02 Jun, 2014
1 commit
-
git-svn-id: https://svn.forgerock.org/openidm/trunk@3293 d98387aa-ee2c-4292-a9e6-504d2a719fd3
30 May, 2014
1 commit
-
Support reauth for any auth module configured in authentication.json. * AuthenticationService now handles requests on /authentication, replaciing AuthFilter which was not a filter, and did not fully handle reauth. * Authenticators are used from both JASPI auth modules and AuthenticationService to provide the authentication--either with Http headers in the case of the auth modules, or from the authcid in the HttpContext and the reauth header in the case of reauthentication. * AuthenticationService now satisfies the AuthenticationConfig service for the purposes of OSGiAuthFilterBuilder's access to the config to build the JASPI CAF. * The duplicative managed/user config at the top of the sample authentication.json files are now removed, thus satisfying OPENIDM-1781. git-svn-id: https://svn.forgerock.org/openidm/trunk@3282 d98387aa-ee2c-4292-a9e6-504d2a719fd3
29 May, 2014
2 commits
-
git-svn-id: https://svn.forgerock.org/openidm/trunk@3278 d98387aa-ee2c-4292-a9e6-504d2a719fd3
-
…trigger unassignmentOperations when assignment has been unassigned, update removeFromTarget to set String values to null. git-svn-id: https://svn.forgerock.org/openidm/trunk@3275 d98387aa-ee2c-4292-a9e6-504d2a719fd3
28 May, 2014
2 commits
-
git-svn-id: https://svn.forgerock.org/openidm/trunk@3268 d98387aa-ee2c-4292-a9e6-504d2a719fd3
-
git-svn-id: https://svn.forgerock.org/openidm/trunk@3266 d98387aa-ee2c-4292-a9e6-504d2a719fd3
27 May, 2014
3 commits
-
Additional decoupling of auth module role calculation and security context population from auth module validation code. Notably: * factor out basic auth code to allow PassthroughModule to support both basic auth and X-OpenIDM- header auth. * remove IWAPassthroughModule in favor of using auth module configuration to control order of execution * separate client cert auth into its own module, supporting an list of "allowedAuthenticationIdPatterns" to compare against the subject DN * remove static dependency on OSGIAuthnFilterBuilder for injection of OSGi artifacts - improves testability git-svn-id: https://svn.forgerock.org/openidm/trunk@3261 d98387aa-ee2c-4292-a9e6-504d2a719fd3
-
…ct - reviewed by Andi via Skype git-svn-id: https://svn.forgerock.org/openidm/trunk@3260 d98387aa-ee2c-4292-a9e6-504d2a719fd3
-
git-svn-id: https://svn.forgerock.org/openidm/trunk@3253 d98387aa-ee2c-4292-a9e6-504d2a719fd3
26 May, 2014
1 commit
-
git-svn-id: https://svn.forgerock.org/openidm/trunk@3251 d98387aa-ee2c-4292-a9e6-504d2a719fd3
23 May, 2014
2 commits
-
git-svn-id: https://svn.forgerock.org/openidm/trunk@3250 d98387aa-ee2c-4292-a9e6-504d2a719fd3
-
Update "make LDAP unavailable" instruction to rename file as chmod may not be sufficient for root-running openidm. git-svn-id: https://svn.forgerock.org/openidm/trunk@3249 d98387aa-ee2c-4292-a9e6-504d2a719fd3
22 May, 2014
1 commit
-
Add sample5b to demonstrate all-or-nothing compensation support. git-svn-id: https://svn.forgerock.org/openidm/trunk@3242 d98387aa-ee2c-4292-a9e6-504d2a719fd3
21 May, 2014
3 commits
-
…s" of duplicate assignments across roles. git-svn-id: https://svn.forgerock.org/openidm/trunk@3234 d98387aa-ee2c-4292-a9e6-504d2a719fd3
-
git-svn-id: https://svn.forgerock.org/openidm/trunk@3230 d98387aa-ee2c-4292-a9e6-504d2a719fd3
-
git-svn-id: https://svn.forgerock.org/openidm/trunk@3228 d98387aa-ee2c-4292-a9e6-504d2a719fd3
20 May, 2014
1 commit
-
git-svn-id: https://svn.forgerock.org/openidm/trunk@3218 d98387aa-ee2c-4292-a9e6-504d2a719fd3
16 May, 2014
1 commit
-
co-reviewed with Mike git-svn-id: https://svn.forgerock.org/openidm/trunk@3212 d98387aa-ee2c-4292-a9e6-504d2a719fd3
14 May, 2014
6 commits
-
