------------------------------------------------------------------------ r3057 | matthew_swift | 2007-09-14 02:00:57 -0700 (Fri, 14 Sep 2007) | 1 line Fix bug in aggregation property change listener call-back which was incorrectly failing when any property was modified, not just when the "disabled" property was modified. ------------------------------------------------------------------------ r3058 | lutoff | 2007-09-14 02:09:16 -0700 (Fri, 14 Sep 2007) | 2 lines Fix for issue #2256 (limit the number of prompt in status CLI) status cli will now exit after 3 connection failure. ------------------------------------------------------------------------ r3059 | matthew_swift | 2007-09-14 02:28:12 -0700 (Fri, 14 Sep 2007) | 1 line Add support to the admin framework code generation scripts so that properties can define their own syntax specific getters and setters. ------------------------------------------------------------------------ r3060 | matthew_swift | 2007-09-14 02:34:00 -0700 (Fri, 14 Sep 2007) | 14 lines Modify the aggregation definition property stylesheet to generate two server-side getter methods for each aggregation property. The first is a "default" getter of the form: String getXXX() SortedSet getXXX() Where XXX is the name of the property. This getter follows the same pattern as all other property getters. In this case it returns a String (or set of Strings) containing the common name(s) of the referenced component(s). The second server-side getter is of the form: DN getXXXDN() SortedSet getXXXDNs() Where again XXX is the name of the property. This getter returns the distinguished name(s) associated with the referenced component(s). It is useful on the server-side where component implementations need to retrieve referenced implementations from a DirectoryServer table based on their DN. ------------------------------------------------------------------------ r3061 | matthew_swift | 2007-09-14 03:22:17 -0700 (Fri, 14 Sep 2007) | 20 lines Avoid managed object definition initialization dependency problems. Using features like inherited default values and aggregation properties it is quite straightforward to encounter initialization dependency problems. For example: the global configuration will contain an aggregation property which references the default password policy. This aggregation definition is defined using a managed object path which, when decoded, contains a reference to the root configuration and its "password-policy" relation. This is what happens during initialization of the root configuration: 1) load the root configuration definition class and start constructing and registering its relation definitions 2) initialize the global configuration relation definition. This forces the JVM to load the global configuration definition 3) the global configuration contains an aggregation property definition which references a default password policy. Password policies are contained in the "password-policy" relation of the root configuration. Since the aggregation property definition references the password policy via a managed object path, decoding the path forces the root configuration definition to be loaded and its "password-policy" relation definition to be retrieved 4) the lookup of the "password-policy" relation definition fails because the root configuration has not finished initializing and the relation has not been constructed yet. The fix is to "delay" decoding of inter-component references such as these until all the associated classes are loaded and initialized. To that end, property definitions and their default behaviors now have a new method called "initialize()". In addition, each property definition and default behavior has been modified so that any managed object paths and property definitions that they depend upon are not decoded during construction. This is now performed by the initialize() method. The admin framework class loader provider has been modified so that it now performs this two-phase initialization: 1) load and instantiate each managed object definition class, forcing all property definitions and relation definitions to be constructed and registered 2) initialize each managed object definition instance: the instance invokes initialize() on each of its property definitions and default behaviors. This will force all inter-component references to be decoded and validated. A positive side-effect of this change is that any inter-component references which have not been specified properly in their XML definition will be flagged during server start-up, rather than