChanges are all empty.

They were empty upon copying the data and underlay directories over, they were empty after migrating, they were empty after copying the underlay dir from /usr/share/moin/underlay, and they're empty after running migrate data again.

However, at least my old content is there.
--
Good code works on most inputs; correct code works on all inputs.
My emails do not have attachments; it's a digital signature that your mail program doesn't understand. | http://www.subspacefield.org/~travis/
If you are a spammer, please email john at subspacefield.org to get blacklisted.
_______________________________________________________________________________________

Dialog Semiconductor GmbH
Neue Str. 95
D-73230 Kirchheim
Managing Director: Dr. Jalal Bagherli
Chairman of the Supervisory Board: Gregorio Reyes
Commercial register: Amtsgericht Stuttgart: HRB 231181
UST-ID-Nr. DE 811121668


Legal Disclaimer: This e-mail communication (and any attachment/s) is confidential and 
contains proprietary information, some or all of which may be legally privileged. It is 
intended solely for the use of the individual or entity to which it is addressed. Access 
to this email by anyone else is unauthorized. If you are not the intended recipient, any
disclosure, copying, distribution or any action taken or omitted to be taken in reliance
on it, is prohibited and may be unlawful.



From jmgxu at hotmail.com  Thu Jan 13 12:03:31 2011
From: jmgxu at hotmail.com (Gang Xu)
Date: Thu, 13 Jan 2011 12:03:31 -0500
Subject: [Moin-user] testwiki.py in http://moinmo.in/DimitriJanczak
In-Reply-To: <col106-w15530D58E7EF831658BE4CA2F00@phx.gbl>
References: <col106-w15530D58E7EF831658BE4CA2F00@phx.gbl>
Message-ID: <COL106-W236526851CF779BBF630A4A2F00@phx.gbl>


I'm following the procedure document here, http://moinmo.in/DimitriJanczak, to install MoinMoin 1.9.3 on W2k8.

I followed it step-by-step, until I reach the section to 'create one file per wiki you want to host'. Here the example, testwiki.py is missing.

I finished the steps below to create 
C:/wikis/testwiki/data/cache
C:/wikis/testwiki/data/dict C:/wikis/testwiki/data/pagesand copy plugins to C:/wikis/testwiki/data/plugins
I'm not sure about the SiteName in the next step. I guess it is in the missing testwiki.py.

Now I'm at the step to try 'http://localhost/<somewikiname> to check you have at least a python page'. I tried http://localhost/wiki1 and got the 'ConfigurationError'.

Any help would be highly appreciated!

I have been having a lot of problems when move my server to W2k8. My Moin 1.8.2 works great on W2k3. When I move to w2k8, I start to hit all kinds of problems. I can't find anything about W2k8 and Moin 1.8. Have been dead in the water for awhile. Luckily, I found the article here. I'm hoping to use it to upgrade to 1.9, with WSGI support. 

Thanks,
Gang


 		 	   		  
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.python.org/pipermail/moin-user/attachments/20110113/a2e27e2f/attachment.html>

From mark.scheufele at diasemi.com  Fri Jan 14 04:53:50 2011
From: mark.scheufele at diasemi.com (Mark Scheufele)
Date: Fri, 14 Jan 2011 09:53:50 +0000
Subject: [Moin-user] testwiki.py in http://moinmo.in/DimitriJanczak
In-Reply-To: <COL106-W236526851CF779BBF630A4A2F00@phx.gbl>
References: <col106-w15530D58E7EF831658BE4CA2F00@phx.gbl>
	<COL106-W236526851CF779BBF630A4A2F00@phx.gbl>
Message-ID: <39080CC9D403A94F992B5A8183FE77BC063D2D5B@NB-EX-MBX01.diasemi.com>

Hi Gang,

you have to make sure that the instance_dir and url_prefix within your wikiconfig.py matches the virtual directory set in the wsgi loader script.