…sword values. This is no longer necessary, as encrypted values are now being automatically decrypted as part of a sync. git-svn-id: https://svn.forgerock.org/openidm/trunk@3210 d98387aa-ee2c-4292-a9e6-504d2a719fd3
-
git-svn-id: https://svn.forgerock.org/openidm/trunk@3209 d98387aa-ee2c-4292-a9e6-504d2a719fd3
-
Provide additional detail on sync failures from managed object CRUD operations. Provide example compensation script to compensate for sync failures. git-svn-id: https://svn.forgerock.org/openidm/trunk@3207 d98387aa-ee2c-4292-a9e6-504d2a719fd3
-
… operation processing and added aliases for script configs. git-svn-id: https://svn.forgerock.org/openidm/trunk@3204 d98387aa-ee2c-4292-a9e6-504d2a719fd3
-
git-svn-id: https://svn.forgerock.org/openidm/trunk@3200 d98387aa-ee2c-4292-a9e6-504d2a719fd3
-
…s systems. Reviewed by Brendan git-svn-id: https://svn.forgerock.org/openidm/trunk@3196 d98387aa-ee2c-4292-a9e6-504d2a719fd3
13 May, 2014
4 commits
-
…t to OPENIDM-498 (Aggregated View) git-svn-id: https://svn.forgerock.org/openidm/trunk@3193 d98387aa-ee2c-4292-a9e6-504d2a719fd3
-
The changes included the following: [Revision r3076] [FR-154] [IDME-178][FR-163] Support Paged Search OperationOptions [IDME-116][FR-167] Support syncing ICF object class __ALL__ [IDME-114][FR-168] Support distinction between CREATE and UPDATE in Sync operation [IDME-179][FR-168] Support SyncToken update after empty change set [IDME-115][CR-3506] Map new OpenICF 1.4 exceptions to CREST exceptions. [IDME-181][CR-3506] Capture the RemoteWrappedException [IDME-191] Pre-Release of OpenICF git-svn-id: https://svn.forgerock.org/openidm/trunk@3192 d98387aa-ee2c-4292-a9e6-504d2a719fd3
-
git-svn-id: https://svn.forgerock.org/openidm/trunk@3187 d98387aa-ee2c-4292-a9e6-504d2a719fd3
-
…ent scripts configured in manage role assignment definitions. git-svn-id: https://svn.forgerock.org/openidm/trunk@3180 d98387aa-ee2c-4292-a9e6-504d2a719fd3
12 May, 2014
3 commits
-
git-svn-id: https://svn.forgerock.org/openidm/trunk@3172 d98387aa-ee2c-4292-a9e6-504d2a719fd3
-
git-svn-id: https://svn.forgerock.org/openidm/trunk@3171 d98387aa-ee2c-4292-a9e6-504d2a719fd3
-
git-svn-id: https://svn.forgerock.org/openidm/trunk@3170 d98387aa-ee2c-4292-a9e6-504d2a719fd3
08 May, 2014
2 commits
-
This doesn't get the audit-sample working yet, there are other issues (as noted in OPENIDM-1801) that still need to be resolved git-svn-id: https://svn.forgerock.org/openidm/trunk@3163 d98387aa-ee2c-4292-a9e6-504d2a719fd3
-
Relax restrictions on GET requests, so that the presence of a custom header isn't necessary git-svn-id: https://svn.forgerock.org/openidm/trunk@3162 d98387aa-ee2c-4292-a9e6-504d2a719fd3
07 May, 2014
1 commit
-
…orkflow/triggerWorkflowFromSync.js git-svn-id: https://svn.forgerock.org/openidm/trunk@3158 d98387aa-ee2c-4292-a9e6-504d2a719fd3
05 May, 2014
1 commit
-
ref: http://sources.forgerock.org/cru/CR-3415#c26436 git-svn-id: https://svn.forgerock.org/openidm/trunk@3154 d98387aa-ee2c-4292-a9e6-504d2a719fd3
02 May, 2014
2 commits
-
README for provisioners folder, describing where each is used in the samples git-svn-id: https://svn.forgerock.org/openidm/trunk@3150 d98387aa-ee2c-4292-a9e6-504d2a719fd3
-
Updating several of the policy functions to check to see if the "REQUIRED" requirement has been specified, using a sort of policy function "chaining" mechanism. git-svn-id: https://svn.forgerock.org/openidm/trunk@3149 d98387aa-ee2c-4292-a9e6-504d2a719fd3
01 May, 2014
1 commit
-
…e have under "provisioners/". Ref: http://sources.forgerock.org/cru/CR-3415#c26314 git-svn-id: https://svn.forgerock.org/openidm/trunk@3148 d98387aa-ee2c-4292-a9e6-504d2a719fd3
30 Apr, 2014
2 commits
-
…oper location and so changes to the ui folder were not being recognized. Reviewed in person with Brendan git-svn-id: https://svn.forgerock.org/openidm/trunk@3145 d98387aa-ee2c-4292-a9e6-504d2a719fd3
-
git-svn-id: https://svn.forgerock.org/openidm/trunk@3143 d98387aa-ee2c-4292-a9e6-504d2a719fd3