CVS log for pegasus/src/Pegasus/Server/HTTPAuthenticatorDelegator.cpp
	Help

Request diff between arbitrary revisions

BUG#: 9948
TITLE: Reject HTTP cookies.

DESCRIPTION: We should reject any cookies that arrive through HTTP, without
encryption. These cookies are completelly ignored by the server.

BUG#: 9941
TITLE: Make the cookie session management optional.

DESCRIPTION: Introduce PEGASUS_ENABLE_SESSION_COOKIES to enable/disable session
management using cookies.

BUG#: 9892
TITLE: Implement cookie-based session management.

DESCRIPTION: PAM (and GSSAPI) are quite slow when doing authentication.
Therefore cookie-based authentication is implemented. It is off by default
and it must be explicitly turned on by setting httpSessionTimeout
configuration option to nozero value.

BUG#: 9883
TITLE: Implement HTTP Negotiate authentication

DESCRIPTION: Implemented HTTP Negotiate authentication, as described in
RFC 4559. It uses SPNEGO protocol, GSSAPI as authentication API and MIT
Kerberos as GSSAPI implementation. The implementation should be
interchangeable, any GSSAPI implementation should work.

BUG#: 9756
TITLE: build fails when PEGASUS_KERBEROS_AUTHENTICATION defined

DESCRIPTION:

BUG#: 9219

TITLE:Infrastructure for a web based administration interface

DESCRIPTION:

BUG#:9641
TITLE: Allow remote update of expired user password for PAM session based authentication

DESCRIPTION:

BUG#:9639
TITLE: Many PAM errors are not reported correctly

DESCRIPTION:

BUG#:9642
TITLE: Remote session tracking through PAM mechanism in a common approach

DESCRIPTION:

BUG#:9374
TITLE: Restrict number of elements read from a request

DESCRIPTION:

BUG#: 8576
TITLE: Enhance Authentication failure error messages with client IP.
DESCRIPTION: updated the authentication failures trace and logger message with client IP address.

BUG#: 8567
TITLE: The client side hang on when the server side fails to reallocate memory
DESCRIPTION: Server closes the connection and logs a message when out-of-memory error occurs during response encoding/aggregation or request handling.

BUG#: 8440
TITLE: Certain classes in OpenPegasus code can be MessageQueues instead of MessageQueueService.
DESCRIPTION: Some classes in OP have been derived from MessageQueueService when they are not using any of the asynchronous features provided by MessageQueueService. These classes have been converted to MessageQueues.

BUG#: 8278
TITLE: HTTP headers are unnecessarily converted to Strings
DESCRIPTION: Process HTTP header names and values as character strings where feasible.

BUG#: 8273
TITLE: Remove trailing space characters
DESCRIPTION: Remove meaningless whitespace.

BUG#: 8123
TITLE: Update copyright/license text

DESCRIPTION:

Fixing trailing spaces in copyright/license text

BUG#: 8123
TITLE: Update Coyright/License text

DESCRIPTION:

Adding the new copyright/license text to almost all files

BUG#: 8018
TITLE: Performance improvement of Tracer

DESCRIPTION: Re-work _traceComponentMask to a 64Bit mask.

BUG#: 7854
TITLE: PEP# 316 - Replace PEG_TRACE_STRING with PEG_TRACE

DESCRIPTION: Replace PEG_TRACE_STRING with PEG_TRACE

BUG#: 7830
TITLE: Logger::put_l should use MessageLoaderParms
DESCRIPTION: Use a MessageLoaderParms parameter in localizable logging calls.

BUG#: 7770
TITLE: Arguments are incompatible with corresponding format string conversions
DESCRIPTION: Match printf and scanf conversion formats with corresponding argument types.

BUG#:7721
TITLE: Trace Level checking - first block - Pegasus/Server

DESCRIPTION:

BUG#:7651
TITLE: PEP#315 - Improve Trc&Log - Fix TBD-7646

DESCRIPTION:

BUG#:7645
TITLE: PEP#315 - Improve Trc&Log - Remove Logger::TRACE

DESCRIPTION:

BUG#: 7610
TITLE: PEP 311 WS-Management Support in CIM Server
DESCRIPTION: Implement WS-Management protocol for WS-Transfer operations.

BUG#: 7512
TITLE: HTTPAuthenticatorDelegator has improper formatting
DESCRIPTION: Clean up the formatting.