#wikiconfig.py

class Config(multiconfig.DefaultConfig):

        url_prefix_static = '/wiki' + url_prefix_static

        # Directory containing THIS wikiconfig:
        wikiconfig_dir = os.path.abspath(os.path.dirname(__file__))

        #instance_dir = '/where/ever/your/instance/is'
        instance_dir = os.path.join(wikiconfig_dir, 'wiki')

        # Where your own wiki pages are (make regular backups of this directory):
        data_dir = os.path.join(instance_dir, 'data', '') # path with trailing /
        #data_dir = os.path.join(r'\\filer2\moinmoin\data', '')
        # Where system and help pages are (you may exclude this from backup):
        data_underlay_dir = os.path.join(instance_dir, 'underlay', '') # path with trailing /

        surge_action_limits = None # no surge protection
        sitename = u'wiki'

#virtual directory settings in wsgi loader script.

# Create a Virtual Directory per wiki
        params.VirtualDirs = [  VirtualDirParameters(
                Name="wiki",
                Description = "ISAPI-WSGI gateway for the Dialog wiki" ,
                ScriptMaps = sm,
                ScriptMapUpdate = "replace" )


As the isap_wsgi is only 32bit you have to enable 32bit compatibility flag within IIS on w2008r2.

Appended you'll find the documentation I have created while setting up our wiki on w2008r2

BR,

mark

************************
IT/BI/MoinMoin/IISBased
************************
Contents


1. MoinMoin under the command of IIS

     1. List of used software packages

     2. Setting Up IIS

         1. Installation

         2. IIS Configuration

             1. Registering the wiki as ISAPI extension within IIS

MoinMoin under the command of IIS
=================================

On this page a *moinmoin* setup based on the *IIS (Version 7.5)* web server
running on *Windows Server 2008 R2* is covered.

List of used software packages
------------------------------

* python v2.66 [http://www.python.org/ftp/python/2.6.6/python-2.6.6.msi]
* pywin32 python 2.6
   [http://sourceforge.net/projects/pywin32/files/pywin32/Build%20214/pywin32-214.win32-py2.6.exe/download]
* isapi_wsgi module
   [http://code.google.com/p/isapi-wsgi/downloads/detail?name=isapi_wsgi-0.4.2.win32.exe&can=2&q=]

Setting Up IIS
--------------

Installation
------------

* install *IIS* over the dialog /*Turn Windows features on or off*/
* install the following additional Roles for *IIS*:
    * ISAP Filters
    * Windows Authentication
    * IIS 6 Management Compatibility

IIS Configuration
-----------------

* As all the python software is 32 bit a separate Application pool
   *32-bit-Apps* has been created. Within that pool the property *Enable
   32-Bit-Applications* has been set to true.
* the wiki application itself runs as a python WSGI application using the IIS
   ISAPI extensions.
* after the wiki has been registered within the *IIS* web server (see below)
   it has to be assigned to the *32-bit-Apps* application pool /(Right Click =>
   Advanced Settings => Select Application Pool)/
* to prevent the standard error page for the /*http 404 page not found/* error
   showing up when a user tries to create a new page (problem only appeared
   within *IE*) an empty page for the /*http 404 page not found*/ error has
   been configured.
    * create and empty file called /C:\Moin\wwwroot\custom404.htm/
    * /wiki => Error Pages => 404 => Right Click => Edit Feature Settings =>
      Custom Error Pages/
    * /wiki => Error Pages => Double Click on 404 => Select / /*Insert content
      from static file*/ /and browse for the previously created file
      custom404.htm/
* to prevent the standard error page for the /*403 Forbidden*/ error when a
   user tries to access or edit a page where he does not have permissions an
   empty error page has been created within the IIS configuration (same
   procedure as for the 404 error page).

Registering the wiki as ISAPI extension within IIS
--------------------------------------------------

* create a isapi wsgi loader script which does the following (see sample
   below):
    * creates a *_moinmoinloader193.dll*
    * installs the python isapi_wsgi application within *IIS*

*isapi_wsgi loader script*

---CodeArea-------------------------------------------------------------------
import sys
#add path to moinmoin libraries
sys.path.append("c:/Moin/moin-1.9.3/Lib/site-packages")
from MoinMoin.web.serving import make_application
from MoinMoin import log
## import the ISAPI WSGI glue
import isapi_wsgi


