org.forgerock / org.forgerock.opendj

30 Aug, 2011

1 commit

29 Aug, 2011

1 commit

19 Aug, 2011

1 commit

18 Aug, 2011

1 commit

  • bd256e2e   Initial checkpoint of work for OPENDJ-262: Implement pass through authentication (PTA) ... Browse Dir » 
    Refactor PasswordPolicy implementation so that we now have a common parent type, "AuthenticatioPolicy", which will act as a common entry point for all authentication policies. In particular, password policies can be thought of as a specific type of authentication policy: one where authentication and the user's credentials are managed locally. PTA can be thought of as a non-local authentication policy: the password is managed by a third party.

With this change we still only have one type of authentication policy and no attempt has been made to refactor code which uses it. More specifically, code such as the local backend WFE just type-casts the authentication policy to a password policy.

Another implication of this change is that sub-entry based password policies now automatically inherit run-time changes made to the default password policy, whereas before a server restart was required.


git-svn-id: https://svn.forgerock.org/opendj/trunk@7192 41b1ffd8-f28e-4786-ab96-9950f0a78031
    matthew
     

29 Jul, 2011

1 commit

28 Jul, 2011

1 commit

18 Jul, 2011

1 commit

  • ff7407dc   Fix OPENDJ-233: Integrate Samba password sync plugin into OpenDJ (contributed by Profiq S.R.O) ... Browse Dir » 
    Many thanks to Nemanja Lukic and his colleagues at Profiq S.R.O for this kind contribution.

The contribution has been modified as follows:

*) integrate as core feature of OpenDJ, not extension
*) rename package names accordingly
*) remove dependency on BouncyCastle.org MD4 implementation, by porting implementation to OpenDJ
*) re-implement setOddParity method in order to avoid potential copyright issues with existing implementations.
*) simplify configuration model and validation.

TODO:

*) support u: and dn: authid in password modify extended operation.


git-svn-id: https://svn.forgerock.org/opendj/trunk@7116 41b1ffd8-f28e-4786-ab96-9950f0a78031
    matthew
     

10 Jun, 2011

1 commit

09 Jun, 2011

2 commits

01 Jun, 2011

1 commit

30 May, 2011

3 commits

12 May, 2011

1 commit

10 May, 2011

1 commit

07 Apr, 2011

1 commit

  • 660ec812   Fix OPENDJ-112 - The Changelog virtual attribute appears in al entries, should o… ... Browse Dir » 
    …nly apply to rootDSE.
The changes introduce a scope in the VirtualAttributeRule. The default is Whole_Subtree.
The changelog virtual attributes are now registered with a BASE_OBJECT scope and "" base DNs, meaning the rootDSE only.
Also each virtual attribute provider override the hasValue() method for optimization and avoiding computing the values and throwing them away.


git-svn-id: https://svn.forgerock.org/opendj/trunk@6817 41b1ffd8-f28e-4786-ab96-9950f0a78031
    ludo
     

24 Mar, 2011

1 commit

25 Feb, 2011

1 commit

27 Jan, 2011

1 commit

26 Nov, 2010

1 commit

05 Nov, 2010

2 commits

26 Oct, 2010

2 commits

  • ab4da311   Update copyright for changed file. ... Browse Dir » 
    git-svn-id: https://svn.forgerock.org/opendj/trunk@6642 41b1ffd8-f28e-4786-ab96-9950f0a78031
    ludo
     
  • c295d24a   Resolves Enhancement request OpenDJ-5: Support Linux md5 crypt storage for password ... Browse Dir » 
    This changes are adding support for the BSD MD5 crypt hash as part of the CRYPT password storage scheme.
A new parameter has been added to the configuration of the storage scheme to select whether new passwords should be hashed with the unix algo (default) or the md5 one.
When it comes to authentication, the scheme is able to detect the algo (based on the $1$ prefix) and match appropriately.
Unit tests have been added, including test again passwords already hashed on Linux systems.

git-svn-id: https://svn.forgerock.org/opendj/trunk@6641 41b1ffd8-f28e-4786-ab96-9950f0a78031
    ludo
     

17 Sep, 2010

4 commits

18 Aug, 2010

2 commits

30 Jul, 2010

3 commits

  • a3e04413   Implements a configurable limit in the number of persistent searches a server can handle. ... Browse Dir » 
    git-svn-id: https://svn.forgerock.org/opendj/trunk@6558 41b1ffd8-f28e-4786-ab96-9950f0a78031
    ludovicp
     
  • b5b3ffea   Implements index analysis features. ... Browse Dir » 
    There are 2 components:
Index Filter Analyzer : Part of DatabaseEnvironmentProvider, it gathers search filter statistics and displays the index filter, number of hits, max matching entries, and a message. Compound filters are broken down to their basic elements. f an index was not utilized while evaluating the search filter, max matching entries will be -1 and a diagnostic message will be included. The monitor entry also includes when the analyzer was enabled along with the number of total index and unindexed searches processed. 

Attribute Index Analysis, part of the dbtest tool. It cursors through all the indexes and finds the number of 100%, 95%, 90%, and 80% undefined index keys.  It also displays the value of the undefined keys along with the total number of keys in the index. The process is currently single threaded and might not scale to 10 mil+ DBs. However, this is currently unavoidable without the ability for JE to cursor through the records in log order.


git-svn-id: https://svn.forgerock.org/opendj/trunk@6555 41b1ffd8-f28e-4786-ab96-9950f0a78031
    ludovicp
     
  • e883d7f5   Implements a disk space thresholds feature, preventing the server from crashing … ... Browse Dir » 
    …or exiting of disks full.

Each instance of the monitor have two thresholds: "low" and "full". Other components can register their own handlers if they wish to receive notifications when the thresholds are reached. It extends the MonitorProvider interface and utilizes the update interval mechanism to poll the free disk space. The current free space and state of all monitor instances are exposed through the cn=monitor interface under the cn=Disk Space Monitor branch. The only component using the monitor now is the JE backend. When the "low" threshold is reached, write operations will only be permitted to users with the BYPASS_LOCKDOWN privilege. When the "full" threshold is reached, the backend is placed in read-only mode. The default "low" and "full" thresholds are 100 MB and 10MB respectively. Along with the new feature, this patch also added two privileges: SERVER_LOCKDOWN and BYPASS_LOCKDOWN. Any user with the SERVER_LOCKDOWN privilege can put and take the server out of lockdown mode. Any user with the BYPASS_LOCKDOWN mode can bypass lockdown mode. This was restricted to only "root" users before. In addition, the MonitorProvider abstract class no longer extends DirectoryThread. It now uses a static single threaded ScheduledExecutorService to update provider states. Any provider that wishes to have its state updated periodically needs to register its updater runnable with the scheduleUpdate method.

git-svn-id: https://svn.forgerock.org/opendj/trunk@6549 41b1ffd8-f28e-4786-ab96-9950f0a78031
    ludovicp
     

25 Jun, 2010

1 commit

07 Jun, 2010

2 commits

31 May, 2010

3 commits