CVS log for pegasus/src/Pegasus/Security/Authentication/PAMBasicAuthenticatorUnix.cpp

Request diff between arbitrary revisions

PEP#: 317
TITLE: Update merge out from last 2.13.0.

DESCRIPTION: Sync with 2.13.0 just before release.  Note that we kept
the Development status.

BUG#:9639
TITLE: Many PAM errors are not reported correctly

DESCRIPTION:

BUG#: 9999
TITLE: TASK_317-Pull Operations update.

DESCRIPTION: This update brings this branch back in line with the current
head of tree and cleans up a number of outstanding issues in the code.  Note
That there are still a lot of outstanding issues being worked on.

BUG#:9642
TITLE: Remote session tracking through PAM mechanism in a common approach

DESCRIPTION:

BUG#: 9651
TITLE: Incomplete username will be printed in syslog

DESCRIPTION:

BUG#: 8273
TITLE: Remove trailing space characters
DESCRIPTION: Remove meaningless whitespace.

BUG#: 8123
TITLE: Update copyright/license text

DESCRIPTION:

Fixing trailing spaces in copyright/license text

BUG#: 8123
TITLE: Update Coyright/License text

DESCRIPTION:

Adding the new copyright/license text to almost all files

BUG#: 7987
TITLE: Challenge response missing authentication parameter "realm = "

BUG#: 7932
TITLE: Challenge response missing authentication parameter "realm = "

BUG#: 7222
TITLE: Memory error in PAM module
DESCRIPTION: Set buffer limits to avoid memory write errors.

BUG#: 7220
TITLE: Memory error in PAM module
DESCRIPTION: Set buffer limits to avoid memory write errors.

BUG#: 6037
TITLE: PEP 286 Privilege Separation
DESCRIPTION: Implement privilege separation for the CIM Server.  This allows the CIM Server to run without privilege, using a separate small process to perform privileged operations as necessary.

PEP#: 286
TITLE: Privilege Separation
DESCRIPTION: Merge with latest changes.

BUG#: 6328
TITLE: PEGASUS_LSB flag is no longer needed
DESCRIPTION: Remove the PEGASUS_LSB environment variable, PEGASUS_S_LSB macro, and the LSB RPM files.

BUG#:6300
TITLE: Performance - simplify internal Tracer interface and use the more efficent Trace macros (2.6)

DESCRIPTION:

PEP#: 286
TITLE: Privilege Separation

DESCRIPTION: Privilege Separation Rework

PEP#: 286
TITLE: Privilege Separation
DESCRIPTION: Merge PEP286_PRIVILEGE_SEPARATION_BRANCH into the HEAD.

BUG#:6207
TITLE: Performance - make OpenPegasus use its more efficent Trace macros

DESCRIPTION:

BUG#: 6010
TITLE: pam code should trace errors

DESCRIPTION:
Added more trace information.

PEP#: 286
TITLE: Privilege Separation

DESCRIPTION: Ongoing privilege separation work.

PEP#: 286
TITLE: Privilege Separation

DESCRIPTION: Ongoing privilege separation work.

PEP#: 286
TITLE: Privilege Separation

DESCRIPTION: Ongoing privilege separation work.

PEP#: 286
TITLE: Privilege Separation

DESCRIPTION: Ongoing privilege separation work.

PEP#: 286
TITLE: Privilege Separation

DESCRIPTION: Ongoing privilege separation work.

BUG#: 5725
TITLE: ssh doesn't exit after tog-pegasus start

DESCRIPTION: Close stderr file descriptor in cimservera.

BUG#: 5691
TITLE: Parameter systemId should be used in the System:syslog() of Logger.cp

DESCRIPTION: Updated System::syslog() in Logger.cpp to use parameter systemId instead of System::CIMSERVER. Also, updated the modules which does not pass proper identifier.