# The entry points for the ISAPI extension.
def __ExtensionFactory__():
        #add path to sys.path where wikiconfig.py can be found
        sys.path.insert(0, 'c:/moin')
        ## new way to instantiate in 1.9
        moinmoinApp = make_application(shared=True)
        return isapi_wsgi.ISAPIThreadPoolHandler(moinmoinApp)

## Installation code
if __name__=='__main__':
        from isapi.install import *

        # If run from the command-line, install ourselves.
        params = ISAPIParameters()

        sm = [ScriptMapParams(Extension="*", Flags=0)]

        # Create a Virtual Directory per wiki
        params.VirtualDirs = [  VirtualDirParameters(
                Name="wiki",
                Description = "ISAPI-WSGI gateway for the Dialog wiki" ,
                ScriptMaps = sm,
                ScriptMapUpdate = "replace" )
        ]

        HandleCommandLine(params)
---CodeArea-------------------------------------------------------------------

* A more detailed description of what the script is doing can be found *here
   [http://code.google.com/docreader/#p=isapi-wsgi&s=isapi-wsgi&t=UnderstandingISAPIWSGI]*.

* run the script 'python <name of the loader script> install'


From: Gang Xu [mailto:jmgxu at hotmail.com]
Sent: Donnerstag, 13. Januar 2011 18:04
To: Moin User List
Subject: [Moin-user] testwiki.py in http://moinmo.in/DimitriJanczak

I'm following the procedure document here, http://moinmo.in/DimitriJanczak, to install MoinMoin 1.9.3 on W2k8.

I followed it step-by-step, until I reach the section to 'create one file per wiki you want to host'. Here the example, testwiki.py is missing.

I finished the steps below to create

  *   C:/wikis/testwiki/data/cache
  *   C:/wikis/testwiki/data/dict
  *   C:/wikis/testwiki/data/pages
  *   and copy plugins to C:/wikis/testwiki/data/plugins

I'm not sure about the SiteName in the next step. I guess it is in the missing testwiki.py.

Now I'm at the step to try 'http://localhost/<somewikiname><http://localhost/%3Csomewikiname%3E> to check you have at least a python page'. I tried http://localhost/wiki1 and got the 'ConfigurationError'.

Any help would be highly appreciated!

I have been having a lot of problems when move my server to W2k8. My Moin 1.8.2 works great on W2k3. When I move to w2k8, I start to hit all kinds of problems. I can't find anything about W2k8 and Moin 1.8. Have been dead in the water for awhile. Luckily, I found the article here. I'm hoping to use it to upgrade to 1.9, with WSGI support.

Thanks,
Gang


_______________________________________________________________________________________

Dialog Semiconductor GmbH
Neue Str. 95
D-73230 Kirchheim
Managing Director: Dr. Jalal Bagherli
Chairman of the Supervisory Board: Gregorio Reyes
Commercial register: Amtsgericht Stuttgart: HRB 231181
UST-ID-Nr. DE 811121668


Legal Disclaimer: This e-mail communication (and any attachment/s) is confidential and 
contains proprietary information, some or all of which may be legally privileged. It is 
intended solely for the use of the individual or entity to which it is addressed. Access 
to this email by anyone else is unauthorized. If you are not the intended recipient, any
disclosure, copying, distribution or any action taken or omitted to be taken in reliance
on it, is prohibited and may be unlawful.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.python.org/pipermail/moin-user/attachments/20110114/724ba21e/attachment.html>

From mark.scheufele at diasemi.com  Mon Jan 24 10:47:44 2011
From: mark.scheufele at diasemi.com (Mark Scheufele)
Date: Mon, 24 Jan 2011 15:47:44 +0000
Subject: [Moin-user] invalid links in docbook parser output
Message-ID: <39080CC9D403A94F992B5A8183FE77BC063DB4AD@NB-EX-MBX01.diasemi.com>

Hi Moin users,

I would like to use the docbook parser action within our wiki (moin version 1.9.3). We create docbook output by using the format action and the mimetype=text_docbook (sample url: http://dip/wiki/APPS/Core%20Applications?action=format&mimetype=text_docbook). Docbook content is created but all links within wiki pages are broken.

docbook output of the link "[[APPS/Core Applications/PythonForLabAutomation|Why Python?]] is:

<para>
<ulink url="http://dip/wiki/APPS/Core%20Applications/wiki/APPS/Core%20Applications/PythonForLabAutomation#">Why Python?</ulink>
</para>

I would expect the following output:

<para>
<ulink url="http://dip/wiki/APPS/Core%20Applications/PythonForLabAutomation#">Why Python?</ulink>
</para>

The url part /wiki/APPS/Core%20Applications is redundant and breaks the link.

