CVS log for pegasus/src/Pegasus/Security/Authentication/SecureBasicAuthenticator.cpp

Request diff between arbitrary revisions

PEP#: 317
TITLE: TASK-PEP317_pullop-branch Merge Out from head of tree effective 21 Nov 2013.

DESCRIPTION:

PEP#: 362
TITLE: Webadmin and Restful Services

DESCRIPTION:

Syc with Head branch

PEP#: 362
TITLE: Webadmin and Restful Services

DESCRIPTION:

Syc with Head branch

BUG#: 9812
TITLE: Exclude UserAuthProvider and UserManager code for PAM builds

DESCRIPTION:

PEP#: 317
TITLE: Update merge out from last 2.13.0.

DESCRIPTION: Sync with 2.13.0 just before release.  Note that we kept
the Development status.

BUG#:9639
TITLE: Many PAM errors are not reported correctly

DESCRIPTION:

BUG#: 9999
TITLE: TASK_317-Pull Operations update.

DESCRIPTION: This update brings this branch back in line with the current
head of tree and cleans up a number of outstanding issues in the code.  Note
That there are still a lot of outstanding issues being worked on.

BUG#:9642
TITLE: Remote session tracking through PAM mechanism in a common approach

DESCRIPTION:

BUG#: 9651
TITLE: Incomplete username will be printed in syslog

DESCRIPTION:

BUG#: 8470
TITLE: Inconsistency in checking the configuration property names and their values

BUG#: 8273
TITLE: Remove trailing space characters
DESCRIPTION: Remove meaningless whitespace.

BUG#: 8123
TITLE: Update copyright/license text

DESCRIPTION:

Fixing trailing spaces in copyright/license text

BUG#: 8123
TITLE: Update Coyright/License text

DESCRIPTION:

Adding the new copyright/license text to almost all files

BUG#:7996
TITLE: 64 bit platform support for z/OS

DESCRIPTION: 64 bit platform support for z/OS

BUG#: 7987
TITLE: Challenge response missing authentication parameter "realm = "

BUG#: 7984
TITLE: Compile of SecureBasicAuthenticator.cpp fails on z/OS

DESCRIPTION: Re-add the definition of a configManager reference for z/OS only.

BUG#: 7932
TITLE: Challenge response missing authentication parameter "realm = "

BUG#: 7830
TITLE: Logger::put_l should use MessageLoaderParms
DESCRIPTION: Use a MessageLoaderParms parameter in localizable logging calls.

PEP#: 305
TITLE: VxWorks Port

DESCRIPTION: Ongoing VxWorks porting

PEP#: 305
TITLE: VxWorks Port

DESCRIPTION: Ongoing VxWorks porting

PEP#: 328
TITLE: Solaris Porting

DESCRIPTION: Ongoing Solaris Porting

BUG#:7749
TITLE: Trace Level checking (everything, but Pegasus/Server)

DESCRIPTION:

BUG#:7645
TITLE: PEP#315 - Improve Trc&Log - Remove Logger::TRACE

DESCRIPTION:

BUG#: 7293
TITLE: Message PGS17204 has to be changed to be more general. (V2.6)

DESCRIPTION: Message changed.

BUG#: 7292
TITLE: Message PGS17204 has to be changed to be more general. (V2.7)

DESCRIPTION: Message changed.

BUG#: 7281
TITLE: Message PGS17204 has to be changed to be more general.

DESCRIPTION: Message changed.

BUG#: 7084
TITLE: zOS CIM server must support validation of PassTickets using a unique Application ID.(2.6)

DESCRIPTION: Enabel CIM Server setting applicaton ID.

BUG#: 7083
TITLE: zOS CIM server must support validation of PassTickets using a unique Application ID.(2.7)

DESCRIPTION: Enabel CIM Server setting applicaton ID.

BUG#: 7068
TITLE: zOS CIM server must support validation of PassTickets using a unique Application ID.

DESCRIPTION: Enabel CIM Server setting applicaton ID.

BUG#: 7068
TITLE: zOS CIM server must support validation of PassTickets using a unique Application ID.

DESCRIPTION: Pulling patch back dueto missing #endif

BUG#: 7068
TITLE: zOS CIM server must support validation of PassTickets using a unique Application ID.

DESCRIPTION: Add support of unique APPLID to system login.

