28 Sep, 2007
3 commits
-
…nd use it within the LDAP and JMX connection handlers to enforce their SSL/StartTLS settings. This feature will be re-used for other managed object definitions as the need arises. git-svn-id: https://svn.forgerock.org/opendj/trunk@3233 41b1ffd8-f28e-4786-ab96-9950f0a78031
-
--advanced --quiet --script-friendly --unit-size --unit-time git-svn-id: https://svn.forgerock.org/opendj/trunk@3232 41b1ffd8-f28e-4786-ab96-9950f0a78031
-
Secret key encoding git-svn-id: https://svn.forgerock.org/opendj/trunk@3231 41b1ffd8-f28e-4786-ab96-9950f0a78031
27 Sep, 2007
4 commits
-
…method name in Conditions and the element name in the XML schema. git-svn-id: https://svn.forgerock.org/opendj/trunk@3230 41b1ffd8-f28e-4786-ab96-9950f0a78031
-
… constraints within components. This change adds support for defining arbitrary conditions which can be used to test properties and their values. Conditions can be used within aggregations to define 1) when a referenced managed object needs enabling and 2) when it is enabled. For example, the LDAP connection handler requires that its key manager provider and trust manager provider are enabled when it is enable and when either SSL or StartTLS are enabled. Conditions are also intended for use within the existing constraint/dependency support. For example, it should be possible to indicate that a property "min" is always less than or equal to a property "max", or that when "use-ssl" is set to true, any required SSL configuration related properties are also defined. This will be implemented in a subsequent change (this change just focuses on the work required to resolve issue 1449). This change adds support for the following conditions: * logical "not" * logical "and" * logical "or" * logical "implies" * contains - determines if a property contains a particular value * is-present - determines if a property has any values (incl. defaults) More will be added as required. git-svn-id: https://svn.forgerock.org/opendj/trunk@3229 41b1ffd8-f28e-4786-ab96-9950f0a78031
-
…y on all platforms and they are less usefull now that log messages are prepended with the date stamp. git-svn-id: https://svn.forgerock.org/opendj/trunk@3227 41b1ffd8-f28e-4786-ab96-9950f0a78031
-
As described in Neil's comments, stop-ds can now read arguments values on a properties file. git-svn-id: https://svn.forgerock.org/opendj/trunk@3222 41b1ffd8-f28e-4786-ab96-9950f0a78031
26 Sep, 2007
9 commits
-
Add ds-cfg-symmetric-key parsing method git-svn-id: https://svn.forgerock.org/opendj/trunk@3220 41b1ffd8-f28e-4786-ab96-9950f0a78031
-
The messages have been updated with a reference to the log file and a String representation of the exception that caused the error. git-svn-id: https://svn.forgerock.org/opendj/trunk@3218 41b1ffd8-f28e-4786-ab96-9950f0a78031
-
Provide new options in the command line and new GUI in order to be able to configure secure replication. The dsreplication status command-line has also been modified to display information about the replication security configuration. git-svn-id: https://svn.forgerock.org/opendj/trunk@3215 41b1ffd8-f28e-4786-ab96-9950f0a78031
-
… use SSL connection options. The reason for the error is that LDAPConnectionArgumentParser does not properly support initialization of the LDAPConnectionOption's SSL connection factory. This change involves adding some state variables to LDAPConnectionConsoleInteraction that are populated during the session git-svn-id: https://svn.forgerock.org/opendj/trunk@3214 41b1ffd8-f28e-4786-ab96-9950f0a78031
-
object class and config definition rather than relying on the generic configuration. This makes it easier to use through dsconfig. git-svn-id: https://svn.forgerock.org/opendj/trunk@3211 41b1ffd8-f28e-4786-ab96-9950f0a78031
-
