CVS log for pegasus/src/Pegasus/Config/SecurityPropertyOwner.cpp
	Help

Request diff between arbitrary revisions

BUG#: 9941
TITLE: Make the cookie session management optional.

DESCRIPTION: Introduce PEGASUS_ENABLE_SESSION_COOKIES to enable/disable session
management using cookies.

BUG#: 9892
TITLE: Implement cookie-based session management.

DESCRIPTION: PAM (and GSSAPI) are quite slow when doing authentication.
Therefore cookie-based authentication is implemented. It is off by default
and it must be explicitly turned on by setting httpSessionTimeout
configuration option to nozero value.

BUG#: 9883
TITLE: Implement HTTP Negotiate authentication

DESCRIPTION: Implemented HTTP Negotiate authentication, as described in
RFC 4559. It uses SPNEGO protocol, GSSAPI as authentication API and MIT
Kerberos as GSSAPI implementation. The implementation should be
interchangeable, any GSSAPI implementation should work.

BUG#: 9756
TITLE: build fails when PEGASUS_KERBEROS_AUTHENTICATION defined

DESCRIPTION:

BUG#: 9601

TITLE: Support only TLSv1.2 protocol for security compilance

DESCRIPTION:

BUG#: 9456
TITLE: Error from bug 5796. Does not include supplemental help info

DESCRIPTION: Fixed issues from this bug, added missing config property
help and matched the config property help to the rpm man file.  Note
that there are still differences in that we use terser wording in the
help and sometimes only include a shorter definition.  The cimconfig
-H is NOT a replacement for the man data.

BUG#:9466
TITLE: ConfigExceptions definitions included all across server code

DESCRIPTION:

BUG#: 5796
TITLE: Enhance cimconfig to provide help on the config properties

DESCRIPTION: Extended config infrastructure to support help property per
config property and added ConfigPropertyHelp.* with message text for
each defined property.

BUG#: 9199

TITLE:Performance: Optimization of cimconfig code

DESCRIPTION:

BUG#: 8952
TITLE:  Support configurable cipher suite in Pegasus
DESCRIPTION: Added support for configuring cipher suites

BUG#: 8568
TITLE: Customized properties for IBM i platform
DESCRIPTION: Added Customized config properties for IBM i platform

BUG#: 8513
TITLE: enhance cimconfig command to take timeout option
DESCRIPTION: Added timeout option

BUG#: 8406
TITLE: Zero Server restart for enableIndicationService changes
DESCRIPTION: Made enableIndicationService config property dynamic by allowing IndicationService state changes using CIM_EnabledLogicalElement.RequestStateChange() method.

BUG#: 8470
TITLE: Inconsistency in checking the configuration property names and their values

BUG#: 8331
TITLE: Domain fields in ConfigPropertyRow are not used
DESCRIPTION: Remove the unused fields.

BUG#: 8273
TITLE: Remove trailing space characters
DESCRIPTION: Remove meaningless whitespace.

BUG#: 8123
TITLE: Update copyright/license text

DESCRIPTION:

Fixing trailing spaces in copyright/license text

BUG#: 8123
TITLE: Update Coyright/License text

DESCRIPTION:

Adding the new copyright/license text to almost all files

BUG#:8082
TITLE:PASE: server config property change

DESCRIPTION: commit approved patch.

BUG#: 7068
TITLE: zOS CIM server must support validation of PassTickets using a unique Application ID.

DESCRIPTION: Enabel CIM Server setting applicaton ID.

BUG#: 7068
TITLE: zOS CIM server must support validation of PassTickets using a unique Application ID.

DESCRIPTION: Pulling patch back dueto missing #endif

BUG#: 7068
TITLE: zOS CIM server must support validation of PassTickets using a unique Application ID.

DESCRIPTION: Add support of unique APPLID to system login.

BUG#:6530
PEP#:284
TITLE: PEP 284 - Port Pegasus to i5/PASE platform: Step two, add PASE default configuration

DESCRIPTION: PEP 284 - Port Pegasus to i5/PASE platform: Step two, add PASE default configuration

BUG#:5739
PEP#:284
TITLE: remove OS400 code

DESCRIPTION: Port Pegasus to i5/PASE platform: Step one, remove obsolete OS400 code

BUG#: 5850
TITLE: Source files do not meet chksrc requirements
DESCRIPTION: Remove tab characters and author names and shorten lines that are wider than 80 characters.

BUG#: 5634
TITLE: PEP 259 SSL Certificate Management Command Interfaces - phase 4

DESCRIPTION: Removed export SSL connection code and config parameters exportSSLTrustStore and enableExportSSLClientVerification. Added cimcrl and cimtrust man pages. Updated SSL guidelines document.

BUG#: 5345

TITLE: z/OS SSL configuration porperties should not be visible to user/administrator

DESCRIPTION:  Checked in as approved.