Any help is appreciated.

BR,

mark

_______________________________________________________________________________________

Dialog Semiconductor GmbH
Neue Str. 95
D-73230 Kirchheim
Managing Director: Dr. Jalal Bagherli
Chairman of the Supervisory Board: Gregorio Reyes
Commercial register: Amtsgericht Stuttgart: HRB 231181
UST-ID-Nr. DE 811121668


Legal Disclaimer: This e-mail communication (and any attachment/s) is confidential and 
contains proprietary information, some or all of which may be legally privileged. It is 
intended solely for the use of the individual or entity to which it is addressed. Access 
to this email by anyone else is unauthorized. If you are not the intended recipient, any
disclosure, copying, distribution or any action taken or omitted to be taken in reliance
on it, is prohibited and may be unlawful.



From r1chardj0n3s at gmail.com  Mon Jan 24 22:04:44 2011
From: r1chardj0n3s at gmail.com (Richard Jones)
Date: Tue, 25 Jan 2011 14:04:44 +1100
Subject: [Moin-user] Problems stopping the spam
Message-ID: <AANLkTimya17WutG565dgVeCSBJp9CbeaihivRSTAYaAU@mail.gmail.com>

I've got a persistent spammer on my wiki. I have the configuration set
up to require users to log in to make edits, but that's not stopped
him. I'm trying to turn off editing for known users but it won't work.
My config has:

    acl_enabled = 1
    #acl_rights_default = u"All:read Known:read,write"
    acl_rights_default = u"All:read"
    acl_rights_before = u"stefan:read,write,delete,revert,admin
DanielDiniz:read,write,delete,revert,admin
RichardJones:read,write,delete,revert,admin"

But when I log in as user "test" I can still edit pages. Any hints?


    Richard



From barber.justin at gmail.com  Mon Jan 24 22:16:31 2011
From: barber.justin at gmail.com (Justin Barber)
Date: Mon, 24 Jan 2011 22:16:31 -0500
Subject: [Moin-user] Problems stopping the spam
In-Reply-To: <AANLkTimya17WutG565dgVeCSBJp9CbeaihivRSTAYaAU@mail.gmail.com>
References: <AANLkTimya17WutG565dgVeCSBJp9CbeaihivRSTAYaAU@mail.gmail.com>
Message-ID: <2590990491298802146@unknownmsgid>

A registered user is considered known.  So either remove registration
or only allow read to known and the write to your specified acl users.
Correct me if I am wrong.

Justin Barber
(512)JBARBER

On Jan 24, 2011, at 22:06, Richard Jones <r1chardj0n3s at gmail.com> wrote:

> I've got a persistent spammer on my wiki. I have the configuration set
> up to require users to log in to make edits, but that's not stopped
> him. I'm trying to turn off editing for known users but it won't work.
> My config has:
>
>    acl_enabled = 1
>    #acl_rights_default = u"All:read Known:read,write"
>    acl_rights_default = u"All:read"
>    acl_rights_before = u"stefan:read,write,delete,revert,admin
> DanielDiniz:read,write,delete,revert,admin
> RichardJones:read,write,delete,revert,admin"
>
> But when I log in as user "test" I can still edit pages. Any hints?
>
>
>    Richard
>
> ------------------------------------------------------------------------------
> Special Offer-- Download ArcSight Logger for FREE (a $49 USD value)!
> Finally, a world-class log management solution at an even better price-free!
> Download using promo code Free_Logger_4_Dev2Dev. Offer expires
> February 28th, so secure your free ArcSight Logger TODAY!
> http://p.sf.net/sfu/arcsight-sfd2d
> _______________________________________________
> Moin-user mailing list
> Moin-user at lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/moin-user



