org.forgerock / org.forgerock.opendj

07 Oct, 2011

2 commits

30 Sep, 2011

1 commit

  • 72f4a7c0   Fix OPENDJ-258: Integrate attribute cleanup plugin into OpenDJ (contributed by Profiq S.R.O) ... Browse Dir » 
    Many thanks to Nemanja Lukic and his colleagues at Profiq S.R.O for this kind contribution.

The contribution has been modified as follows:

*) use the admin framework for validating the attribute renaming mapping
*) relax the constraint that attribute names must conform to RFC 4512 since non-compliant attribute names are good candidates for removing and renaming
*) modify the rename target attribute validation to support attribute descriptions
*) added schema element definitions for configuration attributes

git-svn-id: https://svn.forgerock.org/opendj/trunk@7332 41b1ffd8-f28e-4786-ab96-9950f0a78031
    matthew
     

29 Sep, 2011

1 commit

28 Sep, 2011

3 commits

20 Sep, 2011

1 commit

30 Aug, 2011

3 commits

29 Aug, 2011

1 commit

18 Aug, 2011

1 commit

  • bd256e2e   Initial checkpoint of work for OPENDJ-262: Implement pass through authentication (PTA) ... Browse Dir » 
    Refactor PasswordPolicy implementation so that we now have a common parent type, "AuthenticatioPolicy", which will act as a common entry point for all authentication policies. In particular, password policies can be thought of as a specific type of authentication policy: one where authentication and the user's credentials are managed locally. PTA can be thought of as a non-local authentication policy: the password is managed by a third party.

With this change we still only have one type of authentication policy and no attempt has been made to refactor code which uses it. More specifically, code such as the local backend WFE just type-casts the authentication policy to a password policy.

Another implication of this change is that sub-entry based password policies now automatically inherit run-time changes made to the default password policy, whereas before a server restart was required.


git-svn-id: https://svn.forgerock.org/opendj/trunk@7192 41b1ffd8-f28e-4786-ab96-9950f0a78031
    matthew
     

29 Jul, 2011

1 commit

28 Jul, 2011

1 commit

18 Jul, 2011

1 commit

  • ff7407dc   Fix OPENDJ-233: Integrate Samba password sync plugin into OpenDJ (contributed by Profiq S.R.O) ... Browse Dir » 
    Many thanks to Nemanja Lukic and his colleagues at Profiq S.R.O for this kind contribution.

The contribution has been modified as follows:

*) integrate as core feature of OpenDJ, not extension
*) rename package names accordingly
*) remove dependency on BouncyCastle.org MD4 implementation, by porting implementation to OpenDJ
*) re-implement setOddParity method in order to avoid potential copyright issues with existing implementations.
*) simplify configuration model and validation.

TODO:

*) support u: and dn: authid in password modify extended operation.


git-svn-id: https://svn.forgerock.org/opendj/trunk@7116 41b1ffd8-f28e-4786-ab96-9950f0a78031
    matthew
     

23 Jun, 2011

1 commit

10 Jun, 2011

1 commit

06 Jun, 2011

1 commit

01 Jun, 2011

1 commit

07 Apr, 2011

2 commits

18 Mar, 2011

1 commit

  • a6808279   Fix issue with OPENDJ-91 : Unique Attribute plugin rejects valid modification of unique value. ... Browse Dir » 
    The issue was in the XML definition of the plugin configuration. The registration of post operation callbacks were missing. The default uid unique attribute plugin has them properly set in config/config.ldif, so enabling that plugin worked. But adding a new copy of the plugin with dsconfig create-plugin would create an invalid configuration inducing errors and memory leaks.


git-svn-id: https://svn.forgerock.org/opendj/trunk@6778 41b1ffd8-f28e-4786-ab96-9950f0a78031
    ludo
     