… statements by allowing options to be grouped logically by type. Many of the utilities arguments have grown to such an extent that it is difficult to sort through the various types of arguments to find what you are looking for. For instance the usage statement for the task schedulable arguments are mixed with the LDAP connection arguments which makes them difficult to ignore if they want to use the tool in offline mode. This code also make consistent the position of standard options (e.g. help, version, quiet, verbose) within usage statements. ArgumentParser (and SubCommandArgumentParse) have 4 built-in groups: General Options (for help and version commands), LDAP Connection Options (e.g. host, port), Utility Input/Output Options (e.g. quiet, verbose, no-prompt, argument file etc) and default options (for ungrouped arguments). The default group appears first in the list without a header to maintain backward consistency. Other groups can be defined for a usage statement by supplying an ArgumentGroup to the addArgument() method. git-svn-id: https://svn.forgerock.org/opendj/trunk@3210 41b1ffd8-f28e-4786-ab96-9950f0a78031
-
git-svn-id: https://svn.forgerock.org/opendj/trunk@3209 41b1ffd8-f28e-4786-ab96-9950f0a78031
-
isIndexed API in the backend to ensure that all referenced attributes are indexed for equality. git-svn-id: https://svn.forgerock.org/opendj/trunk@3207 41b1ffd8-f28e-4786-ab96-9950f0a78031
-
determine whether a given attribute is indexed in a specified manner, or that can be used to determine whether a specified filter is indexed. At present, all backends except the JE backend and the replication backend are considered always indexed for all operations. The JE backend is only considered indexed based on its index configuration. The replication backend is never considered indexed. Update the following components to make use of this new isIndexed capability: - The DSEE-compatible access control handler will now log a warning message at startup if it detects that there is no presence index for the aci attribute, which can make startup take a long time on a big database. - The group manager will now log a warning message at startup if any of the group implementation filters are unindexed, which can make startup take a long time on a big database. - The referential integrity plugin now requires that all of the attributes for which referential integrity is to be maintained must be configured with equality indexes. - The unique attribute plugin now requires that all of the attributes for which uniqueness is to be enforced must be configured with equality indexes. This commit also updates the LDIF backend so that it is possible to indicate via configuration whether its base DNs should be registered as public or private base DNs. The LDIF backend used as the admin root has been updated so that it is considered a private backend. The replication backend has also been updated so that it is considered a private backend. git-svn-id: https://svn.forgerock.org/opendj/trunk@3206 41b1ffd8-f28e-4786-ab96-9950f0a78031
25 Sep, 2007
14 commits
-
git-svn-id: https://svn.forgerock.org/opendj/trunk@3205 41b1ffd8-f28e-4786-ab96-9950f0a78031
-
git-svn-id: https://svn.forgerock.org/opendj/trunk@3204 41b1ffd8-f28e-4786-ab96-9950f0a78031
-
git-svn-id: https://svn.forgerock.org/opendj/trunk@3202 41b1ffd8-f28e-4786-ab96-9950f0a78031
-
Add some secret key handling code. git-svn-id: https://svn.forgerock.org/opendj/trunk@3200 41b1ffd8-f28e-4786-ab96-9950f0a78031
-
…end is always present. The adminRoot LDIF backend is initially populated with the admin container entries, except for the cn=Servers container. To avoid breaking the setup and dsreplication tools, I have changed things so that the absence of the cn=Servers container entry implies that the server is not yet configured as an ADS server. I have commented out code that is no longer applicable. git-svn-id: https://svn.forgerock.org/opendj/trunk@3199 41b1ffd8-f28e-4786-ab96-9950f0a78031
-
…n monitoring task in synchronous mode git-svn-id: https://svn.forgerock.org/opendj/trunk@3198 41b1ffd8-f28e-4786-ab96-9950f0a78031
-
The following changes are targetted to provide a CLI view on the replication topology and on replication monitoring. A script-frindly option has been added to be able to parse more easily the output of this subcommand. git-svn-id: https://svn.forgerock.org/opendj/trunk@3195 41b1ffd8-f28e-4786-ab96-9950f0a78031
-
… future time or the magic '0' value indicating immediate execution. In both of these cases not the utility will exit immediately after scheduling the task git-svn-id: https://svn.forgerock.org/opendj/trunk@3193 41b1ffd8-f28e-4786-ab96-9950f0a78031
-