From r1chardj0n3s at gmail.com  Mon Jan 24 22:20:40 2011
From: r1chardj0n3s at gmail.com (Richard Jones)
Date: Tue, 25 Jan 2011 14:20:40 +1100
Subject: [Moin-user] Problems stopping the spam
In-Reply-To: <2590990491298802146@unknownmsgid>
References: <AANLkTimya17WutG565dgVeCSBJp9CbeaihivRSTAYaAU@mail.gmail.com>
	<2590990491298802146@unknownmsgid>
Message-ID: <AANLkTi==+X+KtgPAK0CuKQkgJUzWQjh+NnTMyTvA+Q6C@mail.gmail.com>

On Tue, Jan 25, 2011 at 2:16 PM, Justin Barber <barber.justin at gmail.com> wrote:
> A registered user is considered known. ?So either remove registration
> or only allow read to known and the write to your specified acl users.
> Correct me if I am wrong.

I'm aware of how Known works - I've tried both of these and neither
stops Known from editing:

       acl_rights_default = u"All:read"
       acl_rights_default = u"All:read Known:read"


     Richard



From rick.vanderveer at gmail.com  Mon Jan 24 23:08:34 2011
From: rick.vanderveer at gmail.com (Rick Vanderveer)
Date: Mon, 24 Jan 2011 22:08:34 -0600
Subject: [Moin-user] Problems stopping the spam
In-Reply-To: <AANLkTi==+X+KtgPAK0CuKQkgJUzWQjh+NnTMyTvA+Q6C@mail.gmail.com>
References: <AANLkTimya17WutG565dgVeCSBJp9CbeaihivRSTAYaAU@mail.gmail.com>
	<2590990491298802146@unknownmsgid>
	<AANLkTi==+X+KtgPAK0CuKQkgJUzWQjh+NnTMyTvA+Q6C@mail.gmail.com>
Message-ID: <AANLkTi=LdJSd6w=PnDBXRZuJw60ZYZwpjkm53LKoqwhJ@mail.gmail.com>

Richard,

Try single-quotes instead of double-quotes.

      acl_rights_default = u'All:read'

-Rick



On Mon, Jan 24, 2011 at 9:20 PM, Richard Jones <r1chardj0n3s at gmail.com>wrote:

> On Tue, Jan 25, 2011 at 2:16 PM, Justin Barber <barber.justin at gmail.com>
> wrote:
> > A registered user is considered known.  So either remove registration
> > or only allow read to known and the write to your specified acl users.
> > Correct me if I am wrong.
>
> I'm aware of how Known works - I've tried both of these and neither
> stops Known from editing:
>
>       acl_rights_default = u"All:read"
>        acl_rights_default = u"All:read Known:read"
>
>
>      Richard
>
>
> ------------------------------------------------------------------------------
> Special Offer-- Download ArcSight Logger for FREE (a $49 USD value)!
> Finally, a world-class log management solution at an even better
> price-free!
> Download using promo code Free_Logger_4_Dev2Dev. Offer expires
> February 28th, so secure your free ArcSight Logger TODAY!
> http://p.sf.net/sfu/arcsight-sfd2d
> _______________________________________________
> Moin-user mailing list
> Moin-user at lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/moin-user
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.python.org/pipermail/moin-user/attachments/20110124/ab1217d4/attachment.html>

From r1chardj0n3s at gmail.com  Mon Jan 24 23:24:58 2011
From: r1chardj0n3s at gmail.com (Richard Jones)
Date: Tue, 25 Jan 2011 15:24:58 +1100
Subject: [Moin-user] Problems stopping the spam
In-Reply-To: <C00BE980-3761-4E2D-8D76-B22A1B4B95EB@monash.edu>
References: <AANLkTimya17WutG565dgVeCSBJp9CbeaihivRSTAYaAU@mail.gmail.com>
	<2590990491298802146@unknownmsgid>
	<AANLkTi==+X+KtgPAK0CuKQkgJUzWQjh+NnTMyTvA+Q6C@mail.gmail.com>
	<C00BE980-3761-4E2D-8D76-B22A1B4B95EB@monash.edu>
Message-ID: <AANLkTin=JeEjMPMS2DCfT+kCx-L4vGj8iKZxXd4_-FuB@mail.gmail.com>

