CVS log for pegasus/src/Pegasus/Common/AuthenticationInfo.h
	Help

Request diff between arbitrary revisions

BUG#: 9948
TITLE: Reject HTTP cookies.

DESCRIPTION: We should reject any cookies that arrive through HTTP, without
encryption. These cookies are completelly ignored by the server.

BUG#: 9941
TITLE: Make the cookie session management optional.

DESCRIPTION: Introduce PEGASUS_ENABLE_SESSION_COOKIES to enable/disable session
management using cookies.

BUG#: 9892
TITLE: Implement cookie-based session management.

DESCRIPTION: PAM (and GSSAPI) are quite slow when doing authentication.
Therefore cookie-based authentication is implemented. It is off by default
and it must be explicitly turned on by setting httpSessionTimeout
configuration option to nozero value.

BUG#: 9883
TITLE: Implement HTTP Negotiate authentication

DESCRIPTION: Implemented HTTP Negotiate authentication, as described in
RFC 4559. It uses SPNEGO protocol, GSSAPI as authentication API and MIT
Kerberos as GSSAPI implementation. The implementation should be
interchangeable, any GSSAPI implementation should work.

BUG#: 9676
TITLE: TASK-PEP317_pullop-branch. Merge Out from head of tree

DESCRIPTION: Brings TASK-PEP317_pullop-branch into line with head of tree

BUG#: 9756
TITLE: build fails when PEGASUS_KERBEROS_AUTHENTICATION defined

DESCRIPTION:

PEP#: 317
TITLE: Update merge out from last 2.13.0.

DESCRIPTION: Sync with 2.13.0 just before release.  Note that we kept
the Development status.

BUG#:9641
TITLE: Allow remote update of expired user password for PAM session based authentication

DESCRIPTION:

BUG#: 9999
TITLE: TASK_317-Pull Operations update.

DESCRIPTION: This update brings this branch back in line with the current
head of tree and cleans up a number of outstanding issues in the code.  Note
That there are still a lot of outstanding issues being worked on.

BUG#:9643
TITLE: Role-based authorization extension for CMPI provider

DESCRIPTION:

BUG#:9642
TITLE: Remote session tracking through PAM mechanism in a common approach

DESCRIPTION:

BUG#:9482
TITLE: Cleanup unused parameters warnings in the pegcommon library and half of interal SLP API

DESCRIPTION:

BUG#: 8273
TITLE: Remove trailing space characters
DESCRIPTION: Remove meaningless whitespace.

BUG#: 8123
TITLE: Update copyright/license text

DESCRIPTION:

Fixing trailing spaces in copyright/license text

BUG#: 8123
TITLE: Update Coyright/License text

DESCRIPTION:

Adding the new copyright/license text to almost all files

BUG#: 7033
TITLE: Remove unused _checkRep methods
DESCRIPTION: Remove the class-specific _checkRep methods that were obsoleted by Bug 6758.

BUG#:6758
TITLE: Performance - avoid hit to performance due _checkRep

DESCRIPTION:

BUG#: 6800
TITLE: Use z/OS UNIX Domain socket ioctl() function for client verification instead of files

DESCRIPTION: Add zOS function to retrieve and process a userID from the UNIX Local Domain socket.

BUG#: 6037
TITLE: PEP 286 Privilege Separation
DESCRIPTION: Implement privilege separation for the CIM Server.  This allows the CIM Server to run without privilege, using a separate small process to perform privileged operations as necessary.

PEP#: 286
TITLE: Privilege Separation
DESCRIPTION: Reworked the local authentication logicso that the initial authentication is done by the executor and subsequent requests on the same connection are authenticated using cached data in the CIM Server.

BUG#: 6276
TITLE: AuthenticationInfo class needs to be cleaned up
DESCRIPTION: Removed AuthStatus enum and setters. Added members connectionAuthenticated, isConnectionAuthenticated and setConnectionAuthenticated.

PEP#: 286
TITLE: Privilege Separation

DESCRIPTION: Privilege Separation Rework

PEP#: 286
TITLE: Privilege Separation
DESCRIPTION: Merge PEP286_PRIVILEGE_SEPARATION_BRANCH into the HEAD.

BUG#: 6274
TITLE: AuthenticationInfo class needs to be cleaned up

DESCRIPTION: Removed AuthStatus enum and setters. Added members connectionAuthenticated, isConnectionAuthenticated and setConnectionAuthenticated.

BUG#: 6250
TITLE: AuthenticationInfo class needs to be cleaned up

DESCRIPTION: Removed AuthStatus enum and setters. Added members connectionAuthenticated, isConnectionAuthenticated and setConnectionAuthenticated.

BUG#: 6202
TITLE: The usage of terms challenge and secret needs to be consistent

DESCRIPTION: Updated the local authentication modules to use term secret instead of challenge

BUG#: 5971
TITLE: Remove unused code for LocalPrivileged authentication
DESCRIPTION: Remove the disabled logic for the defunct LocalPrivileged authentication mechanism.

PEP#: 286
TITLE: Privilege Separation

DESCRIPTION: Ongoing privilege separation work.

PEP#: 286
TITLE: Privilege Separation

DESCRIPTION: Ongoing privilege separation work.

BUG#: 5840
TITLE: Common modules do not meet chksrc requirements
DESCRIPTION: Remove tab characters and author names and shorten lines that are wider than 80 characters.

