org.forgerock / org.forgerock.opendj

10 Sep, 2007

2 commits

  • 4b3ded37   Fix an issue in non-interactive mode for the initialize subcommand. ... Browse Dir » 
    
git-svn-id: https://svn.forgerock.org/opendj/trunk@3003 41b1ffd8-f28e-4786-ab96-9950f0a78031
    jvergara
     
  • c6ff7b0f   Add support for password storage schemes using AES, 3DES, RC4, and Blowfish. ... Browse Dir » 
    The AES, RC4, and Blowfish implementations all use 128-bit ciphers, and the
3DES implementation uses a 168-bit cipher.

Note that while these password storage schemes are functional, they rely on the
crypto manager, which is not fully implemented.  The storage schemes are not
exposed in the server configuration because the crypto manager does not have
any mechanism to persist secret keys for symmetric encryption.  Until the
crypto manager provides persistence for these keys, passwords encoded using
these schemes will not be usable after the server is restarted.  Once the
crypto manager implementation is complete, these schemes should be exposed in
the server configuration.

OpenDS Issue Numbers:  315, 316, 317, 318


git-svn-id: https://svn.forgerock.org/opendj/trunk@3000 41b1ffd8-f28e-4786-ab96-9950f0a78031
    neil_a_wilson
     

09 Sep, 2007

3 commits

  • 1f7dbdf6   Update the server to provide a basic framework for controlling when plugins ... Browse Dir » 
    will be invoked.  There are two basic changes:

- Add a new ds-cfg-invoke-for-internal-operations configuration attribute for
  all plugins, which indicates whether the plugin should be invoked for
  internal operations.  If this is false, then the plugin will only be invoked
  for externally-requested operations.

- Add four new plugin types:  postSynchronizationAdd,
  postSynchronizationDelete, postSynchronizationModify, and
  postSynchronizationModifyDN.  These allow a plugin to perform a limited set
  of processing for changes that are successfully applied through
  synchronization.


The unique attribute plugin has also been updated to support the
post-synchronization plugin types so that if a conflict is introduced
concurrently on two different servers within the propagation delay, an
administrative alert will be generated to indicate that manual intervention is
required to address the problem.

Finally, ensure that audit logging is enabled during the unit tests, and
update the audit logger to include the connection ID and operation ID for the
operation being logged.


OpenDS Issue Number:  2057


git-svn-id: https://svn.forgerock.org/opendj/trunk@2999 41b1ffd8-f28e-4786-ab96-9950f0a78031
    neil_a_wilson
     
  • 1058f0e4   - [Issue 1594] entry caches should have monitor information: ... Browse Dir » 
    implement generic entry cache monitor provider which allows any entry cache implementation current or future
  to provide a common or custom set of entry cache state data. update all existing entry cache implementations
  so that they provide their common state data to the entry cache monitor provider.


git-svn-id: https://svn.forgerock.org/opendj/trunk@2998 41b1ffd8-f28e-4786-ab96-9950f0a78031
    abobrov
     
  • b0c3feb3   Issue 466 partial ... Browse Dir » 
    CryptoManager
Refactor to separate key and key entry generation from key retrieval.


git-svn-id: https://svn.forgerock.org/opendj/trunk@2997 41b1ffd8-f28e-4786-ab96-9950f0a78031
    david_page
     

08 Sep, 2007

1 commit

  • a25824b1   Issue 466 partial ... Browse Dir » 
    CryptoManager encryption

Allow key size different from block size for block ciphers that support it (e.g., Blowfish as in Blowfish/CFB/NoPadding", 128) and block ciphers modes that use no initialization vector (e.g., ECB as in "DES/ECB/PKCS5Padding", 64). Note that this is accomplished without adding an initialization vector parameter to the encryption API. Instead, if the Cipher.getBlockSize is non-zero, the Cipher object is first instantiated with that size initialization vector, and if that fails, initialized without an initialization vector.


git-svn-id: https://svn.forgerock.org/opendj/trunk@2996 41b1ffd8-f28e-4786-ab96-9950f0a78031
    david_page
     

07 Sep, 2007

6 commits

06 Sep, 2007

6 commits

05 Sep, 2007

12 commits

  • 12a299b2   Remove unused legacy class. ... Browse Dir » 
    
git-svn-id: https://svn.forgerock.org/opendj/trunk@2970 41b1ffd8-f28e-4786-ab96-9950f0a78031
    matthew_swift
     
  • dae96b96   Improvements to the server-side constraint violation APIs. Now there are just tw… ... Browse Dir » 
    …o server-side constraint enforcement call-backs: isUsable and isDeleteAllowed. The first is invoked whenever a managed object is decoded (except in the case where it's about to be deleted). The second is invoked whenever a managed object is about to be deleted. With this change we will now detect constraint violations during server initialization, not just when config change/add/delete events occur.


git-svn-id: https://svn.forgerock.org/opendj/trunk@2969 41b1ffd8-f28e-4786-ab96-9950f0a78031
    matthew_swift
     
  • 4d7b96b5   Partial fix for issue 1449: administration framework aggregation support ... Browse Dir » 
    This change adds support for "aggregation" properties, which are properties which reference other managed objects (see issue 1449 for more details). Subsequent changes will add server-side and client-side referential integrity support, as well as migrating components over to using them (this will be post MS1.0).



git-svn-id: https://svn.forgerock.org/opendj/trunk@2967 41b1ffd8-f28e-4786-ab96-9950f0a78031
    matthew_swift
     
  • 1a5553aa   Enable replication session authentication. ... Browse Dir » 
    - Adds a thread to synchronize the server instance certificates from the admin data branch to the local trust store backend.
- Replaces the blind trust managers in the replication session with trust managers that use the local trust store.