On Tue, Jan 25, 2011 at 3:00 PM, John Hurst <john.hurst at monash.edu> wrote:
> Make sure your up/down-stream settings are correct. ?ACL scanning stops as soon as a user group matches, which may happen before your explicit settings. ?Or even worse, fall through to the end, with no explicit setting.
>
> Check what your HelpOnAccessControlLists page says, particularly section 5.
>
> From what you say, I think you need to add
>
> ?acl_rights_after = u"All:read" ?(or even u"All:", i.e., no rights)
>
> to make sure that "All" is not overlooked.

I gave that a try just to be sure and it didn't fix the problem. For
the record it now says:

    acl_enabled = 1
    acl_rights_default = u"All:read"
    acl_rights_before = u"stefan:read,write,delete,revert,admin
DanielDiniz:read,write,delete,revert,admin
RichardJones:read,write,delete,revert,admin"
    acl_rights_after = u"All:read"

Even better, I've just discovered that it's just the one page (as far
as I can tell) that is editable. The rest of the wiki is protected.

The wiki is at http://www.roundup-tracker.org/cgi-bin/moin.cgi/FrontPage
... the TranslationStatus page is editable by Known, but they can't
edit anything else...


     Richard



From moinmoin at sheep.art.pl  Tue Jan 25 03:28:15 2011
From: moinmoin at sheep.art.pl (Radomir Dopieralski)
Date: Tue, 25 Jan 2011 09:28:15 +0100
Subject: [Moin-user] Problems stopping the spam
In-Reply-To: <AANLkTin=JeEjMPMS2DCfT+kCx-L4vGj8iKZxXd4_-FuB@mail.gmail.com>
References: <AANLkTimya17WutG565dgVeCSBJp9CbeaihivRSTAYaAU@mail.gmail.com>
	<2590990491298802146@unknownmsgid>
	<AANLkTi==+X+KtgPAK0CuKQkgJUzWQjh+NnTMyTvA+Q6C@mail.gmail.com>
	<C00BE980-3761-4E2D-8D76-B22A1B4B95EB@monash.edu>
	<AANLkTin=JeEjMPMS2DCfT+kCx-L4vGj8iKZxXd4_-FuB@mail.gmail.com>
Message-ID: <AANLkTinLdpeo_vKZEoQEOh4t-kpFnshT3mHLpKVMeUZ1@mail.gmail.com>

On Tue, Jan 25, 2011 at 5:24 AM, Richard Jones <r1chardj0n3s at gmail.com> wrote:
> On Tue, Jan 25, 2011 at 3:00 PM, John Hurst <john.hurst at monash.edu> wrote:
>> Make sure your up/down-stream settings are correct. ?ACL scanning stops as soon as a user group matches, which may happen before your explicit settings. ?Or even worse, fall through to the end, with no explicit setting.
>>
>> Check what your HelpOnAccessControlLists page says, particularly section 5.
>>
>> From what you say, I think you need to add
>>
>> ?acl_rights_after = u"All:read" ?(or even u"All:", i.e., no rights)
>>
>> to make sure that "All" is not overlooked.
>
> I gave that a try just to be sure and it didn't fix the problem. For
> the record it now says:
>
> ? ?acl_enabled = 1
> ? ?acl_rights_default = u"All:read"
> ? ?acl_rights_before = u"stefan:read,write,delete,revert,admin
> DanielDiniz:read,write,delete,revert,admin
> RichardJones:read,write,delete,revert,admin"
> ? ?acl_rights_after = u"All:read"
>
> Even better, I've just discovered that it's just the one page (as far
> as I can tell) that is editable. The rest of the wiki is protected.
>
> The wiki is at http://www.roundup-tracker.org/cgi-bin/moin.cgi/FrontPage
> ... the TranslationStatus page is editable by Known, but they can't
> edit anything else...

I just registered and I can't edit that page. Perhaps your browser
just cached that page with the edit link...

