CVS log for pegasus/src/Pegasus/Security/Authentication/BasicAuthenticationHandler.cpp

Request diff between arbitrary revisions

BUG#: 9676
TITLE: TASK-PEP317_pullop-branch - Mergeout up to 15 Dec 2013

DESCRIPTION: Changes for mergeout to branch.

PEP#: 362
TITLE: Webadmin and Restful Services

DESCRIPTION:

Syc with Head branch

BUG#: 9767
TITLE: Build Failure on Windows in authentication.

DESCRIPTION: Add Conditional use of PAMSessionBasicAuthenticaor header

PEP#: 362
TITLE: Webadmin and Restful Services

DESCRIPTION:
Rollback the changes on CIM-RS branch to avoid the merge conflict.  Bug 9767 will commit this change in the main branch

PEP#: 362
TITLE: Webadmin and Restful Services

DESCRIPTION:
Apply the candidate patch of Bug 9767 and make the windows build work.

PEP#: 317
TITLE: Update merge out from last 2.13.0.

DESCRIPTION: Sync with 2.13.0 just before release.  Note that we kept
the Development status.

BUG#:9639
TITLE: Many PAM errors are not reported correctly

DESCRIPTION:

BUG#: 9999
TITLE: TASK_317-Pull Operations update.

DESCRIPTION: This update brings this branch back in line with the current
head of tree and cleans up a number of outstanding issues in the code.  Note
That there are still a lot of outstanding issues being worked on.

BUG#:9642
TITLE: Remote session tracking through PAM mechanism in a common approach

DESCRIPTION:

BUG#: 9651
TITLE: Incomplete username will be printed in syslog

DESCRIPTION:

PEP#: 348
TITLE: Merge head into branch.

DESCRIPTION: Merge head into branch.

BUG#: 8576
TITLE: Enhance Authentication failure error messages with client IP.
DESCRIPTION: updated the authentication failures trace and logger message with client IP address.

BUG#: 8273
TITLE: Remove trailing space characters
DESCRIPTION: Remove meaningless whitespace.

BUG#: 8123
TITLE: Update copyright/license text

DESCRIPTION:

Fixing trailing spaces in copyright/license text

BUG#: 8123
TITLE: Update Coyright/License text

DESCRIPTION:

Adding the new copyright/license text to almost all files

BUG#: 7830
TITLE: Logger::put_l should use MessageLoaderParms
DESCRIPTION: Use a MessageLoaderParms parameter in localizable logging calls.

BUG#: 7515
TITLE: Log user name when authentication is failed.
DESCRIPTION:

BUG#: 7503
TITLE: Log user name when authentication is failed.
DESCRIPTION:

BUG#:6606
PEP#:284
TITLE: PEP 284 - Port Pegasus to i5/PASE platform: Step four, function and bundles change

DESCRIPTION: PEP 284 - Port Pegasus to i5/PASE platform: Step four, function and bundles change

BUG#:5739
PEP#:284
TITLE: remove OS400 code

DESCRIPTION: Port Pegasus to i5/PASE platform: Step one, remove obsolete OS400 code

PEP#: 286
TITLE: Privilege Separation
DESCRIPTION: Minor clean-up.

PEP#: 286
TITLE: Privilege Separation

DESCRIPTION: Privilege Separation Rework

PEP#: 286
TITLE: Privilege Separation
DESCRIPTION: Merge PEP286_PRIVILEGE_SEPARATION_BRANCH into the HEAD.

PEP#: 286
TITLE: Privilege Separation

DESCRIPTION: Ongoing privilege separation work.

BUG#:5821
TITLE: Check enableRemotePrivilegedUserAccess before/at authentication

DESCRIPTION:

BUG#: 5772
TITLE: PEP 258 Local and basic authentication audit logging

DESCRIPTION: Added audit interfaces and logging for local and basic authentication.

BUG#:5599
TITLE: Avoid double search through user database on each request

DESCRIPTION:

BUG#: 5351
TITLE: Inconsistent interpretation of boolean type configuration values
DESCRIPTION: Use a case-insensitive interpretation for all boolean configuration values.

BUG#: 5207
TITLE: Compile warning building BasicAuthenticationHandler.cpp
DESCRIPTION: Explicitly cast the CString object to const char* in a Tracer call.

BUG#: 5208
TITLE: Compile warning building BasicAuthenticationHandler.cpp
DESCRIPTION: Explicitly cast the CString object to const char* in a Tracer call.

BUG#: 5161
TITLE: Perform privileged user access check before authentication
DESCRIPTION: Add a precheck for enableRemotePrivilegedUserAccess before user/password authentication.