BUG#: 7238
TITLE: Move thread language logic from Message to CIMMessage
DESCRIPTION: Clean up the Message class, move language logic to CIMMessage, and clean up the Thread::setLanguage logic.

BUG#: 7162
TITLE: Memory leak on x86_64 linux OS (ver2.6.9-42).
DESCRIPTION: Unhandled exceptions in HTTPAuthenticatorDelegator caused a leak of HTTPMessage objects allocated in HTTPConnection::_handleReadEvent().

BUG#: 7174
TITLE: For local authentication remote privileged user check has to be suppressed.

DESCRIPTION: Remove check by setting setRemotePrivilegedUserAccessChecked()

BUG#: 6837
TITLE: z/OS Incorrect logic in HTTPAuthenticatorDelegator + Additional audit-logs.

DESCRIPTION: Change the logic and add the audit logs.

BUG#: 6800
TITLE: Use z/OS UNIX Domain socket ioctl() function for client verification instead of files

DESCRIPTION: Add zOS function to retrieve and process a userID from the UNIX Local Domain socket.

BUG#: 6381
TITLE: PEP 258 Certificate based authentication audit logging

DESCRIPTION: Updated SSLSocket and SSLCallbackInfo to pass IP address to the SSL callback. Added audit interfaces and audit log calls for logging Certificate based authentication and user validation attempts.

BUG#: 6306
TITLE: Initialization of String objects to String::EMPTY is unnecessary
DESCRIPTION: Remove redundant object initializations.

BUG#: 6288
TITLE: Unnecessary null-termination of Buffers
DESCRIPTION: Remove leftover appending of Buffer null-terminator characters.

BUG#: 6291
TITLE: HTTPAuthenticatorDelegator KERBEROS authentication block needs to be updated

DESCRIPTION: Fixed variable name in the KERBEROS block.

BUG#: 6269
TITLE: Race condition in HTTPConnection cleanup
DESCRIPTION: Correct the _responsePending logic to prevent an HTTPConnection from getting cleaned up while a response is outstanding.

BUG#: 6250
TITLE: AuthenticationInfo class needs to be cleaned up

DESCRIPTION: Removed AuthStatus enum and setters. Added members connectionAuthenticated, isConnectionAuthenticated and setConnectionAuthenticated.

BUG#:6207
TITLE: Performance - make OpenPegasus use its more efficent Trace macros

DESCRIPTION:

BUG#: 6056
TITLE: Authorization failure messages should include username

DESCRIPTION: Updated the related messages to include username. Updated the tests.

BUG#: 5850
TITLE: Source files do not meet chksrc requirements
DESCRIPTION: Remove tab characters and author names and shorten lines that are wider than 80 characters.

BUG#:5821
TITLE: Check enableRemotePrivilegedUserAccess before/at authentication

DESCRIPTION:

BUG#: 5634
TITLE: PEP 259 SSL Certificate Management Command Interfaces - phase 4

DESCRIPTION: Removed export SSL connection code and config parameters exportSSLTrustStore and enableExportSSLClientVerification. Added cimcrl and cimtrust man pages. Updated SSL guidelines document.

BUG#: 5351
TITLE: Inconsistent interpretation of boolean type configuration values
DESCRIPTION: Use a case-insensitive interpretation for all boolean configuration values.

BUG#: 5327
TITLE: PEP 259 SSL Certificate Management Command Interfaces - phase 1

DESCRIPTION: Updated the Certificate Provider, HTTPAuthenticator and PG_SSLCertificate MOF to incorporate changes as per PEP 259. Added the new cimtrust CLI and unit tests.

BUG#: 4870
TITLE: cimserver does not shutdown normally after running ssltrustmgr tests
DESCRIPTION: Eliminated a code path that sends duplicate responses from the logic that validates the user name associated with a certificate.

BUG#: 4691
TITLE: Update Licenses to 2006

DESCRIPTION: Updates most of the licenses to 2006. The slp_client directories are excluded for the moment pending discussion. This change has passed unit and system tests.  Note that this changes just about EVERY file in Pegasus.

BUG#: 4644
TITLE: ContentLanguages and AcceptLanguages classes should be named ContentLanguageList and AcceptLanguageList
DESCRIPTION: Rename the ContentLanguages and AcceptLanguages classes to ContentLanguageList and AcceptLanguageList to indicate that they are not specific to the HTTP protocol.

