CVS log for pegasus/src/Pegasus/Config/SecurityPropertyOwner.h
	Help

Request diff between arbitrary revisions

BUG#: 9941
TITLE: Make the cookie session management optional.

DESCRIPTION: Introduce PEGASUS_ENABLE_SESSION_COOKIES to enable/disable session
management using cookies.

BUG#: 9892
TITLE: Implement cookie-based session management.

DESCRIPTION: PAM (and GSSAPI) are quite slow when doing authentication.
Therefore cookie-based authentication is implemented. It is off by default
and it must be explicitly turned on by setting httpSessionTimeout
configuration option to nozero value.

BUG#: 9883
TITLE: Implement HTTP Negotiate authentication

DESCRIPTION: Implemented HTTP Negotiate authentication, as described in
RFC 4559. It uses SPNEGO protocol, GSSAPI as authentication API and MIT
Kerberos as GSSAPI implementation. The implementation should be
interchangeable, any GSSAPI implementation should work.

BUG#: 9676
TITLE: TASK-PEP317_pullop-branch. Merge Out from head of tree

DESCRIPTION: Brings TASK-PEP317_pullop-branch into line with head of tree

BUG#: 9756
TITLE: build fails when PEGASUS_KERBEROS_AUTHENTICATION defined

DESCRIPTION:

PEP#: 317
TITLE: PEP 317, Pull Operations mergeout and code cleanup.

DESCRIPTION: No new functionality added but cleaned up a number of issues.
Merged out up to 25 August. Note that most functions run today except for
OpenExecQuery which is not tested.  See the readme.pulloperations for more
details

PEP#: 362
TITLE: Syncing up with head of CVS

DESCRIPTION:

PEP#: 362
TITLE: Syncing up with head of CVS

DESCRIPTION:

BUG#: 9601

TITLE: Support only TLSv1.2 protocol for security compilance

DESCRIPTION:

BUG#: 9999
TITLE: TASK_317-Pull Operations update.

DESCRIPTION: This update brings this branch back in line with the current
head of tree and cleans up a number of outstanding issues in the code.  Note
That there are still a lot of outstanding issues being worked on.

BUG#: 9456
TITLE: Error from bug 5796. Does not include supplemental help info

DESCRIPTION: Fixed issues from this bug, added missing config property
help and matched the config property help to the rpm man file.  Note
that there are still differences in that we use terser wording in the
help and sometimes only include a shorter definition.  The cimconfig
-H is NOT a replacement for the man data.

BUG#: 5796
TITLE: Enhance cimconfig to provide help on the config properties

DESCRIPTION: Extended config infrastructure to support help property per
config property and added ConfigPropertyHelp.* with message text for
each defined property.

BUG#: 9999
TITLE: Merge out head to Task-PEP317 branch using Task Makefile

DESCRIPTION:  Update this working branch to Pegasus Head of Tree as of
about 8 Oct 2011

BUG#: 8952
TITLE:  Support configurable cipher suite in Pegasus
DESCRIPTION: Added support for configuring cipher suites

BUG#: 8513
TITLE: enhance cimconfig command to take timeout option
DESCRIPTION: Added timeout option

BUG#: 8406
TITLE: Zero Server restart for enableIndicationService changes
DESCRIPTION: Made enableIndicationService config property dynamic by allowing IndicationService state changes using CIM_EnabledLogicalElement.RequestStateChange() method.

BUG#: 8123
TITLE: Update copyright/license text

DESCRIPTION:

Fixing trailing spaces in copyright/license text

BUG#: 8123
TITLE: Update Coyright/License text

DESCRIPTION:

Adding the new copyright/license text to almost all files

BUG#: 3482
TITLE: More documentation problems
DESCRIPTION: Fix doc++/doxygen errors.

BUG#: 7084
TITLE: zOS CIM server must support validation of PassTickets using a unique Application ID.(2.6)

DESCRIPTION: Enabel CIM Server setting applicaton ID.