-- 
Radomir Dopieralski, http://sheep.art.pl



From skip at pobox.com  Tue Jan 25 13:24:12 2011
From: skip at pobox.com (skip at pobox.com)
Date: Tue, 25 Jan 2011 12:24:12 -0600
Subject: [Moin-user] Problems stopping the spam
In-Reply-To: <AANLkTinLdpeo_vKZEoQEOh4t-kpFnshT3mHLpKVMeUZ1@mail.gmail.com>
References: <AANLkTimya17WutG565dgVeCSBJp9CbeaihivRSTAYaAU@mail.gmail.com>
	<2590990491298802146@unknownmsgid>
	<AANLkTi==+X+KtgPAK0CuKQkgJUzWQjh+NnTMyTvA+Q6C@mail.gmail.com>
	<C00BE980-3761-4E2D-8D76-B22A1B4B95EB@monash.edu>
	<AANLkTin=JeEjMPMS2DCfT+kCx-L4vGj8iKZxXd4_-FuB@mail.gmail.com>
	<AANLkTinLdpeo_vKZEoQEOh4t-kpFnshT3mHLpKVMeUZ1@mail.gmail.com>
Message-ID: <19775.5452.440193.677874@montanaro.dyndns.org>

    >> The wiki is at http://www.roundup-tracker.org/cgi-bin/moin.cgi/FrontPage
    >> ... the TranslationStatus page is editable by Known, but they can't
    >> edit anything else...

    Radomir> I just registered and I can't edit that page. Perhaps your
    Radomir> browser just cached that page with the edit link...

I don't think browser cache has anything to do with it.  I just created an
account.  I am able to edit the TranslationStatus page.  Instead of
presenting me with "Immutable Page" it gives me the two Edit links, even
after clearing my browser's page cache.

Skip



From rb.proj at gmail.com  Tue Jan 25 14:31:55 2011
From: rb.proj at gmail.com (R.Bauer)
Date: Tue, 25 Jan 2011 20:31:55 +0100
Subject: [Moin-user] Problems stopping the spam
In-Reply-To: <AANLkTin=JeEjMPMS2DCfT+kCx-L4vGj8iKZxXd4_-FuB@mail.gmail.com>
References: <AANLkTimya17WutG565dgVeCSBJp9CbeaihivRSTAYaAU@mail.gmail.com>	<2590990491298802146@unknownmsgid>	<AANLkTi==+X+KtgPAK0CuKQkgJUzWQjh+NnTMyTvA+Q6C@mail.gmail.com>	<C00BE980-3761-4E2D-8D76-B22A1B4B95EB@monash.edu>
	<AANLkTin=JeEjMPMS2DCfT+kCx-L4vGj8iKZxXd4_-FuB@mail.gmail.com>
Message-ID: <ihn8fc$qs9$1@dough.gmane.org>

Am 25.01.2011 05:24, schrieb Richard Jones:
> On Tue, Jan 25, 2011 at 3:00 PM, John Hurst <john.hurst at monash.edu> wrote:
>> Make sure your up/down-stream settings are correct.  ACL scanning stops as soon as a user group matches, which may happen before your explicit settings.  Or even worse, fall through to the end, with no explicit setting.
>>
>> Check what your HelpOnAccessControlLists page says, particularly section 5.
>>
>> From what you say, I think you need to add
>>
>>  acl_rights_after = u"All:read"  (or even u"All:", i.e., no rights)
>>
>> to make sure that "All" is not overlooked.
> 
> I gave that a try just to be sure and it didn't fix the problem. For
> the record it now says:
> 
>     acl_enabled = 1
>     acl_rights_default = u"All:read"
>     acl_rights_before = u"stefan:read,write,delete,revert,admin
> DanielDiniz:read,write,delete,revert,admin
> RichardJones:read,write,delete,revert,admin"
>     acl_rights_after = u"All:read"
> 
> Even better, I've just discovered that it's just the one page (as far
> as I can tell) that is editable. The rest of the wiki is protected.
> 
> The wiki is at http://www.roundup-tracker.org/cgi-bin/moin.cgi/FrontPage
> ... the TranslationStatus page is editable by Known, but they can't
> edit anything else...
> 
> 
>      Richard
> 