BUG#: 5314
TITLE: IPC Refactoring

DESCRIPTION: This patch cleans up the IPC related classes. It (1) reorganizes
related classes into their own headers, (2) makes the mutex class recursive to
eliminate recursive lock exclusion logic, (3) reimplements condition variables,
renames dozens of global functions.

BUG#: 5314
TITLE: IPC Refactoring

DESCRIPTION: IPC Refactoring Branch Work

PEP#: 233
TITLE: Updated Embedded Instance Support branch

DESCRIPTION:

- Merged with latest code from 2.5.1

- Modified ObjectNormalizer to use a CIMOMHandle instead of the repository and to normalize the instances in an embedded instance property.

BUG#: 4691
TITLE: Update Licenses to 2006

DESCRIPTION: Updates most of the licenses to 2006. The slp_client directories are excluded for the moment pending discussion. This change has passed unit and system tests.  Note that this changes just about EVERY file in Pegasus.

BUG#: 3963
TITLE: Compile warning in PAMBasicAuthenticatorUnix.cpp
DESCRIPTION: Fixed a signed/unsigned comparison mismatch compile warning.

BUG#: 3280
TITLE: Certificate based authentication should perform additional authentication checks

DESCRIPTION: Added a validateUser interface to the AuthenticationManager and Authenticator interfaces. Updated the Authentication handlers to implement the validateUser interface. Updated the PAM StandAlone Process to also support this interface. Updated the HTTPAuthenticatorDelegator to invoke the validateUser interface before setting the user name in the Identity Container during Certificate based authentication.

BUG#: 1748
TITLE: childSignalHandler
DESCRIPTION: Remove the SIGCHLD signal handler on Linux, and no longer ignore SIGCHLD signals on other platforms.  Instead, specifically call waitpid for child processes forked by the cimserver itself.

BUG#: 3747
TITLE: Memory leak in PAMBasicAuthenticator
DESCRIPTION: Do not use dynamically allocated memory for the PAMBasicAuthenticatorStandAlone instance.

PEP#: 101
TITLE: AutoPtr Enhancement

DESCRIPTION: AutoPtr updates has been made

BUG#: 2656
TITLE: License statement update to 2005

DESCRIPTION: All .h, .cpp and the wql, cql, compile *.l and *.y files along
with the .java files in providermanager2/jmpi updated to use the license
statement in doc/license.txt
Tested on windows and visual test of all diffs.

BUG#: 2196
TITLE: Copyright update

DESCRIPTION: Update all .cpp and .h files for new license and
update the doc/license.txt file.  Note that there were also
a couple of files that had to be fixed because they had violated
the comments rules (ex. blank line at head of file or in the case of
xmlwriter.cpp a comment line //=========  which drove the strip
function nuts.  These were fixed.  This has been compiled and tested
on windows.

PEP#: 152
TITLE: Make Pegasus LSB compliant

DESCRIPTION:
Add a check for PAM_MAX_MSG_SIZE. This constants is not available on
LSB 1.3 and is required.

PEP#: 072
TITLE: [HP-RK] Out-of-Process Provider Support

DESCRIPTION: Configured the handling behavior for SIGCHLD signals.  On Linux, a signal handler is registered to clean up child processes (to avoid zombies).  This handler was moved from PAMBasicAuthenticatorUnix.cpp to CIMServer.cpp.  On other platforms, SIGCHLD signals are ignored.

BUG#: 1423
TITLE: Missed the #elif defined structure

DESCRIPTION:

BUG#: 1423
TITLE: Missed the proper #elif defined structure

DESCRIPTION:

BUG#: 1423
TITLE: Providers using 'system' syscall fail.

DESCRIPTION:

BUG#: 1423
TITLE: Providers using 'system' call fail.

DESCRIPTION:

BUG#: 1359
TITLE: [HP-SF] usePAMAuthentication config property is obsolete

DESCRIPTION: The addition of the Stand-alone PAM process (see Bug 1255) obsoletes the requirement of the Configuration property usePAMAuthentication and the method PAMBasicAuthenticator::_authenticateByPwnam containing system password-based authentication logic.