BUG#: 5149
TITLE: Perform privileged user access check before authentication
DESCRIPTION: Add a precheck for enableRemotePrivilegedUserAccess before user/password authentication.

BUG#: 2991
TITLE: Remove unneeded checks for NULL before delete/free
DESCRIPTION: Removed checks for non-zero pointers before 'delete' calls.

PEP#: 233
TITLE: Updated Embedded Instance Support branch

DESCRIPTION:

- Merged with latest code from 2.5.1

- Modified ObjectNormalizer to use a CIMOMHandle instead of the repository and to normalize the instances in an embedded instance property.

BUG#: 4691
TITLE: Update Licenses to 2006

DESCRIPTION: Updates most of the licenses to 2006. The slp_client directories are excluded for the moment pending discussion. This change has passed unit and system tests.  Note that this changes just about EVERY file in Pegasus.

BUG#: 4558
TITLE: BasicAuthenticationHandler should log user on authenticate failures on 2.4

DESCRIPTION: This is a port of bug 4538 from the 2.5 branch to 2.4. Log pam basic authentication failures to the log file.

BUG#: 4538
TITLE:BasicAuthenticationHandler should log user on authenticate failures

DESCRIPTION: Log pam basic authentication failures to the log file.

BUG#: 4307
TITLE: Buffer class optimization

DESCRIPTION: New Buffer class and usage.

BUG#: 4200
TITLE: Performance Optimizations

DESCRIPTION: Replaced internal uses of Array<char> with Buffer.

BUG#: 3280
TITLE: Certificate based authentication should perform additional authentication checks

DESCRIPTION: Added a validateUser interface to the AuthenticationManager and Authenticator interfaces. Updated the Authentication handlers to implement the validateUser interface. Updated the PAM StandAlone Process to also support this interface. Updated the HTTPAuthenticatorDelegator to invoke the validateUser interface before setting the user name in the Identity Container during Certificate based authentication.

BUG#: 2876
TITLE: BasicAuthenticationHandler.cpp - line 117 - unreachable code - VMS

DESCRIPTION: PEG_METHOD_EXIT() appears after the return() so the fix is to swap the two lines of code.

BUG#: 2656
TITLE: License statement update to 2005

DESCRIPTION: All .h, .cpp and the wql, cql, compile *.l and *.y files along
with the .java files in providermanager2/jmpi updated to use the license
statement in doc/license.txt
Tested on windows and visual test of all diffs.

BUG#: 2297
TITLE: 'Types' changes

DESCRIPTION: Changes for typedef'ing Sint8 to be a 'signed char'.

BUG#: 2196
TITLE: Copyright update

DESCRIPTION: Update all .cpp and .h files for new license and
update the doc/license.txt file.  Note that there were also
a couple of files that had to be fixed because they had violated
the comments rules (ex. blank line at head of file or in the case of
xmlwriter.cpp a comment line //=========  which drove the strip
function nuts.  These were fixed.  This has been compiled and tested
on windows.

PEP 55 Update license on source files to current license text and date

another merge with HEAD

HP-JS PEPs 78 and 79 ([WMI Mapper] Changes to the Authentication Process and Local Connection Enhancements).

Bug 173: OS/400 fixes

HP-RK API Review: Rename Array<>::reserve() to reserveCapacity().

HP-RK Update license header.

HP-Nag: Added PAM based user authentication module. The implementation is available only on Unix platforms. The PAM module is optional and it can be built by setting the environment variable PEGASUS_PAM_AUTHENTICATION

HP-Nag: Implemented Server side Basic authentication handling code and cleaned up ATTN's in the authentication releated files. Implemented a new AuthenticationInfoRep class and modified the related files. Added more test cases to test the authentication classes.

HP-Nag: Added Trace Code and did some cleanup of Authentication source files. Added more test cases to authentication and authorization tests to increase the code coverage.

Merged dev branch into main trunk.

HP-NB Implemented Authentication code on the server to challenge requests, authenticate the challenge responses, and verify the subsequent authorized requests. Implemented authentication mechanism in the Client API to send responses to the challenges from the server. Current implementation supports only 'local' authentication mechanism. Authentication can be enabled by setting the config property 'requireAuthentication' to true.

Added first level implementation of authentication to the pegasus code. Created an Authentication Manager and authenticator interfaces. The file based local authentication module has been modified to implement the local authenticator interface, to generate the challenge for the unauthorized requests and to verify the authentication. A skeleton program has been created for the Basic Authenticator. This code is not yet linked into the build.

file BasicAuthenticationHandler.cpp was initially added on branch dev.