BUG#:5271
TITLE: zOS - update defaults for enableRemotePrivilegedUserAccess & enableBinaryRepository

DESCRIPTION:

BUG#: 4878
TITLE: Allow SSL CRL functionality to be optionally disabled

DESCRIPTION: Added a build-time configuration setting PEGASUS_ENABLE_SSL_CRL_VERIFICATION. Updated the ssltrustmgr, CertificateProvider, Config and SSLContext components.

BUG#: 4691
TITLE: Update Licenses to 2006

DESCRIPTION: Updates most of the licenses to 2006. The slp_client directories are excluded for the moment pending discussion. This change has passed unit and system tests.  Note that this changes just about EVERY file in Pegasus.

BUG#: 3613
TITLE: ConfigPropertyOwner methods should be declared const

DESCRIPTION: Fixed as proposed

BUG#:3613
TITLE: ConfigPropertyOwner methods should be declared const
DESCRIPTION: Fixed.

BUG#: 3614
TITLE: ConfigPropertyOwner methods should return object

DESCRIPTION: Fixed as proposed

BUG#:2742

TITLE: os400 updates to SecurityPropertyOwner.cpp and LogPropertyOwner.cpp

DESCRIPTION: os400 updates to SecurityPropertyOwner.cpp and LogPropertyOwner.cpp

BUG#:2742

TITLE: Config property changes for OS400

DESCRIPTION: Config property changes for OS400

PEP#: 187
TITLE: SSL Certificate Management Enhancements

DESCRIPTION: Updated SecurityPropertyOwner to have the default values for the trust store and crl store and updated the Server/Makefile to create trust and crl directories.

BUG#: 2656
TITLE: License statement update to 2005

DESCRIPTION: All .h, .cpp and the wql, cql, compile *.l and *.y files along
with the .java files in providermanager2/jmpi updated to use the license
statement in doc/license.txt
Tested on windows and visual test of all diffs.

BUG#: 1429
TITLE: Document configuration options

DESCRIPTION:

PEP#: 187
TITLE: SSL cert Mgmt Enhancements
USER: Heather Sterling
MAIL: hsterl@us.ibm.com

DESCRIPTION

Check in bulk of code, including Schema, CertificateProvider and changes to Common, Config, and Server files.

BUG#: 2196
TITLE: Copyright update

DESCRIPTION: Update all .cpp and .h files for new license and
update the doc/license.txt file.  Note that there were also
a couple of files that had to be fixed because they had violated
the comments rules (ex. blank line at head of file or in the case of
xmlwriter.cpp a comment line //=========  which drove the strip
function nuts.  These were fixed.  This has been compiled and tested
on windows.

BUG#: 2115
TITLE: Update Release Configuration Options to be consistent with PEP 174

DESCRIPTION: Modified release configuration options to be consistent with PEP 174.

BUG#: 2072
TITLE: homed paths should be used on SSL files in SecurityPropertyOwner::isValid

DESCRIPTION:

Using ConfigManager::getHomedPath() so that file paths relative to PEGASUS_HOME work
and do not throw configuration errors during server startup.

BUG#: 2072
TITLE: homed paths should be used on SSL files in SecurityPropertyOwner::isValid

DESCRIPTION:

Using ConfigManager::getHomedPath() so that file paths relative to PEGASUS_HOME work
and do not throw configuration errors during server startup.

BUG#: 1136
TITLE: HP [CAKG] Incorrect default value for enableSubscriptionsForNonprivilegedUsers configuration property

DESCRIPTION: Applied the 2.3.2 fix to the 2.4 branch.

PEP#: 165
TITLE: SSL client verification
USER: Heather Sterling
MAIL: hsterl@us.ibm.com

DESCRIPTION

Ballot 60 changes

PEP#: 165
TITLE: SSL client verification
USER: Heather Sterling
MAIL: hsterl@us.ibm.com

DESCRIPTION

Ballot 60 changes

PEP#: 165
TITLE: SSL client verification
USER: Heather Sterling
MAIL: hsterl@us.ibm.com

DESCRIPTION

Change default sslTrustStore from "none" to ""

BUG#: 1571
TITLE: HP[Nag] Use getHomedPath() when using the config properties passwordFilePath, sslCertificateFilePath and sslKeyFilePath

DESCRIPTION: Updated the code not to prepend PegasusHome during the initialization of these config properties, instead getHomedPath() is used at places where these properties are used.

PEP#: 155
TITLE: HP[Nag] SSL Export Client Certificate Verification

DESCRIPTION: Modified the code to allow 'exportSSLTrustStore' config property to be set to empty when 'enableSSLExportClientCertificate' property is set to false. If it is set to empty when 'enableSSLExportClientCertificate' property is set to true, a log message is generated during cimserver start up  and the cimserver will abort.

PEP#:101
TITLE: AutoPtr enhancements
DESCRIPTION: Plz refer PEP101 for details.

PEP#: 142
TITLE: HP[Nag] User Groups based authorization

DESCRIPTION: Added user groups based authorization support to Pegasus. This is an additional authorization mechanism that gives an administrator a simple, overriding control over which users may perform CIM operations. To enable this feature, define the compile time flag PEGASUS_ENABLE_USERGROUP_AUTHORIZATION and set the config property authorizedUserGroups to one or more valid user groups on the system. (This feature is not fully implemented on Windows, just a skeleton is defined for isGroupMember() function in systemWindows.cpp file.)

