26 Sep, 2006
10 commits
-
…ethod levels. Please refer to the unit test documentation on the OpenDS website for more information. Fix for issue 720. git-svn-id: https://svn.forgerock.org/opendj/trunk@473 41b1ffd8-f28e-4786-ab96-9950f0a78031
-
git-svn-id: https://svn.forgerock.org/opendj/trunk@472 41b1ffd8-f28e-4786-ab96-9950f0a78031
-
Add some tests for better coverage of the Bit String syntax git-svn-id: https://svn.forgerock.org/opendj/trunk@471 41b1ffd8-f28e-4786-ab96-9950f0a78031
-
git-svn-id: https://svn.forgerock.org/opendj/trunk@470 41b1ffd8-f28e-4786-ab96-9950f0a78031
-
git-svn-id: https://svn.forgerock.org/opendj/trunk@469 41b1ffd8-f28e-4786-ab96-9950f0a78031
-
git-svn-id: https://svn.forgerock.org/opendj/trunk@468 41b1ffd8-f28e-4786-ab96-9950f0a78031
-
git-svn-id: https://svn.forgerock.org/opendj/trunk@467 41b1ffd8-f28e-4786-ab96-9950f0a78031
-
- make a method signature independent from the implementation Reviewed by Neil and Matt git-svn-id: https://svn.forgerock.org/opendj/trunk@466 41b1ffd8-f28e-4786-ab96-9950f0a78031
-
git-svn-id: https://svn.forgerock.org/opendj/trunk@465 41b1ffd8-f28e-4786-ab96-9950f0a78031
-
draft-schleiff-ldap-xri Internet Draft. git-svn-id: https://svn.forgerock.org/opendj/trunk@464 41b1ffd8-f28e-4786-ab96-9950f0a78031
25 Sep, 2006
19 commits
-
problems with clients due to a race condition. Previously, the success response was sent to the client before TLS negotiation was started (because the StartTLS response must be sent in the clear), and it was possible that if a client was able to receive that response and send a subsequent TLS-protected request before the was able to begin the TLS negotiation, then the server would try to handle the client request as if it were in the clear and would not be able to decode it. The server now prepares to perform the TLS negotiation before sending the response to the client to eliminate that race condition. OpenDS Issue Number: 725 git-svn-id: https://svn.forgerock.org/opendj/trunk@463 41b1ffd8-f28e-4786-ab96-9950f0a78031
-
git-svn-id: https://svn.forgerock.org/opendj/trunk@462 41b1ffd8-f28e-4786-ab96-9950f0a78031
-
that implement the ConfigurableComponent and ConfigChangeListener interfaces. git-svn-id: https://svn.forgerock.org/opendj/trunk@461 41b1ffd8-f28e-4786-ab96-9950f0a78031
-
git-svn-id: https://svn.forgerock.org/opendj/trunk@460 41b1ffd8-f28e-4786-ab96-9950f0a78031
-
implementation. It should only be possible to alter the password policy configuration over protocol. git-svn-id: https://svn.forgerock.org/opendj/trunk@459 41b1ffd8-f28e-4786-ab96-9950f0a78031
-
test case. git-svn-id: https://svn.forgerock.org/opendj/trunk@458 41b1ffd8-f28e-4786-ab96-9950f0a78031
-
types package. git-svn-id: https://svn.forgerock.org/opendj/trunk@457 41b1ffd8-f28e-4786-ab96-9950f0a78031
-
to ensure that anything written to standard error does actually make it to standard error instead of being hidden. git-svn-id: https://svn.forgerock.org/opendj/trunk@456 41b1ffd8-f28e-4786-ab96-9950f0a78031
-
git-svn-id: https://svn.forgerock.org/opendj/trunk@455 41b1ffd8-f28e-4786-ab96-9950f0a78031
-
git-svn-id: https://svn.forgerock.org/opendj/trunk@454 41b1ffd8-f28e-4786-ab96-9950f0a78031
-
Add some tests for more Equality matching rules git-svn-id: https://svn.forgerock.org/opendj/trunk@453 41b1ffd8-f28e-4786-ab96-9950f0a78031
-
an "isOperational" getter in the AttributeUsage enumeration. git-svn-id: https://svn.forgerock.org/opendj/trunk@452 41b1ffd8-f28e-4786-ab96-9950f0a78031
-
make it immutable (it's still not 100% immutable - the constructors do not perform deep copies of the extra properties). git-svn-id: https://svn.forgerock.org/opendj/trunk@451 41b1ffd8-f28e-4786-ab96-9950f0a78031
-
- The EXTERNAL SASL mechanism handler - The StartTLS extended operation - The file-based key manager provider - The file-based trust manager provider - The core password policy git-svn-id: https://svn.forgerock.org/opendj/trunk@450 41b1ffd8-f28e-4786-ab96-9950f0a78031
-
The certificates are valid for 20 years, so we won't need to change them for a while. They are self-signed, but there are also trust stores available so that clients can trust them without needing to resort to blindly trusting all certificates. There is a client certificate that is adequate for use with SASL EXTERNAL. Both the client and server certificates are available in both JKS and PKCS#12 formats. The commands used to generate these certificates are as follows: $ /usr/java5/bin/keytool -genkey -alias server-cert -keyalg rsa -dname 'CN=OpenDS Test Certificate,O=OpenDS.org' -keystore server.keystore -storepass password -keypass password $ /usr/java5/bin/keytool -selfcert -alias server-cert -validity 7305 -keystore server.keystore -storepass password $ /usr/java5/bin/keytool -export -rfc -alias server-cert -file /tmp/server.cert -keystore server.keystore -storepass password $ /usr/java5/bin/keytool -import -alias server-cert -file /tmp/server.cert -keystore server.truststore -storepass password $ /usr/java5/bin/keytool -genkey -alias client-cert -keyalg rsa -dname 'CN=Test User,O=Test' -keystore client.keystore -storepass password -keypass password $ /usr/java5/bin/keytool -selfcert -alias client-cert -validity 7305 -keystore client.keystore -storepass password $ /usr/java5/bin/keytool -import -alias server-cert -file /tmp/server.cert -keystore client.truststore -storepass password $ /usr/java5/bin/keytool -export -rfc -alias client-cert -file /tmp/client.cert -keystore client.keystore -storepass password $ /usr/java5/bin/keytool -import -alias client-cert -file /tmp/client.cert -keystore server.truststore -storepass password $ /usr/java5/bin/keytool -import -alias client-cert -file /tmp/client.cert -keystore client.truststore -storepass password $ keytool -importkeystore -srckeystore server.keystore -destkeystore server-cert.p12 -srcstoretype JKS -deststoretype PKCS12 -srcstorepass password -deststorepass password -srcalias server-cert -destalias server-cert -srckeypass password -destkeypass password $ keytool -importkeystore -srckeystore client.keystore -destkeystore client-cert.p12 -srcstoretype JKS -deststoretype PKCS12 -srcstorepass password -deststorepass password -srcalias client-cert -destalias client-cert -srckeypass password -destkeypass password git-svn-id: https://svn.forgerock.org/opendj/trunk@449 41b1ffd8-f28e-4786-ab96-9950f0a78031
-
updated if the password generator is changed while the server is online. OpenDS Issue Number: 717 git-svn-id: https://svn.forgerock.org/opendj/trunk@448 41b1ffd8-f28e-4786-ab96-9950f0a78031
-
git-svn-id: https://svn.forgerock.org/opendj/trunk@447 41b1ffd8-f28e-4786-ab96-9950f0a78031
-
occur if it was created with a single DN value and that value is null. OpenDS Issue Number: 716 git-svn-id: https://svn.forgerock.org/opendj/trunk@446 41b1ffd8-f28e-4786-ab96-9950f0a78031
-
SASL EXTERNAL authentication even though they claim to. OpenDS Issue Number: 715 git-svn-id: https://svn.forgerock.org/opendj/trunk@445 41b1ffd8-f28e-4786-ab96-9950f0a78031
23 Sep, 2006
8 commits
-
a delay in preoperation processing. git-svn-id: https://svn.forgerock.org/opendj/trunk@444 41b1ffd8-f28e-4786-ab96-9950f0a78031
-
traditional work queue, and the cancel extended operation. git-svn-id: https://svn.forgerock.org/opendj/trunk@443 41b1ffd8-f28e-4786-ab96-9950f0a78031
-
processing. The delay will only be introduced for operations that contain a special control which also indicates the length of time to sleep before returning. This can be useful in testing cancel and abandon operations. git-svn-id: https://svn.forgerock.org/opendj/trunk@442 41b1ffd8-f28e-4786-ab96-9950f0a78031
-
immediately after acquiring a lock on the target entry but before entering the try/finally block to ensure that the lock would be released. This could lead to a case in which the lock will never be released, interfering with the ability to interact with that entry in the future. OpenDS Issue Number: 714 git-svn-id: https://svn.forgerock.org/opendj/trunk@441 41b1ffd8-f28e-4786-ab96-9950f0a78031
-
a cancel between the pre-operation plugin processing and sending the request to the backend. OpenDS Issue Number: 713 git-svn-id: https://svn.forgerock.org/opendj/trunk@440 41b1ffd8-f28e-4786-ab96-9950f0a78031
-
1. TestAbandonRequestProtocolOp.java 2. TestLDAPException.java git-svn-id: https://svn.forgerock.org/opendj/trunk@439 41b1ffd8-f28e-4786-ab96-9950f0a78031
-
Removed unused method. git-svn-id: https://svn.forgerock.org/opendj/trunk@438 41b1ffd8-f28e-4786-ab96-9950f0a78031
-
Added toString helper in LdapTestCase class. Changed TestBindResponseProtocolOp.java/TestUnbindRequestProtocolOp.java to use toString helper method. Cleaned up unneeded start server call in TestUnbindRequestProtocolOp.java. git-svn-id: https://svn.forgerock.org/opendj/trunk@437 41b1ffd8-f28e-4786-ab96-9950f0a78031
22 Sep, 2006
3 commits
-
git-svn-id: https://svn.forgerock.org/opendj/trunk@436 41b1ffd8-f28e-4786-ab96-9950f0a78031
-
Fix for issue 711. git-svn-id: https://svn.forgerock.org/opendj/trunk@435 41b1ffd8-f28e-4786-ab96-9950f0a78031
-
An extensible LDAP filter with dn attribute but without attribute name and matching rule causes IndexOutOfBounds exception in LDAPFilter.decode method. To reproduce the error, decode filter string "(:dn:=John Doe)" Fix for issue 708. Constructing a LDAPFilter object from a SearchFilter objects with NOT components results in an incomplete LDAPFilter object. The LDAPFilter will be complete except for the NOT components. This results in a NullPointerException exception when calling methods that assume a LDAPFilter component will not be NULL (ie. toString). Fix for issue 709. When encoding LDAPFilter objects to ASN1Element objects, extensible components are encoded as or components. The matching rule ID is also included twice in the encoding with the wrong ASN1 type of matching rule attribute. Fix for issue 710. git-svn-id: https://svn.forgerock.org/opendj/trunk@434 41b1ffd8-f28e-4786-ab96-9950f0a78031