26 Nov, 2010

1 commit

26 Oct, 2010

1 commit

  • c295d24a   Resolves Enhancement request OpenDJ-5: Support Linux md5 crypt storage for password ... Browse Dir » 
    This changes are adding support for the BSD MD5 crypt hash as part of the CRYPT password storage scheme.
A new parameter has been added to the configuration of the storage scheme to select whether new passwords should be hashed with the unix algo (default) or the md5 one.
When it comes to authentication, the scheme is able to detect the algo (based on the $1$ prefix) and match appropriately.
Unit tests have been added, including test again passwords already hashed on Linux systems.

git-svn-id: https://svn.forgerock.org/opendj/trunk@6641 41b1ffd8-f28e-4786-ab96-9950f0a78031
    ludo
     

17 Sep, 2010

4 commits

20 Aug, 2010

2 commits

18 Aug, 2010

3 commits

30 Jul, 2010

3 commits

  • a3e04413   Implements a configurable limit in the number of persistent searches a server can handle. ... Browse Dir » 
    git-svn-id: https://svn.forgerock.org/opendj/trunk@6558 41b1ffd8-f28e-4786-ab96-9950f0a78031
    ludovicp
     
  • b5b3ffea   Implements index analysis features. ... Browse Dir » 
    There are 2 components:
Index Filter Analyzer : Part of DatabaseEnvironmentProvider, it gathers search filter statistics and displays the index filter, number of hits, max matching entries, and a message. Compound filters are broken down to their basic elements. f an index was not utilized while evaluating the search filter, max matching entries will be -1 and a diagnostic message will be included. The monitor entry also includes when the analyzer was enabled along with the number of total index and unindexed searches processed. 

Attribute Index Analysis, part of the dbtest tool. It cursors through all the indexes and finds the number of 100%, 95%, 90%, and 80% undefined index keys.  It also displays the value of the undefined keys along with the total number of keys in the index. The process is currently single threaded and might not scale to 10 mil+ DBs. However, this is currently unavoidable without the ability for JE to cursor through the records in log order.


git-svn-id: https://svn.forgerock.org/opendj/trunk@6555 41b1ffd8-f28e-4786-ab96-9950f0a78031
    ludovicp
     
  • e883d7f5   Implements a disk space thresholds feature, preventing the server from crashing … ... Browse Dir » 
    …or exiting of disks full.

Each instance of the monitor have two thresholds: "low" and "full". Other components can register their own handlers if they wish to receive notifications when the thresholds are reached. It extends the MonitorProvider interface and utilizes the update interval mechanism to poll the free disk space. The current free space and state of all monitor instances are exposed through the cn=monitor interface under the cn=Disk Space Monitor branch. The only component using the monitor now is the JE backend. When the "low" threshold is reached, write operations will only be permitted to users with the BYPASS_LOCKDOWN privilege. When the "full" threshold is reached, the backend is placed in read-only mode. The default "low" and "full" thresholds are 100 MB and 10MB respectively. Along with the new feature, this patch also added two privileges: SERVER_LOCKDOWN and BYPASS_LOCKDOWN. Any user with the SERVER_LOCKDOWN privilege can put and take the server out of lockdown mode. Any user with the BYPASS_LOCKDOWN mode can bypass lockdown mode. This was restricted to only "root" users before. In addition, the MonitorProvider abstract class no longer extends DirectoryThread. It now uses a static single threaded ScheduledExecutorService to update provider states. Any provider that wishes to have its state updated periodically needs to register its updater runnable with the scheduleUpdate method.

git-svn-id: https://svn.forgerock.org/opendj/trunk@6549 41b1ffd8-f28e-4786-ab96-9950f0a78031
    ludovicp
     

05 Jul, 2010

1 commit

  • d236c278   Apply SleepyCat recommendations regarding JE default tunings. ... Browse Dir » 
    The max log size is decreased to 10MB and checkpointer to 20MB.
Also increases the number of cleaners to match the default number of workers.
These new settings are helping with reducing the etimes on write operations

git-svn-id: https://svn.forgerock.org/opendj/trunk@6537 41b1ffd8-f28e-4786-ab96-9950f0a78031
    ludovicp
     

25 Jun, 2010

1 commit

07 Jun, 2010

1 commit