CVS log for pegasus/src/Pegasus/Security/Authentication/AuthenticationManager.cpp

Request diff between arbitrary revisions

BUG#: 9883
TITLE: Implement HTTP Negotiate authentication

DESCRIPTION: Implemented HTTP Negotiate authentication, as described in
RFC 4559. It uses SPNEGO protocol, GSSAPI as authentication API and MIT
Kerberos as GSSAPI implementation. The implementation should be
interchangeable, any GSSAPI implementation should work.

BUG#: 9676
TITLE: TASK-PEP317_pullop-branch. Merge Out from head of tree

DESCRIPTION: Brings TASK-PEP317_pullop-branch into line with head of tree

BUG#: 9756
TITLE: build fails when PEGASUS_KERBEROS_AUTHENTICATION defined

DESCRIPTION:

PEP#: 317
TITLE: Update merge out from last 2.13.0.

DESCRIPTION: Sync with 2.13.0 just before release.  Note that we kept
the Development status.

BUG#:9639
TITLE: Many PAM errors are not reported correctly

DESCRIPTION:

BUG#: 9999
TITLE: TASK_317-Pull Operations update.

DESCRIPTION: This update brings this branch back in line with the current
head of tree and cleans up a number of outstanding issues in the code.  Note
That there are still a lot of outstanding issues being worked on.

BUG#:9642
TITLE: Remote session tracking through PAM mechanism in a common approach

DESCRIPTION:

BUG#: 9651
TITLE: Incomplete username will be printed in syslog

DESCRIPTION:

BUG#: 9628
TITLE: PEGASUS_ASSERT used in places where PEGASUS_UNREACHABLE should be used

DESCRIPTION:

BUG#: 8470
TITLE: Inconsistency in checking the configuration property names and their values

BUG#: 8273
TITLE: Remove trailing space characters
DESCRIPTION: Remove meaningless whitespace.

BUG#: 8123
TITLE: Update copyright/license text

DESCRIPTION:

Fixing trailing spaces in copyright/license text

BUG#: 8123
TITLE: Update Coyright/License text

DESCRIPTION:

Adding the new copyright/license text to almost all files

BUG#: 7830
TITLE: Logger::put_l should use MessageLoaderParms
DESCRIPTION: Use a MessageLoaderParms parameter in localizable logging calls.

PEP#: 328
TITLE: Solaris Porting

DESCRIPTION: Ongoing Solaris Porting

BUG#:7749
TITLE: Trace Level checking (everything, but Pegasus/Server)

DESCRIPTION:

BUG#:7686
TITLE: PEP#315 - Improve Trc&Log - Remove duplicate traces

DESCRIPTION: Remove duplicate traces

BUG#:7645
TITLE: PEP#315 - Improve Trc&Log - Remove Logger::TRACE

DESCRIPTION:

PEP#: 305
TITLE: VxWorks Porting
DESCRIPTION: Ongoing VxWorks porting

PEP#: 305
TITLE: VxWorks Porting
DESCRIPTION: Ongoing VxWorks porting

BUG#: 6800
TITLE: Use z/OS UNIX Domain socket ioctl() function for client verification instead of files

DESCRIPTION: Add zOS function to retrieve and process a userID from the UNIX Local Domain socket.

BUG#: 6588
TITLE: Source files do not meet chksrc requirements
DESCRIPTION: Reformatted according to the coding conventions to pass the chksrc filter.

BUG#: 6562
TITLE: Server start-up logic needs clean-up
DESCRIPTION: Clean up the management of the PID file and start-up exceptions.

BUG#:6300
TITLE: Performance - simplify internal Tracer interface and use the more efficent Trace macros (2.6)

DESCRIPTION:

BUG#: 6276
TITLE: AuthenticationInfo class needs to be cleaned up
DESCRIPTION: Removed AuthStatus enum and setters. Added members connectionAuthenticated, isConnectionAuthenticated and setConnectionAuthenticated.

BUG#: 6306
TITLE: Initialization of String objects to String::EMPTY is unnecessary
DESCRIPTION: Remove redundant object initializations.

BUG#: 6274
TITLE: AuthenticationInfo class needs to be cleaned up

DESCRIPTION: Removed AuthStatus enum and setters. Added members connectionAuthenticated, isConnectionAuthenticated and setConnectionAuthenticated.

BUG#: 6250
TITLE: AuthenticationInfo class needs to be cleaned up

DESCRIPTION: Removed AuthStatus enum and setters. Added members connectionAuthenticated, isConnectionAuthenticated and setConnectionAuthenticated.