1. Update the configuration of the replication servers in the topology to point to the new replication servers. 2. In non-interactive mode, only display the error messages accessing the servers that were already registered before the command was launched. In general we will not be able to access the newly created server with the Global Administrator so this check should be done BEFORE registering the server in the ADS. git-svn-id: https://svn.forgerock.org/opendj/trunk@3191 41b1ffd8-f28e-4786-ab96-9950f0a78031
-
…ids a NullPointerException when we enable replication on a baseDN between two servers and another baseDN was already being replicated. git-svn-id: https://svn.forgerock.org/opendj/trunk@3190 41b1ffd8-f28e-4786-ab96-9950f0a78031
-
in the properties file, dsconfig interactive mode will not prompt for protocol. git-svn-id: https://svn.forgerock.org/opendj/trunk@3189 41b1ffd8-f28e-4786-ab96-9950f0a78031
-
- fix some race conditions in namingConflict test - add some cleanup at the end of ReplicationServerDynamicConfTest and IsolationTest - don't use anymore 2 statics in the replication code that could cause problem when in-core restart are done. - improve the shutdown by making sure that all threads are done before returning git-svn-id: https://svn.forgerock.org/opendj/trunk@3188 41b1ffd8-f28e-4786-ab96-9950f0a78031
-
…ling the corresponding entry in the task backend and printing log messages until the task is complete. If LDAP connection arguments are specified and no start time is specified the default behavior is to track the running task until it is finished executing. If a start time is specified, the task utilities will schedule the task and exit immediately. git-svn-id: https://svn.forgerock.org/opendj/trunk@3185 41b1ffd8-f28e-4786-ab96-9950f0a78031
-
better optimized, and do the same for SearchFilter.matchesEntryInternal and Entry.conformsToSchema. Also, fix a problem in the local backend operations where cancel requests were not being handled correctly. git-svn-id: https://svn.forgerock.org/opendj/trunk@3183 41b1ffd8-f28e-4786-ab96-9950f0a78031
24 Sep, 2007
9 commits
-
…ble file permission problems. A case where this can happen if the user configures a logger to set permission on the log file that will make it unwritable to OpenDS (ie, UNIX mode 555). This allows the user better realize the problem and take corrective action. Fix for issue 2107 git-svn-id: https://svn.forgerock.org/opendj/trunk@3182 41b1ffd8-f28e-4786-ab96-9950f0a78031
-
classes so that they use smaller method sizes, which allows the VM to better optimize the code. Also, move the code for processing each type of operation into the class for the associated operation rather than keeping it all in the LocalBackendWorkflowElement class. git-svn-id: https://svn.forgerock.org/opendj/trunk@3181 41b1ffd8-f28e-4786-ab96-9950f0a78031
-
This change implements the remaining required functionality for issue 1449. It adds client side support for enforcing referential integrity between components. git-svn-id: https://svn.forgerock.org/opendj/trunk@3179 41b1ffd8-f28e-4786-ab96-9950f0a78031
-
…ally. Previously the list of constraints was cached which prevented run-time changes from taking effect in sub-definitions. git-svn-id: https://svn.forgerock.org/opendj/trunk@3175 41b1ffd8-f28e-4786-ab96-9950f0a78031
-
…hod might never return. This will cause the server to dead lock when setting the file permissions using the UNIX chmod command. A particular case where this may happen is during log rotation on Java 5. Fix for issue 2116 git-svn-id: https://svn.forgerock.org/opendj/trunk@3174 41b1ffd8-f28e-4786-ab96-9950f0a78031
-
… used elsewhere in the admin framework. git-svn-id: https://svn.forgerock.org/opendj/trunk@3173 41b1ffd8-f28e-4786-ab96-9950f0a78031
-
git-svn-id: https://svn.forgerock.org/opendj/trunk@3171 41b1ffd8-f28e-4786-ab96-9950f0a78031
-
git-svn-id: https://svn.forgerock.org/opendj/trunk@3167 41b1ffd8-f28e-4786-ab96-9950f0a78031
-
…ckend maps. Supports a 'test' mode that can be used to test whether registration/deregistration operations will be acceptable. git-svn-id: https://svn.forgerock.org/opendj/trunk@3165 41b1ffd8-f28e-4786-ab96-9950f0a78031
23 Sep, 2007
1 commit
-
were not properly updated for modify DN operations. git-svn-id: https://svn.forgerock.org/opendj/trunk@3161 41b1ffd8-f28e-4786-ab96-9950f0a78031