on-demand. ------------------------------------------------------------------------ r3062 | matthew_swift | 2007-09-14 04:06:06 -0700 (Fri, 14 Sep 2007) | 1 line Add support for indenting the heading separator and use it in menus to emphasis the option numbers. ------------------------------------------------------------------------ r3063 | kenneth_suter | 2007-09-14 06:03:26 -0700 (Fri, 14 Sep 2007) | 1 line Fixed error in reversion part of script ------------------------------------------------------------------------ r3064 | smaguin | 2007-09-14 06:12:00 -0700 (Fri, 14 Sep 2007) | 2 lines fix a bug for logs naming ------------------------------------------------------------------------ r3065 | smaguin | 2007-09-14 06:13:05 -0700 (Fri, 14 Sep 2007) | 2 lines new tests on referntial integrity plugin ------------------------------------------------------------------------ r3066 | dugan | 2007-09-14 06:57:27 -0700 (Fri, 14 Sep 2007) | 1 line Fix problem were a plugin's plugin types were not being re-registered after changing them with dsconfig. ------------------------------------------------------------------------ r3067 | lutoff | 2007-09-14 08:09:56 -0700 (Fri, 14 Sep 2007) | 1 line fix for issue #2257 (dsconfig/security: truststore doesn't seem to be taken into account when a a keystore is specfiied) ------------------------------------------------------------------------ r3068 | neil_a_wilson | 2007-09-14 08:51:17 -0700 (Fri, 14 Sep 2007) | 6 lines Revert a change (committed in revision 3066) that added support for changing the plugin type values on the fly and update the configuration definition to indicate that this is not supported and to note that changes to the defined plugin types will only take effect if the plugin is disabled and re-enabled or the server is restarted. ------------------------------------------------------------------------ r3069 | kenneth_suter | 2007-09-14 09:03:44 -0700 (Fri, 14 Sep 2007) | 1 line finished registering the upgrade/reversion issue; fixed some typos and minor issues preventing the upgrader from notifying the user about the issue ------------------------------------------------------------------------ r3070 | matthew_swift | 2007-09-14 09:58:35 -0700 (Fri, 14 Sep 2007) | 2 lines Add preliminary support for configuring aggregation property values. This change simply allows a user to select the values they want from a list of available components (rather than manually having to type the names in). This change does not allow users to view a property summary, create a new component on the fly, or enabled components for use: these features will be added next. ------------------------------------------------------------------------ r3071 | boli | 2007-09-14 10:19:24 -0700 (Fri, 14 Sep 2007) | 4 lines Fixed a issue where changing log categories and/or severity levels resulted in exceptions. Fix for issue 2066 ------------------------------------------------------------------------ r3072 | neil_a_wilson | 2007-09-14 10:54:37 -0700 (Fri, 14 Sep 2007) | 3 lines Disable the ProtocolWindowTest.saturateQueueAndRestart test case because it is failing pretty consistently, especially on Java 6. ------------------------------------------------------------------------ r3073 | coulbeck | 2007-09-14 11:05:55 -0700 (Fri, 14 Sep 2007) | 1 line Add debugging for issue 2256. ------------------------------------------------------------------------ r3075 | boli | 2007-09-14 13:34:42 -0700 (Fri, 14 Sep 2007) | 4 lines Fixed a issue where removing debug/error loggers after a in-core server restart results in a NullPointerException. Fix for issue 2259 ------------------------------------------------------------------------ r3076 | neil_a_wilson | 2007-09-14 14:10:37 -0700 (Fri, 14 Sep 2007) | 8 lines Add support for the groupOfEntries group type as defined in draft-findlay-ldap-groupofentries. Entries with the groupOfEntries object class should be treated in a manner that is virtually identical to entries with the groupOfNames object class (technically, groupOfNames does not allow zero-member groups, but the OpenDS implementation does allow this). OpenDS Issue Number: 2277 ------------------------------------------------------------------------ r3077 | boli | 2007-09-14 15:24:43 -0700 (Fri, 14 Sep 2007) | 4 lines Fixed an issue where the size based rotation policy does not account for the size of existing log files when inforcing the policy. Fix for issue 2272 ------------------------------------------------------------------------ r3078 | matthew_swift | 2007-09-15 13:33:33 -0700 (Sat, 15 Sep 2007) | 6 lines Performance improvements to server-side admin