PEP#: 155
TITLE: HP[Nag] SSL client certificate verification for CIMExport requests

DESCRIPTION: Added SSL client certificate verification support for CIMExport requests received on the new export port. To enable this feature set the config property enableSSLExportClientVerification to true and specify the indication trust store using the config property exportSSLTrustStore. Username password authentication is not done and CIMOperation requests are not processed on the export port.

PEP#: 165
TITLE: SSL client verification
USER: Heather Sterling
MAIL: hsterl@us.ibm.com

DESCRIPTION

Adding SSL client verification support.
Build with PEGASUS_USE_SSL_CLIENT_VERIFICATION to enable the feature.

BUG#: 1426
BRANCH: 2.4
TITLE: SSL config properties not validated correctly

DESCRIPTION

In isValid() function in SecurityPropertyOwner.cpp,
there is a bug in validating the certificate and key paths.
Due to a logic error, the bug allows non-existent files
to be validated for sslKeyFilePath and sslTrustFilePath.

BUG#: 1426
BRANCH: 2.4
TITLE: SSL config properties not validated correctly

DESCRIPTION

In isValid() function in SecurityPropertyOwner.cpp,
there is a bug in validating the certificate and key paths.
Due to a logic error, the bug allows non-existent files
to be validated for sslKeyFilePath and sslTrustFilePath.

BUG#: 1359
TITLE: [HP-SF] usePAMAuthentication config property is obsolete

DESCRIPTION: The addition of the Stand-alone PAM process (see Bug 1255) obsoletes the requirement of the Configuration property usePAMAuthentication and the method PAMBasicAuthenticator::_authenticateByPwnam containing system password-based authentication logic.

PEP#: 144
TITLE: HP[WO] SLES9 Options

DESCRIPTION: Recommended OpenPegasus build, package, test and runtime options for SLES 9

Bug 1145: OS/400 Specific Changes

IBM:DR BUG[951] Setting up default and fixed properties for OS400

PEP 55 Update license on source files to current license text and date

IBM-DR: BUG505: Minor OS400 Porting changes

HP-[DME] Bugzilla 819 - No authorization required to create subscriptions.

HP-Nag: Bug:202 - Made changes to certificate file paths for HP-UX to use shared certificate directory.

Bug 419: OS/400 Authentication Enhancements

SF-HP PEP 85: Configuration property table enhancement. Bug 202: HP-UX only : Updated default value of enableRemotePrivilegedUserAccess=true.

HP-Nag: PEP60 - Added SSL support for CIM/XML Indications delivery using ExportClient. Defined a new config property 'sslTrustFilePath' to specify certificate trust store on the CIM Server.

HP-Nag: PEP-74 - Made enhancements to SSLCertificateInfo class to provide more information from X509 certificate to the callback function. Modified SSLContext to take cert file and key file as two seperate parameters. Added a new config property 'sslKeyFilePath' and modified CIMServer to pass cert file and key file paths to SSLContext.

HP-Nag: Undone the changes made for the earlier version (Modified Config files to allow setting or unsetting the enableHttpConnection and enableHttpsConnection properties in a mutually-exclusive way based on a compile time flag).

HP-Nag: Modified Config files to allow setting or unsetting the enableHttpConnection and enableHttpsConnection properties in a mutually-exclusive way based on a compile time flag.

YZ-HP: Added a functionality which allows user to config using either PAM or system function getpwnam to verify a user.

HP-RK API Review: Remove String::operator+= methods.

HP-RK Remove unnecessary use of String::getData().

HP-RK Update license header.

HP-[Bapu Patil] added sslCertificateFilePath property

HP-Nag: Added config properties 'enableHttpConnection' and 'enableHttpsConnection', renamed 'requireAuthentication' to 'enableAuthentication' and 'requireAuthorization' to 'enableNamespaceAuthorization'. Removed few ATTN's in Authentication code.

HP-SF: Fixed the problem where GetInstance on a derived class was returning incorrect ClassOrigin for the base class properties. Updated the GetFilter response files to reflect the change. Fixed ATTN in PasswordFile.cpp. The SecurityPropertyOwner now checks for passwordFile= condition.

HP-RK Restructured the configuration property owners to remove redundant code.

HP-RK Overhauled the configuration property unset functionality.

SF-HP NB-HP Changed the authorizer to include checks for privileged user access.

SF-HP Modified cimserver and ConfigManager to add config properties for PEGASUS_HOME dependent directory paths. Added function getHomedPath() to return paths based on PEGASUS_HOME

HP-SF: Added mutex locks and a few minor changes to the User Manager and User Manager Provider. Added a configurable property passwordFilePath to specify the location of the password file.

Merged dev branch into main trunk.

file SecurityPropertyOwner.cpp was initially added on branch dev.