BUG#: 7083
TITLE: zOS CIM server must support validation of PassTickets using a unique Application ID.(2.7)

DESCRIPTION: Enabel CIM Server setting applicaton ID.

BUG#: 7068
TITLE: zOS CIM server must support validation of PassTickets using a unique Application ID.

DESCRIPTION: Enabel CIM Server setting applicaton ID.

BUG#: 7068
TITLE: zOS CIM server must support validation of PassTickets using a unique Application ID.

DESCRIPTION: Pulling patch back dueto missing #endif

BUG#: 7068
TITLE: zOS CIM server must support validation of PassTickets using a unique Application ID.

DESCRIPTION: Add support of unique APPLID to system login.

BUG#: 5850
TITLE: Source files do not meet chksrc requirements
DESCRIPTION: Remove tab characters and author names and shorten lines that are wider than 80 characters.

BUG#: 5634
TITLE: PEP 259 SSL Certificate Management Command Interfaces - phase 4

DESCRIPTION: Removed export SSL connection code and config parameters exportSSLTrustStore and enableExportSSLClientVerification. Added cimcrl and cimtrust man pages. Updated SSL guidelines document.

PEP#: 233
TITLE: Updated Embedded Instance Support branch

DESCRIPTION:

- Merged with latest code from 2.5.1

- Modified ObjectNormalizer to use a CIMOMHandle instead of the repository and to normalize the instances in an embedded instance property.

BUG#: 4691
TITLE: Update Licenses to 2006

DESCRIPTION: Updates most of the licenses to 2006. The slp_client directories are excluded for the moment pending discussion. This change has passed unit and system tests.  Note that this changes just about EVERY file in Pegasus.

BUG#: 3613
TITLE: ConfigPropertyOwner methods should be declared const

DESCRIPTION: Fixed as proposed

BUG#:3613
TITLE: ConfigPropertyOwner methods should be declared const
DESCRIPTION: Fixed.

BUG#: 2182
TITLE: Removed commented out exception specification.

DESCRIPTION: Don't want anyone getting the bright idea to uncomment it.

BUG#: 3614
TITLE: ConfigPropertyOwner methods should return object

DESCRIPTION: Fixed as proposed

BUG#: 2656
TITLE: License statement update to 2005

DESCRIPTION: All .h, .cpp and the wql, cql, compile *.l and *.y files along
with the .java files in providermanager2/jmpi updated to use the license
statement in doc/license.txt
Tested on windows and visual test of all diffs.

PEP#: 187
TITLE: SSL cert Mgmt Enhancements
USER: Heather Sterling
MAIL: hsterl@us.ibm.com

DESCRIPTION

Check in bulk of code, including Schema, CertificateProvider and changes to Common, Config, and Server files.

BUG#: 2196
TITLE: Copyright update

DESCRIPTION: Update all .cpp and .h files for new license and
update the doc/license.txt file.  Note that there were also
a couple of files that had to be fixed because they had violated
the comments rules (ex. blank line at head of file or in the case of
xmlwriter.cpp a comment line //=========  which drove the strip
function nuts.  These were fixed.  This has been compiled and tested
on windows.

PEP#: 165
TITLE: SSL client verification
USER: Heather Sterling
MAIL: hsterl@us.ibm.com

DESCRIPTION

Ballot 60 changes

PEP#:101
TITLE: AutoPtr enhancements
DESCRIPTION: Plz refer PEP101 for details.

PEP#: 142
TITLE: HP[Nag] User Groups based authorization

DESCRIPTION: Added user groups based authorization support to Pegasus. This is an additional authorization mechanism that gives an administrator a simple, overriding control over which users may perform CIM operations. To enable this feature, define the compile time flag PEGASUS_ENABLE_USERGROUP_AUTHORIZATION and set the config property authorizedUserGroups to one or more valid user groups on the system. (This feature is not fully implemented on Windows, just a skeleton is defined for isGroupMember() function in systemWindows.cpp file.)

