org.forgerock / org.forgerock.opendj

10 Sep, 2007

4 commits

09 Sep, 2007

3 commits

  • 1f7dbdf6   Update the server to provide a basic framework for controlling when plugins ... Browse Code » 
    will be invoked.  There are two basic changes:

- Add a new ds-cfg-invoke-for-internal-operations configuration attribute for
  all plugins, which indicates whether the plugin should be invoked for
  internal operations.  If this is false, then the plugin will only be invoked
  for externally-requested operations.

- Add four new plugin types:  postSynchronizationAdd,
  postSynchronizationDelete, postSynchronizationModify, and
  postSynchronizationModifyDN.  These allow a plugin to perform a limited set
  of processing for changes that are successfully applied through
  synchronization.


The unique attribute plugin has also been updated to support the
post-synchronization plugin types so that if a conflict is introduced
concurrently on two different servers within the propagation delay, an
administrative alert will be generated to indicate that manual intervention is
required to address the problem.

Finally, ensure that audit logging is enabled during the unit tests, and
update the audit logger to include the connection ID and operation ID for the
operation being logged.


OpenDS Issue Number:  2057


git-svn-id: https://svn.forgerock.org/opendj/trunk@2999 41b1ffd8-f28e-4786-ab96-9950f0a78031
    neil_a_wilson
     
  • 1058f0e4   - [Issue 1594] entry caches should have monitor information: ... Browse Code » 
    implement generic entry cache monitor provider which allows any entry cache implementation current or future
  to provide a common or custom set of entry cache state data. update all existing entry cache implementations
  so that they provide their common state data to the entry cache monitor provider.


git-svn-id: https://svn.forgerock.org/opendj/trunk@2998 41b1ffd8-f28e-4786-ab96-9950f0a78031
    abobrov
     
  • b0c3feb3   Issue 466 partial ... Browse Code » 
    CryptoManager
Refactor to separate key and key entry generation from key retrieval.


git-svn-id: https://svn.forgerock.org/opendj/trunk@2997 41b1ffd8-f28e-4786-ab96-9950f0a78031
    david_page
     

08 Sep, 2007

1 commit

  • a25824b1   Issue 466 partial ... Browse Code » 
    CryptoManager encryption

Allow key size different from block size for block ciphers that support it (e.g., Blowfish as in Blowfish/CFB/NoPadding", 128) and block ciphers modes that use no initialization vector (e.g., ECB as in "DES/ECB/PKCS5Padding", 64). Note that this is accomplished without adding an initialization vector parameter to the encryption API. Instead, if the Cipher.getBlockSize is non-zero, the Cipher object is first instantiated with that size initialization vector, and if that fails, initialized without an initialization vector.


git-svn-id: https://svn.forgerock.org/opendj/trunk@2996 41b1ffd8-f28e-4786-ab96-9950f0a78031
    david_page
     

07 Sep, 2007

12 commits

06 Sep, 2007

13 commits

05 Sep, 2007

7 commits

  • 12a299b2   Remove unused legacy class. ... Browse Code » 
    
git-svn-id: https://svn.forgerock.org/opendj/trunk@2970 41b1ffd8-f28e-4786-ab96-9950f0a78031
    matthew_swift
     
  • dae96b96   Improvements to the server-side constraint violation APIs. Now there are just tw… ... Browse Code » 
    …o server-side constraint enforcement call-backs: isUsable and isDeleteAllowed. The first is invoked whenever a managed object is decoded (except in the case where it's about to be deleted). The second is invoked whenever a managed object is about to be deleted. With this change we will now detect constraint violations during server initialization, not just when config change/add/delete events occur.


git-svn-id: https://svn.forgerock.org/opendj/trunk@2969 41b1ffd8-f28e-4786-ab96-9950f0a78031
    matthew_swift
     
  • a16850f8   More case conversion for some aci functional tests. ... Browse Code » 
    
git-svn-id: https://svn.forgerock.org/opendj/trunk@2968 41b1ffd8-f28e-4786-ab96-9950f0a78031
    mkeyes
     
  • 4d7b96b5   Partial fix for issue 1449: administration framework aggregation support ... Browse Code » 
    This change adds support for "aggregation" properties, which are properties which reference other managed objects (see issue 1449 for more details). Subsequent changes will add server-side and client-side referential integrity support, as well as migrating components over to using them (this will be post MS1.0).



git-svn-id: https://svn.forgerock.org/opendj/trunk@2967 41b1ffd8-f28e-4786-ab96-9950f0a78031
    matthew_swift
     
  • 1a5553aa   Enable replication session authentication. ... Browse Code » 
    - Adds a thread to synchronize the server instance certificates from the admin data branch to the local trust store backend.
- Replaces the blind trust managers in the replication session with trust managers that use the local trust store.

Note that replication must be configured using either setup-gui or the dsreplication command.

git-svn-id: https://svn.forgerock.org/opendj/trunk@2966 41b1ffd8-f28e-4786-ab96-9950f0a78031
    coulbeck
     
  • 522f5000   Fixed a situation where OpenDs is now returning roomNumber and telephoneNumber r… ... Browse Code » 
    …ather than roomnumber and telephonenumber some of the functional tests.


git-svn-id: https://svn.forgerock.org/opendj/trunk@2965 41b1ffd8-f28e-4786-ab96-9950f0a78031
    mkeyes
     
  • 4afdc27f   Update CryptoManager secret key encryption public API: ... Browse Code » 
    1. Encapsulate Cipher object in CryptoManager instance.
2. Cipher key identifier (tag) and initialization vector prefix the cipher text.
3. New API consists of encrypt and getOutputCipherStream (with optional cipher transformation parameter), and decrypt and getInputCipherStream.

Limitations:
This is an update of the API only. The keys are stored in a Map object in the CryptoManager instance, so 
1. The implementation works for a single instance only (e.g., no encrypted passwords in a replication domain).
2. The key map does not persists across instance restarts.
Both persistent key storage in a stand-alone instance and the secret key distribution protocol (via ADS) for replicated topologies needs to be implemented.

Other shortcomings:
1. The exception messages need to be added to the message catalogue.
2. The implementation could benefit from a review.
3. Only simple success test cases are implemented in the unit tests.
4. The uses of getInputCipherStream and getOutputCipherStream should be reviewed, since the cipher transformation used - as of now it is always the preferred (default) cipher transformation - is still stored in the backup info file, where it might be informative, but is redundant (the cipher info is encoded as the prologue of the backup data).
5. The preferred cipher, etc., should be configurable.


git-svn-id: https://svn.forgerock.org/opendj/trunk@2964 41b1ffd8-f28e-4786-ab96-9950f0a78031
    david_page