[Pkg-zope-developers] Bug#343445: zope3-sandbox: startup breaks on invalid characters in preinstall password

[Guido A.J. Stevens]

Package: zope3-sandbox
Version: 3.1.0-3
Severity: normal

After installing zope3 and zope3-sandbox I couldn't connect to my instance.
Stopping zope3 and running sandbox/bin/runzope showed the following exception:
	  
zope.configuration.xmlconfig.ZopeXMLConfigurationError: File
"/var/lib/zope3/instance/sandbox/etc/site.zcml", line 14.2-14.36
ZopeSAXParseException: File
"/var/lib/zope3/instance/sandbox/etc/principals.zcml", line 30.24,  not
well-formed (invalid t oken)

On inspection of this config file it turned out the breakage was caused by
an ampersand ("&") character in the password I had supplied for the admin
user during preinstall. Changing the password fixed the problem.

I don't have a patch but filtering the preinstall dialog for invalid XML
characters in the admin password should be trivial.

-- System Information:
Debian Release: 3.1
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: i386 (i686)
Kernel: Linux 2.6.10
Locale: LANG=nl_NL at euro, LC_CTYPE=nl_NL at euro (charmap=ISO-8859-15)

Versions of packages zope3-sandbox depends on:
ii  debconf [debconf-2.0]         1.4.49     Debian configuration management sy
ii  zope-common                   0.5.16     common settings and scripts for zo
ii  zope3                         3.1.0-3    Open Source Web Application Server

-- debconf information:
  zope3-sandbox/internal:
* zope3-sandbox/admin-user: admin
* zope3-sandbox/instance-http-port: 8031
* zope3-sandbox/keep-data-on-purge: false