BUG#: 4635
TITLE: Allow addition of certificates that do not have an associated username

DESCRIPTION: Submitted proposed fix. Added ssltrustmgr tests. Fixed a typo in HTTPAuthenticatorDelegator.

BUG#: 4598
TITLE: allow propagation of client cert chain as part of client auth info

DESCRIPTION:
Submitted proposed fix

BUG#: 4594
TITLE: Language interface problems
DESCRIPTION: Rework the language interfaces to move toward protocol independence and to address problems with the interfaces and their behavior.

BUG#: 4425

TITLE: Kerberos functional correction

DESCRIPTION: Kerberos was broken by previous changes.  Affected code was moved back to appropriate locations.

BUG#: 4506
TITLE: Tracing/Logging performance

DESCRIPTION: Removed gratuitous construction of temporary string object assocition with tracing and logging.

BUG#: 4500
TITLE: User name not set in Identity Context passed to Indication Consumer

DESCRIPTION: Modified code to pass authenticated system user name to the Indication Consumer. Submission includes modifications to TestIndicationStressTest to allow testing of this functionality.

BUG#: 4307
TITLE: Buffer class optimization

DESCRIPTION: New Buffer class and usage.

BUG#:4053
TITLE:certificate provider cannot handle some hex serial numbers

DESCRIPTION:
Submit approved fix

BUG#: 2290
TITLE: pegasus should honor HTTP header  'Connection: Close'


DESCRIPTION:
  Modified code for both the Server and the Client to
  handle a "Connection: Close" header.

BUG#: 3985
TITLE: HTTPAuthenticatorDelegator - Declaration is not qualifier compatible
DESCRIPTION: Sync up the _validateUser signature in the method declaration and definition.

BUG#: 3280
TITLE: Certificate based authentication should perform additional authentication checks

DESCRIPTION: Added a validateUser interface to the AuthenticationManager and Authenticator interfaces. Updated the Authentication handlers to implement the validateUser interface. Updated the PAM StandAlone Process to also support this interface. Updated the HTTPAuthenticatorDelegator to invoke the validateUser interface before setting the user name in the Identity Container during Certificate based authentication.

BUG#:2930
TITLE: HTTPAuthenticatorDelegator needs to load sslTrustStore as homed path

Changed to :

String trustStore = configManager->getCurrentValue("sslTrustStore");
if (FileSystem::isDirectory(ConfigManager::getHomedPath(trustStore)))
{
   ......
}

BUG#: 2167
TITLE: Problem exception specification in HTTPAuthenticatorDelegator enqueue() method
DESCRIPTION: Removed the exception specification from the enqueue() method signature.

BUG#: 2656
TITLE: License statement update to 2005

DESCRIPTION: All .h, .cpp and the wql, cql, compile *.l and *.y files along
with the .java files in providermanager2/jmpi updated to use the license
statement in doc/license.txt
Tested on windows and visual test of all diffs.

BUG#: 2297
TITLE: 'Types' changes

DESCRIPTION: Changes for typedef'ing Sint8 to be a 'signed char'.

PEP#: 187
TITLE: SSL Cert Mgmt Enhancements
USER: Heather Sterling
MAIL: hsterl@us.ibm.com

DESCRIPTION

Remove comments, update CA fix

PEP#: 187
TITLE: SSL Cert Mgmt Enhancements
USER: Heather Sterling
MAIL: hsterl@us.ibm.com

DESCRIPTION

Check in server msg strings

PEP#: 187
TITLE: SSL cert Mgmt Enhancements
USER: Heather Sterling
MAIL: hsterl@us.ibm.com

DESCRIPTION

Check in bulk of code, including Schema, CertificateProvider and changes to Common, Config, and Server files.

BUG#: 2196
TITLE: Copyright update

DESCRIPTION: Update all .cpp and .h files for new license and
update the doc/license.txt file.  Note that there were also
a couple of files that had to be fixed because they had violated
the comments rules (ex. blank line at head of file or in the case of
xmlwriter.cpp a comment line //=========  which drove the strip
function nuts.  These were fixed.  This has been compiled and tested
on windows.

BUG#: 1283
TITLE: Removed unreferenced local variables.

DESCRIPTION: That's it.

PEP#: 165
TITLE: SSL client verification
USER: Heather Sterling
MAIL: hsterl@us.ibm.com

DESCRIPTION

Ballot 60 AuthenticationInfo changes

PEP#: 165
TITLE: SSL client verification
USER: Heather Sterling
MAIL: hsterl@us.ibm.com

DESCRIPTION

Ballot 60 changes

PEP#: 152
TITLE: Make Pegasus LSB compliant.