BUG#:6606
PEP#:284
TITLE: PEP 284 - Port Pegasus to i5/PASE platform: Step four, function and bundles change

DESCRIPTION: PEP 284 - Port Pegasus to i5/PASE platform: Step four, function and bundles change

BUG#:5739
PEP#:284
TITLE: remove OS400 code

DESCRIPTION: Port Pegasus to i5/PASE platform: Step one, remove obsolete OS400 code

BUG#: 6037
TITLE: PEP 286 Privilege Separation
DESCRIPTION: Implement privilege separation for the CIM Server.  This allows the CIM Server to run without privilege, using a separate small process to perform privileged operations as necessary.

BUG#:6300
TITLE: Performance - simplify internal Tracer interface and use the more efficent Trace macros (2.6)

DESCRIPTION:

PEP#: 286
TITLE: Privilege Separation

DESCRIPTION: Privilege Separation Rework

PEP#: 286
TITLE: Privilege Separation
DESCRIPTION: Merge PEP286_PRIVILEGE_SEPARATION_BRANCH into the HEAD.

BUG#:6207
TITLE: Performance - make OpenPegasus use its more efficent Trace macros

DESCRIPTION:

PEP#: 286
TITLE: Privilege Separation

DESCRIPTION: Ongoing privilege separation work.

PEP#: 286
TITLE: Privilege Separation

DESCRIPTION: Ongoing privilege separation work.

PEP#: 286
TITLE: Privilege Separation

DESCRIPTION: Ongoing privilege separation work.

BUG#:5278
TITLE: zOS - update security hooks in OpenPegasus code base

DESCRIPTION:

PEP#: 233
TITLE: Updated Embedded Instance Support branch

DESCRIPTION:

- Merged with latest code from 2.5.1

- Modified ObjectNormalizer to use a CIMOMHandle instead of the repository and to normalize the instances in an embedded instance property.

BUG#: 4691
TITLE: Update Licenses to 2006

DESCRIPTION: Updates most of the licenses to 2006. The slp_client directories are excluded for the moment pending discussion. This change has passed unit and system tests.  Note that this changes just about EVERY file in Pegasus.

BUG#: 3977
TITLE: Bug3820 changes have broken certificate authorization on Windows

DESCRIPTION:

Reverted SecureBasicAuthenticator::validateUser() function to verify with the UserManager that the current user is a cimuser.

BUG#:3038
TITLE: Enable SSL poststarttests

DESCRIPTION:
Had to comment out a line in SecureBasicAuthenticator that had
gone in as part of Bug3820 and broken certificate authentication
on windows.  Opened a separate bug 3977 to address it.

BUG#: 3280
TITLE: Certificate based authentication should perform additional authentication checks

DESCRIPTION: Added a validateUser interface to the AuthenticationManager and Authenticator interfaces. Updated the Authentication handlers to implement the validateUser interface. Updated the PAM StandAlone Process to also support this interface. Updated the HTTPAuthenticatorDelegator to invoke the validateUser interface before setting the user name in the Identity Container during Certificate based authentication.

PEP#: 101
TITLE: AutoPtr Enhancement

DESCRIPTION: AutoPtr updates has been made

BUG#: 2656
TITLE: License statement update to 2005

DESCRIPTION: All .h, .cpp and the wql, cql, compile *.l and *.y files along
with the .java files in providermanager2/jmpi updated to use the license
statement in doc/license.txt
Tested on windows and visual test of all diffs.

BUG#: 2196
TITLE: Copyright update

DESCRIPTION: Update all .cpp and .h files for new license and
update the doc/license.txt file.  Note that there were also
a couple of files that had to be fixed because they had violated
the comments rules (ex. blank line at head of file or in the case of
xmlwriter.cpp a comment line //=========  which drove the strip
function nuts.  These were fixed.  This has been compiled and tested
on windows.

Bugzilla#1146
security fixes for z/OS only

PEP 55 Update license on source files to current license text and date

merge with 2.3 localized code

IBM-DR, PEP58, R2.3: I18N support

Bug 173: OS/400 fixes

HP-RK API Review: Change String::allocateCString() to getCString().

HP-RK Update license header.

HP-Nag: Modified CIM Server and Client API to lookup port number from services. CIM Server uses default port number (5988 for HTTP or 5989 for HTTPS) if no port number is configured and no port is specified in the configuration file. CIMClient's connectLocal() method is modified to try and connect to HTTP port, if failed then try and connect to HTTPS port.

HP-Nag: Implemented Server side Basic authentication handling code and cleaned up ATTN's in the authentication releated files. Implemented a new AuthenticationInfoRep class and modified the related files. Added more test cases to test the authentication classes.