23 Feb, 2012

1 commit


12 Dec, 2011

1 commit


08 Dec, 2011

1 commit


24 Nov, 2011

1 commit


09 Nov, 2011

1 commit


03 Nov, 2011

2 commits


24 Oct, 2011

1 commit


20 Oct, 2011

1 commit


14 Oct, 2011

2 commits

  • Add support for changing the format of the access log:
    
    * configurable timestamp format
    * enable logging of request and response control OIDS
    * change the format to a "combined" mode where operations are logged using a single log record rather than individual request and response records.
    
    Also fixed a bug in the time thread which prevented applications from deregistering time formatters.
    
    
    
    
    
    git-svn-id: https://svn.forgerock.org/opendj/trunk@7379 41b1ffd8-f28e-4786-ab96-9950f0a78031
    matthew
     
  • * Rename client-* properties to connection-*
    * Remove default behavior aliases since they clutter up the display of a filtering criteria in dsconfig interactive mode
    * Make protocol matching string based instead of enumeration: this will be forwards compatible with new protocols as they are added
    * Fix and optimize protocol and port matching.
    
    
    
    
    git-svn-id: https://svn.forgerock.org/opendj/trunk@7377 41b1ffd8-f28e-4786-ab96-9950f0a78031
    matthew
     

13 Oct, 2011

2 commits


11 Oct, 2011

1 commit


07 Oct, 2011

2 commits


30 Sep, 2011

1 commit

  • Many thanks to Nemanja Lukic and his colleagues at Profiq S.R.O for this kind contribution.
    
    The contribution has been modified as follows:
    
    *) use the admin framework for validating the attribute renaming mapping
    *) relax the constraint that attribute names must conform to RFC 4512 since non-compliant attribute names are good candidates for removing and renaming
    *) modify the rename target attribute validation to support attribute descriptions
    *) added schema element definitions for configuration attributes
    
    git-svn-id: https://svn.forgerock.org/opendj/trunk@7332 41b1ffd8-f28e-4786-ab96-9950f0a78031
    matthew
     

28 Sep, 2011

2 commits


20 Sep, 2011

1 commit


30 Aug, 2011

2 commits


29 Aug, 2011

1 commit


18 Aug, 2011

1 commit

  • Refactor PasswordPolicy implementation so that we now have a common parent type, "AuthenticatioPolicy", which will act as a common entry point for all authentication policies. In particular, password policies can be thought of as a specific type of authentication policy: one where authentication and the user's credentials are managed locally. PTA can be thought of as a non-local authentication policy: the password is managed by a third party.
    
    With this change we still only have one type of authentication policy and no attempt has been made to refactor code which uses it. More specifically, code such as the local backend WFE just type-casts the authentication policy to a password policy.
    
    Another implication of this change is that sub-entry based password policies now automatically inherit run-time changes made to the default password policy, whereas before a server restart was required.
    
    
    git-svn-id: https://svn.forgerock.org/opendj/trunk@7192 41b1ffd8-f28e-4786-ab96-9950f0a78031
    matthew
     

29 Jul, 2011

1 commit


28 Jul, 2011

1 commit


18 Jul, 2011

1 commit

  • Many thanks to Nemanja Lukic and his colleagues at Profiq S.R.O for this kind contribution.
    
    The contribution has been modified as follows:
    
    *) integrate as core feature of OpenDJ, not extension
    *) rename package names accordingly
    *) remove dependency on BouncyCastle.org MD4 implementation, by porting implementation to OpenDJ
    *) re-implement setOddParity method in order to avoid potential copyright issues with existing implementations.
    *) simplify configuration model and validation.
    
    TODO:
    
    *) support u: and dn: authid in password modify extended operation.
    
    
    git-svn-id: https://svn.forgerock.org/opendj/trunk@7116 41b1ffd8-f28e-4786-ab96-9950f0a78031
    matthew
     

23 Jun, 2011

1 commit


10 Jun, 2011

1 commit


06 Jun, 2011

1 commit


01 Jun, 2011

1 commit


07 Apr, 2011

1 commit


26 Nov, 2010

1 commit


26 Oct, 2010

1 commit

  • This changes are adding support for the BSD MD5 crypt hash as part of the CRYPT password storage scheme.
    A new parameter has been added to the configuration of the storage scheme to select whether new passwords should be hashed with the unix algo (default) or the md5 one.
    When it comes to authentication, the scheme is able to detect the algo (based on the $1$ prefix) and match appropriately.
    Unit tests have been added, including test again passwords already hashed on Linux systems.
    
    git-svn-id: https://svn.forgerock.org/opendj/trunk@6641 41b1ffd8-f28e-4786-ab96-9950f0a78031
    ludo
     

17 Sep, 2010

4 commits


20 Aug, 2010

2 commits