Note that replication must be configured using either setup-gui or the dsreplication command.

git-svn-id: https://svn.forgerock.org/opendj/trunk@2966 41b1ffd8-f28e-4786-ab96-9950f0a78031
    coulbeck
     
  • 4afdc27f   Update CryptoManager secret key encryption public API: ... Browse Dir » 
    1. Encapsulate Cipher object in CryptoManager instance.
2. Cipher key identifier (tag) and initialization vector prefix the cipher text.
3. New API consists of encrypt and getOutputCipherStream (with optional cipher transformation parameter), and decrypt and getInputCipherStream.

Limitations:
This is an update of the API only. The keys are stored in a Map object in the CryptoManager instance, so 
1. The implementation works for a single instance only (e.g., no encrypted passwords in a replication domain).
2. The key map does not persists across instance restarts.
Both persistent key storage in a stand-alone instance and the secret key distribution protocol (via ADS) for replicated topologies needs to be implemented.

Other shortcomings:
1. The exception messages need to be added to the message catalogue.
2. The implementation could benefit from a review.
3. Only simple success test cases are implemented in the unit tests.
4. The uses of getInputCipherStream and getOutputCipherStream should be reviewed, since the cipher transformation used - as of now it is always the preferred (default) cipher transformation - is still stored in the backup info file, where it might be informative, but is redundant (the cipher info is encoded as the prologue of the backup data).
5. The preferred cipher, etc., should be configurable.


git-svn-id: https://svn.forgerock.org/opendj/trunk@2964 41b1ffd8-f28e-4786-ab96-9950f0a78031
    david_page
     
  • 8ba45d0f   Have more specific error messages and fix a bug in initialization in non-prompt mode. ... Browse Dir » 
    

git-svn-id: https://svn.forgerock.org/opendj/trunk@2963 41b1ffd8-f28e-4786-ab96-9950f0a78031
    jvergara
     
  • 8bfa30f6   Expanded the number or arguments that indicate that a remote operation is to be … ... Browse Dir » 
    …performed from just -h (host) to also include -p (port) and -D (bind DN)

git-svn-id: https://svn.forgerock.org/opendj/trunk@2961 41b1ffd8-f28e-4786-ab96-9950f0a78031
    kenneth_suter
     
  • 259da68a   - remove useless test ... Browse Dir » 
    - fix a buf (we don't need bindDN if client side authentication is required)

git-svn-id: https://svn.forgerock.org/opendj/trunk@2960 41b1ffd8-f28e-4786-ab96-9950f0a78031
    lutoff
     
  • 62c5793d   Improve line break utilisation in the replication command-line. ... Browse Dir » 
    
git-svn-id: https://svn.forgerock.org/opendj/trunk@2958 41b1ffd8-f28e-4786-ab96-9950f0a78031
    jvergara
     
  • 0284cd38   Implement support for delete and modify operations in the task backend as ... Browse Dir » 
    follows:

- Pending tasks and completed tasks may be deleted.  Running tasks may not be
  deleted.
- Any attributes in pending tasks may be modified.
- Only the task state in running tasks may be modified, and only to cancel the
  task.
- No attributes of a completed task may be modified.

OpenDS Issue Number:  2181


git-svn-id: https://svn.forgerock.org/opendj/trunk@2955 41b1ffd8-f28e-4786-ab96-9950f0a78031
    neil_a_wilson
     
  • 4fc245e1   The following changes are targetted to fix a certain number of issues related to… ... Browse Dir » 
    … the setup command line:

    * 1257 setup cli/gui symetry -- allow to start after slient install
    * 1264 silent install option is not silent
    * 1326 Update setup CLI to integrate common install scenario (partial fix)
    * 1404 different CLI/GUI behavior running setup
    * 1859 spin off GUI specific CLI commands
    * 2184 setup quite/no-prompt
    * 2185 setup --cli -Q throws error

The changes basically consist on splitting the current setup command-line into two (the same way we have done for the uninstall). Know we will have one command to launch the setup in CLI mode (setup and setup.bat) and one command to launch the setup in GUI mode (setup-gui and setup-gui.bat).

The behavior of the graphical interface has not changed. However the capabilities of the CLI setup have been extended to allow to match those in the graphical interface (excluding the replication configuration capabilities):

    * Configure the LDAPS and StartTLS on the server.
    * Start the server.


git-svn-id: https://svn.forgerock.org/opendj/trunk@2954 41b1ffd8-f28e-4786-ab96-9950f0a78031
    jvergara
     
  • af9dc2f1   Fixed some issues with the connection handling in the ReplicationCliMain, and im… ... Browse Dir » 
    …provded the messages when we prompt for the type of connection that the user wants to use to update configuration.

Fixed a localization bug in SubCommandArgumentParser.


git-svn-id: https://svn.forgerock.org/opendj/trunk@2953 41b1ffd8-f28e-4786-ab96-9950f0a78031
    jvergara
     

04 Sep, 2007

10 commits