Hi Richard

I copied your setup lines to my local 1.9 dev instance and I don't get
this problem

just the usual questions:
 1. is that the right wikiconfig.py you edit?, see logs, moin.cgi, or
SystemInfo (as superuser)
 2. can you show me more lines, without secrets
 3. it looks like there are also some outdated config vars in your
wikiconfig.py (acl_enabled = 1) but this did not matter now


I just created an account on your wiki and I only can edit
TranslationStatus. Others pages I tried are readonly. At least now,

4. disable superuser account, see http://moinmo.in/SecurityFixes or
better update.


cheers
Reimar







> ------------------------------------------------------------------------------
> Special Offer-- Download ArcSight Logger for FREE (a $49 USD value)!
> Finally, a world-class log management solution at an even better price-free!
> Download using promo code Free_Logger_4_Dev2Dev. Offer expires 
> February 28th, so secure your free ArcSight Logger TODAY! 
> http://p.sf.net/sfu/arcsight-sfd2d





From tw-public at gmx.de  Wed Jan 26 08:06:12 2011
From: tw-public at gmx.de (Thomas Waldmann)
Date: Wed, 26 Jan 2011 14:06:12 +0100
Subject: [Moin-user] moin 1.9.4 translation checking help wanted
Message-ID: <1296047172.23208.3.camel@x300>

Hi,

we should release a 1.9.4, but status of translations is currently
blocking that and we need your help.

For more infos, please see there: http://moinmo.in/MoinMoinRelease1.9

Cheers,

Thomas





From tw-public at gmx.de  Wed Jan 26 08:47:30 2011
From: tw-public at gmx.de (Thomas Waldmann)
Date: Wed, 26 Jan 2011 14:47:30 +0100
Subject: [Moin-user] Support/Maintenance status of misc. moin releases
Message-ID: <1296049650.23208.41.camel@x300>

What I write below is how it looks like from perspective of MoinMoin
development. If you use some Linux distribution's moin package, the
distributor(!) is MAYBE giving you different support.

Everything < 1.8.x is completely outdated and unmaintained. There won't
be ANY changes / fixes to these versions, but we'll help you to upgrade
to newer versions, see http://moinmo.in/Support .

1.8.x series is mostly end-of-life, there might be 1 more fix release in
case something very bad happens (like a critical security issue), but it
mostly exists to give people an easy upgrade within 1.8.x until they had
enough time to go to WSGI based serving and moin 1.9.x. So, if you can't
go right to 1.9.x and WSGI now, make sure you have at least an easy
upgrade to the latest 1.8.x release (which is 1.8.8 currently) and
prepare going to 1.9.x SOON.

1.9.x series will be updated with fixes for a longer time, while we work
on finishing moin 2.0. We'll try to have moin2 in a usable state before
moin 1.9.9. :) MoinMoin 1.9 won't get any major new features, though,
because porting them to moin2 is non-trivial and lots of work, so we
rather work on getting moin2 ready for production.

2.0 (aka moin2) is not ready for production yet. If you like to hack
python code, find and fix bugs, etc. you're welcome to help making it
ready for release (hopefully later this year).

moin2 is very different from moin 1.x, much cleaner, much more fun
hacking it. :)





From ndemou at gmail.com  Sat Jan 29 12:05:20 2011
From: ndemou at gmail.com (Nick Demou)
Date: Sat, 29 Jan 2011 19:05:20 +0200
Subject: [Moin-user] RFC: A better translation of MoinAPI/Beispiele
Message-ID: <AANLkTinFKrmfycnLvdCnX39yrE_Og8NWyGvDoh=DeO4j@mail.gmail.com>

Google Translation of http://moinmo.in/MoinAPI/Beispiele is very hard
to read. I took the wiki-source of the original (German) page, wrote a
few handrend lines of python code and used Google Translate to make a
new translation available at http://moinmo.in/MoinAPI/BeispieleEng

Note that my version is still machine translation but it's far better
than the one you get by applying Google Translate in the html of the
original German page. What I did was to try to translate only the
German text and not the python code and any references to it. The
result was better than I expected.

So check it out and tell me what you think.