PEP#: 155
TITLE: HP[Nag] SSL client certificate verification for CIMExport requests

DESCRIPTION: Added SSL client certificate verification support for CIMExport requests received on the new export port. To enable this feature set the config property enableSSLExportClientVerification to true and specify the indication trust store using the config property exportSSLTrustStore. Username password authentication is not done and CIMOperation requests are not processed on the export port.

PEP#: 165
TITLE: SSL client verification
USER: Heather Sterling
MAIL: hsterl@us.ibm.com

DESCRIPTION

Adding SSL client verification support.
Build with PEGASUS_USE_SSL_CLIENT_VERIFICATION to enable the feature.

BUG#: 1359
TITLE: [HP-SF] usePAMAuthentication config property is obsolete

DESCRIPTION: The addition of the Stand-alone PAM process (see Bug 1255) obsoletes the requirement of the Configuration property usePAMAuthentication and the method PAMBasicAuthenticator::_authenticateByPwnam containing system password-based authentication logic.

PEP#: 165
BRANCH: RELEASE_2_3_2-branch
TITLE: SSL client verification

DESCRIPTION

#ifdef'ing bugzilla 1319/PEP165 code
with PEGASUS_232_CLIENT_VERIFICATION flag

BUG#: 1359
TITLE: [HP-SF,NB] usePAMAuthentication config property is obsolete

DESCRIPTION: The addition of the Stand-alone PAM process (see Bug 1255) obsoletes the requirement of the Configuration property usePAMAuthentication and the method PAMBasicAuthenticator::_authenticateByPwnam containing system password-based authentication logic.

BUG#: 1319
TITLE: SSL client authentication not fully implemented

DESCRIPTION:

--adds support for SSL client verification
  via the enableSSLClientVerification flag

PEP 55 Update license on source files to current license text and date

HP-[DME] Bugzilla 819 - No authorization required to create subscriptions.

merge with 2.3 localized code

Bug 419: OS/400 Authentication Enhancements

g10n changes merged

HP-Nag: PEP60 - Added SSL support for CIM/XML Indications delivery using ExportClient. Defined a new config property 'sslTrustFilePath' to specify certificate trust store on the CIM Server.

HP-Nag: PEP-74 - Made enhancements to SSLCertificateInfo class to provide more information from X509 certificate to the callback function. Modified SSLContext to take cert file and key file as two seperate parameters. Added a new config property 'sslKeyFilePath' and modified CIMServer to pass cert file and key file paths to SSLContext.

merge changes from production tree

HP-Nag: Undone the changes made for the earlier version (Modified Config files to allow setting or unsetting the enableHttpConnection and enableHttpsConnection properties in a mutually-exclusive way based on a compile time flag).

HP-Nag: Modified Config files to allow setting or unsetting the enableHttpConnection and enableHttpsConnection properties in a mutually-exclusive way based on a compile time flag.

added localPrivilegedOnly security configuration parameter

YZ-HP: Added a functionality which allows user to config using either PAM or system function getpwnam to verify a user.

HP-RK Update license header.

HP-[Bapu Patil] added sslCertificateFilePath property

HP-Nag: Added config properties 'enableHttpConnection' and 'enableHttpsConnection', renamed 'requireAuthentication' to 'enableAuthentication' and 'requireAuthorization' to 'enableNamespaceAuthorization'. Removed few ATTN's in Authentication code.

HP-RK Restructured the configuration property owners to remove redundant code.

SF-HP NB-HP Changed the authorizer to include checks for privileged user access.

HP-SF: Added mutex locks and a few minor changes to the User Manager and User Manager Provider. Added a configurable property passwordFilePath to specify the location of the password file.

Merged dev branch into main trunk.

HP-NB, HP-SF: Implemented the Security components for authentication and authorization.

HP-NB Implemented Authentication code on the server to challenge requests, authenticate the challenge responses, and verify the subsequent authorized requests. Implemented authentication mechanism in the Client API to send responses to the challenges from the server. Current implementation supports only 'local' authentication mechanism. Authentication can be enabled by setting the config property 'requireAuthentication' to true.

file SecurityPropertyOwner.h was initially added on branch dev.