DESCRIPTION:
Add in the Makefiles 'install:' tag. For Makefiles in test directory nothing happends. For pertient ones
the files are installed using PREFIX variable and macros (defined by default in config.mak).

PEP#: 152
TITLE: Make Pegasus Linux Standard Base (LSB) compliant

DESCRIPTION:
1). Source code compiles under LSB 1.3. Use env variable PEGASUS_LSB=1.

PEP#:101
TITLE: AutoPtr enhancements
DESCRIPTION: Plz refer PEP101 for details.

PEP#: 155
TITLE: HP[Nag] SSL client certificate verification for CIMExport requests

DESCRIPTION: Added SSL client certificate verification support for CIMExport requests received on the new export port. To enable this feature set the config property enableSSLExportClientVerification to true and specify the indication trust store using the config property exportSSLTrustStore. Username password authentication is not done and CIMOperation requests are not processed on the export port.

PEP#: 165
TITLE: SSL client verification
USER: Heather Sterling
MAIL: hsterl@us.ibm.com

DESCRIPTION

Adding SSL client verification support.
Build with PEGASUS_USE_SSL_CLIENT_VERIFICATION to enable the feature.

PEP#: 146

TITLE: Decode AcceptLanguages ealier in the request process

DESCRIPTION: Decode AcceptLanguages ealier in the request process

Bug 1145: OS/400 Specific Changes

Bug 1145: OS400 Specific Changes

HP-RK Bugzilla 1027 (Windows basic authentication with user name - timeout).

HP-WO HTTPConnection must return 413 response on oversized requests (Bugzilla 89)

HP-[SF] Commited fix for bug 969. This fixes the function create to return error incase of error in file creation, chmod and chown.

PEP 55 Update license on source files to current license text and date

Bug 745: OS/400 Authentication Changes

Bug 745: OS/400 Authentication Changes

HP-RK Bugzilla 641 (Intermittent client timeout under heavy cimserver load).

Bug 419: OS/400 Authentication Enhancements

Bug 419: OS/400 Authentication Enhancements

IBM:DR [PEP:53] Logging Enhancements Code Points

IBM:DR [PEP:53] Logging Enhancements Code Points

HP-[CAKG] respond correctly to POST requests

HP-RK Update license header.

converted some classes back to MessageQueue from MessageQueueService in order to reduce idle threads.

HP-Nag: Added config properties 'enableHttpConnection' and 'enableHttpsConnection', renamed 'requireAuthentication' to 'enableAuthentication' and 'requireAuthorization' to 'enableNamespaceAuthorization'. Removed few ATTN's in Authentication code.

HP-RK Remove use of String::matchNoCase in HTTPMessage::lookupHeader.  Instead of doing a general pattern match, HTTPMessage::lookupHeader now has specific modes for allowing the HTTP namespace prefix ('dd-') on the header tag or not.  This more closely matches the use model.

HP-RK Changed the MessageQueue::getQueueName() method from virtual to non-virtual, and removed that method definition from all the subclasses.  To make sure that the MessageQueue class gets the queue name value, the default value for the queue name parameter to the MessageQueue constructor was removed.  Constants were defined in Constants.h for all the queue names currently used in Pegasus.  The places where those queue names were being used for lookup were also changed to use the constants.

HP-RK Fixed defects in InvokeMethod responses.  Specifically, made the RETURNVALUE XML tag optional and propagated the return value from the provider to the response encoder.

HP-RK Allow for more extensible HTTP error responses.

HP-RK Return correct error response for unsupported HTTP methods.

HP-RK Define a common location (Common/Constants.h) for Pegasus server constants.  Define an initial set of these constants.

HP-RK Handle case where CIMOperation header is missing on a CIM operation request.

HP-Nag: Modified CIMClient API to accept username and password as parameters to connect() method and added a new method diconnect() that closes the open connection with the server. Modified ClientAuthenticator to handle HTTP Basic Authentication challenges from the server.

HP-RK Massive changes in XmlWriter to eliminate redundant memory copies.  Also lots of cleanup.

fixed bug that caused segv when deleted HTTP connection

 lots of changes to support mixing of legacy and async messages in queues

MessageQueueService integration

experimentation with MessageQueue

Merged dev branch into main trunk.

file HTTPAuthenticatorDelegator.cpp was initially added on branch dev.