BUG#: 1423
TITLE:  	Providers using 'system' call fail.

DESCRIPTION:

BUG#: 1423
TITLE: Providers using 'system' call fail.

DESCRIPTION:

BUG#: 1359
TITLE: [HP-SF,NB] usePAMAuthentication config property is obsolete

DESCRIPTION: The addition of the Stand-alone PAM process (see Bug 1255) obsoletes the requirement of the Configuration property usePAMAuthentication and the method PAMBasicAuthenticator::_authenticateByPwnam containing system password-based authentication logic.

BUG#: 1360
TITLE: HP[BJH] Use getHomedPath instead of getAbsolutePath

DESCRIPTION: The location for the stand alone PAM Authentication process was being determined using FileSystem::getAbsolutePath. This was changed to be using ConfigManager::getHomedPath so that environment variables are not being relied on at this point.

BUG#: 1360
TITLE: HP[BJH] Use getHomedPath instead of getAbsolutePath

DESCRIPTION: The location for the stand alone PAM Authentication process was being determined using FileSystem::getAbsolutePath. This was changed to be using ConfigManager::getHomedPath so that environment variables are not being relied on at this point.

BUG#: 1255
TITLE: HP[BJH] Linux PAM Memory Leak Problem

DESCRIPTION: A significant memory leak was being seen when using PAM Authorization on the Linux platform. A seperate PAM process can now be used by compiling with PEGASUS_USE_PAM_STANDALONE_PROC for Linux and HP-UX.

BUG#: 1255
BRANCH: TRUNK
TITLE: HP[BJH] Linux PAM Memory Leak Problem

DESCRIPTION: A significant memory leak was being seen when using PAM Authorization on the Linux platform. A seperate PAM process can now be used by compiling with PEGASUS_USE_PAM_STANDALONE_PROC for Linux and HP-UX.

BUG#: 1255
BRANCH: TRUNK
TITLE: HP[BJH] Linux PAM Memory Leak Problem

DESCRIPTION: A significant memory leak was being seen when using PAM Authorization on the Linux platform.

PEP 55 Update license on source files to current license text and date

SF-HP : Upated PAM conversation routine to use calloc for PAM Response buffer allocation (Bug 326). Added a Mutex around authentication calls on HP-UX platform (Bug 202).

SF-HP Bug 199: Updated Authentication module to use getprpwnam instead of PAM based Authentication in case the system is trusted.

HP-SF: Updated authentication module to use getprpwnam in case the system is trusted and configured to use PAM authentication.

HP-Nag: Modified PAM callback function to do memory allocation at right places to fix a potential memory leak in the PAM module.

HP-YZ Ifdef out HP-UX code from PAMBasicAuthenticatorUnix.

YZ-HP: Added a functionality which allows user to config using either PAM or system function getpwnam to verify a user.

HP-Nag: Removed the global variable that was used to store the user password, created a new structure that contains the password, pass the pointer to this structure to pam_start() and get back the structure pointer in the pam call back function.

HP-[DME] Merge Linux and Unix implementations of PAM.

HP-DME: Incorrect value of userPassword was getting passed to PAMCallback.

HP-RK API Review: Change String::allocateCString() to getCString().

HP-RK Update license header.

HP-Nag: Modified CIM Server and Client API to lookup port number from services. CIM Server uses default port number (5988 for HTTP or 5989 for HTTPS) if no port number is configured and no port is specified in the configuration file. CIMClient's connectLocal() method is modified to try and connect to HTTP port, if failed then try and connect to HTTPS port.

HP-Nag: Fixed namespace related bug in PAMBasicAuthenticatorUnix.cpp.

HP-Nag: Modified PAM implementation to use account management functionality.

HP-Nag: Added PAM based user authentication module. The implementation is available only on Unix platforms. The PAM module is optional and it can be built by setting the environment variable PEGASUS_PAM_AUTHENTICATION