BUG#:6207
TITLE: Performance - make OpenPegasus use its more efficent Trace macros

DESCRIPTION:

BUG#: 5971
TITLE: Remove unused code for LocalPrivileged authentication
DESCRIPTION: Remove the disabled logic for the defunct LocalPrivileged authentication mechanism.

BUG#:5821
TITLE: Check enableRemotePrivilegedUserAccess before/at authentication

DESCRIPTION:

BUG#: 2991
TITLE: Remove unneeded checks for NULL before delete/free
DESCRIPTION: Removed checks for non-zero pointers before 'delete' calls.

PEP#: 233
TITLE: Updated Embedded Instance Support branch

DESCRIPTION:

- Merged with latest code from 2.5.1

- Modified ObjectNormalizer to use a CIMOMHandle instead of the repository and to normalize the instances in an embedded instance property.

BUG#: 4691
TITLE: Update Licenses to 2006

DESCRIPTION: Updates most of the licenses to 2006. The slp_client directories are excluded for the moment pending discussion. This change has passed unit and system tests.  Note that this changes just about EVERY file in Pegasus.

BUG#: 3280
TITLE: Certificate based authentication should perform additional authentication checks

DESCRIPTION: Added a validateUser interface to the AuthenticationManager and Authenticator interfaces. Updated the Authentication handlers to implement the validateUser interface. Updated the PAM StandAlone Process to also support this interface. Updated the HTTPAuthenticatorDelegator to invoke the validateUser interface before setting the user name in the Identity Container during Certificate based authentication.

BUG#: 2656
TITLE: License statement update to 2005

DESCRIPTION: All .h, .cpp and the wql, cql, compile *.l and *.y files along
with the .java files in providermanager2/jmpi updated to use the license
statement in doc/license.txt
Tested on windows and visual test of all diffs.

PEP#: 101
TITLE: [Joyce]  AutoPtr updates
DESCRIPTION:  Please refer PEP 101 for details.

BUG#: 2196
TITLE: Copyright update

DESCRIPTION: Update all .cpp and .h files for new license and
update the doc/license.txt file.  Note that there were also
a couple of files that had to be fixed because they had violated
the comments rules (ex. blank line at head of file or in the case of
xmlwriter.cpp a comment line //=========  which drove the strip
function nuts.  These were fixed.  This has been compiled and tested
on windows.

PEP 55 Update license on source files to current license text and date

Bug 745: OS/400 Authentication Changes

Bug 419: OS/400 Authentication Enhancements

IBM:HR:Bug 458: L10N TODO Localization

another merge with HEAD

Bug 419: OS/400 Authentication Enhancements

merge with 2.3 localized code

Bug 419: OS/400 Authentication Enhancements

Bug 419: OS/400 Authentication Enhancements

IBM:DR [PEP:53] Logging Enhancements Code Points

HP-RK API Review: Remove definition of PEGASUS_NOT_FOUND, PEGASUS_OUT, and PEGASUS_TRACE macros.

HP-RK Update license header.

HP-Nag: Added config properties 'enableHttpConnection' and 'enableHttpsConnection', renamed 'requireAuthentication' to 'enableAuthentication' and 'requireAuthorization' to 'enableNamespaceAuthorization'. Removed few ATTN's in Authentication code.

HP-DME: Added reference to PegasusVersion.h to allow version tracking at the component level.

HP-Nag: Implemented Server side Basic authentication handling code and cleaned up ATTN's in the authentication releated files. Implemented a new AuthenticationInfoRep class and modified the related files. Added more test cases to test the authentication classes.

HP-Nag: A bug fix in Local authentication code.

SF-HP NB-HP Changed the authorizer to include checks for privileged user access.

HP-Nag: Added Trace Code and did some cleanup of Authentication source files. Added more test cases to authentication and authorization tests to increase the code coverage.

Merged dev branch into main trunk.

HP-NB Modified AuthenticationManager.cpp to remember the authenticated local privileged user and not to challenge the subsequent requests on that connection.

HP-NB Implemented Authentication code on the server to challenge requests, authenticate the challenge responses, and verify the subsequent authorized requests. Implemented authentication mechanism in the Client API to send responses to the challenges from the server. Current implementation supports only 'local' authentication mechanism. Authentication can be enabled by setting the config property 'requireAuthentication' to true.

Added first level implementation of authentication to the pegasus code. Created an Authentication Manager and authenticator interfaces. The file based local authentication module has been modified to implement the local authenticator interface, to generate the challenge for the unauthorized requests and to verify the authentication. A skeleton program has been created for the Basic Authenticator. This code is not yet linked into the build.

file AuthenticationManager.cpp was initially added on branch dev.