BUG#:5821
TITLE: Check enableRemotePrivilegedUserAccess before/at authentication

DESCRIPTION:

BUG#: 5819
TITLE: Common modules do not meet chksrc requirements
DESCRIPTION: Remove tab characters and author names and shorten lines that are wider than 80 characters.

BUG#: 5723
TITLE: PEP 258 IP address needs to be passed down to authentication modules

DESCRIPTION: Updated the AuthenticationInfo class to add ip address info.

BUG#: 5634
TITLE: PEP 259 SSL Certificate Management Command Interfaces - phase 4

DESCRIPTION: Removed export SSL connection code and config parameters exportSSLTrustStore and enableExportSSLClientVerification. Added cimcrl and cimtrust man pages. Updated SSL guidelines document.

PEP#: 233
TITLE: Updated Embedded Instance Support branch

DESCRIPTION:

- Merged with latest code from 2.5.1

- Modified ObjectNormalizer to use a CIMOMHandle instead of the repository and to normalize the instances in an embedded instance property.

BUG#: 4691
TITLE: Update Licenses to 2006

DESCRIPTION: Updates most of the licenses to 2006. The slp_client directories are excluded for the moment pending discussion. This change has passed unit and system tests.  Note that this changes just about EVERY file in Pegasus.

BUG#: 4598
TITLE: allow propagation of client cert chain as part of client auth info

DESCRIPTION:
Submitted proposed fix

BUG#: 2656
TITLE: License statement update to 2005

DESCRIPTION: All .h, .cpp and the wql, cql, compile *.l and *.y files along
with the .java files in providermanager2/jmpi updated to use the license
statement in doc/license.txt
Tested on windows and visual test of all diffs.

PEP#: 187
TITLE: SSL cert Mgmt Enhancements
USER: Heather Sterling
MAIL: hsterl@us.ibm.com

DESCRIPTION

Check in bulk of code, including Schema, CertificateProvider and changes to Common, Config, and Server files.

BUG#: 2196
TITLE: Copyright update

DESCRIPTION: Update all .cpp and .h files for new license and
update the doc/license.txt file.  Note that there were also
a couple of files that had to be fixed because they had violated
the comments rules (ex. blank line at head of file or in the case of
xmlwriter.cpp a comment line //=========  which drove the strip
function nuts.  These were fixed.  This has been compiled and tested
on windows.

PEP#: 165
TITLE: SSL client verification
USER: Heather Sterling
MAIL: hsterl@us.ibm.com

DESCRIPTION

Ballot 60 AuthenticationInfo changes

PEP#: 155
TITLE: HP[Nag] SSL client certificate verification for CIMExport requests

DESCRIPTION: Added SSL client certificate verification support for CIMExport requests received on the new export port. To enable this feature set the config property enableSSLExportClientVerification to true and specify the indication trust store using the config property exportSSLTrustStore. Username password authentication is not done and CIMOperation requests are not processed on the export port.

PEP#: 165
TITLE: SSL client verification
USER: Heather Sterling
MAIL: hsterl@us.ibm.com

DESCRIPTION

Adding SSL client verification support.
Build with PEGASUS_USE_SSL_CLIENT_VERIFICATION to enable the feature.

PEP#: 165
BRANCH: RELEASE_2_3_2-branch
TITLE: SSL client verification

DESCRIPTION

#ifdef'ing bugzilla 1319/PEP165 code
with PEGASUS_232_CLIENT_VERIFICATION flag

BUG#: 1319
TITLE: SSL client authentication not fully implemented

DESCRIPTION:

--adds support for SSL client verification
  via the enableSSLClientVerification flag

PEP 55 Update license on source files to current license text and date

Bug 745: OS/400 Authentication Changes

another merge with HEAD

HP-JS PEPs 78 and 79 ([WMI Mapper] Changes to the Authentication Process and Local Connection Enhancements).

Bug 419: OS/400 Authentication Enhancements

merge with 2.3 localized code

Bug 419: OS/400 Authentication Enhancements

Bug 419: OS/400 Authentication Enhancements

merged with STABLE branch

HP-RK API Review: Exception cleanup.  Replace UninitializedHandleException with UninitializedObjectException.

HP-RK API Review: Exception cleanup.  Renamed exceptions to end with -Exception.  Removed definitions of AddedReferenceToClass and TruncatedCharacter exceptions.  Changed exception messages to use 'invalid' rather than 'bad'.

HP-RK API Review: Changed includes of Exception.h to InternalException.h in Pegasus internal source files.

HP-[CAKG] API Review: removed ThrowUninitializedHandle and ThrowUninitializedObject methods

HP-[CAKG] Replace Config[platform] files with Linkage.h files

HP-RK Update license header.

HP-RK Renamed UnitializedHandle exception to UninitializedHandle.

HP-Nag: Implemented Server side Basic authentication handling code and cleaned up ATTN's in the authentication releated files. Implemented a new AuthenticationInfoRep class and modified the related files. Added more test cases to test the authentication classes.

SF-HP NB-HP Changed the authorizer to include checks for privileged user access.

deleted unused files

Merged dev branch into main trunk.

HP-NB Implemented Authentication code on the server to challenge requests, authenticate the challenge responses, and verify the subsequent authorized requests. Implemented authentication mechanism in the Client API to send responses to the challenges from the server. Current implementation supports only 'local' authentication mechanism. Authentication can be enabled by setting the config property 'requireAuthentication' to true.

file AuthenticationInfo.h was initially added on branch dev.