framework. The strongly typed server-side APIs now retrieve and cache their property values during construction so that subsequent calls to property getters no longer have to repeatedly access the underlying ServerManagedObject. This avoids having to repeatedly perform hash-table look-ups in the ServerManagedObject and, in the case of single-valued properties, temporary construction of iterators. I have also modified the ServerManagedObject#getPropertyValues() method to return an UnmodifiableSortedSet rather than a defensive copy and updated the javadoc in the generated server-side getters to reflect that the returned set is unmodifiable. ------------------------------------------------------------------------ r3079 | pgamba | 2007-09-17 01:00:37 -0700 (Mon, 17 Sep 2007) | 1 line Fixes repl init and total update #2253 #845 #1733 ------------------------------------------------------------------------ r3080 | pgamba | 2007-09-17 04:13:53 -0700 (Mon, 17 Sep 2007) | 1 line Fix 1891 - remove clone of received entries ------------------------------------------------------------------------ r3081 | kenneth_suter | 2007-09-17 08:27:39 -0700 (Mon, 17 Sep 2007) | 6 lines This commit is for supporting of task scheduling in the future (right now tasks can only be scheduled to start immediately) for tasks that support scheduling. Start time is specified by including -t/--startTime along with a date string of format 'YYYYMMDDhhmmss'. - import-ldif short version of templateFile arg was changed to -A to make way for the use -t as startTime - date/string formatting and parsing code centralized in StaticUtils for consistency between task scheduling code and exiting StopDS scheduling code - manage-task -t/--task option was changed to -i/--info ------------------------------------------------------------------------ r3082 | matthew_swift | 2007-09-17 08:43:08 -0700 (Mon, 17 Sep 2007) | 5 lines Implement a new configuration definition called "TopCfgDefn" which acts as the parent of all other configuration definitions. This is analogous to the the "top" object class in LDAP. The principle use of the TopCfgDefn is to make it easier for applications to determine all the possible types of managed object the administration framework supports. The TopCfgDefn is not generated automatically from XML. Instead it is located in the org.opends.server.admin package together with the base client-side and server-side interfaces (ConfigurationClient and Configuration respectively). ------------------------------------------------------------------------ r3083 | jvergara | 2007-09-17 09:54:34 -0700 (Mon, 17 Sep 2007) | 4 lines Fix for issue 2291. Fix copy paste errors. ------------------------------------------------------------------------ r3084 | ugaston | 2007-09-17 10:04:39 -0700 (Mon, 17 Sep 2007) | 1 line Update totalupdate testsuite with dsreplication call ------------------------------------------------------------------------ r3085 | mkeyes | 2007-09-17 10:21:35 -0700 (Mon, 17 Sep 2007) | 4 lines Fixed the functional test lib function that unconfigures an ssl connection. Previously, the ldaps connection handler was diabled and the key-manager-provider-dn and the trust-manager-provider-dn values were rest all in one dsconfig operation. Now the ldapsconnection handler is disabled in one dsconfig operation and the key-manager-provider-dn and the trust-manager-provider-dn values are reset in a separate dsconfig operation. ------------------------------------------------------------------------ r3086 | david_page | 2007-09-17 10:31:38 -0700 (Mon, 17 Sep 2007) | 2 lines Add support for MAC key entry type. Similar to Cipher key entry; however, caller must maintain key identifier (string), e.g., in backup directory, in order to verify signature. TODO: investigate prefixing MAC signed data with key identifier, and suffixing with signature, for both byte[] and stream. This enhancement will require wrapping the Mac API. ------------------------------------------------------------------------ r3087 | mkeyes | 2007-09-17 11:10:38 -0700 (Mon, 17 Sep 2007) | 2 lines Added some functional tests for Issue 1830. ------------------------------------------------------------------------ r3088 | mkeyes | 2007-09-17 11:11:50 -0700 (Mon, 17 Sep 2007) | 2 lines Fixed a comment for clarity in the functional test logs. ------------------------------------------------------------------------ r3089 | neil_a_wilson | 2007-09-17 12:21:15 -0700 (Mon, 17 Sep 2007) | 10 lines Add a new build-tools source stub for the netscape.ldap.LDAPSocketFactory class that is part of the Mozilla LDAP SDK for Java. Also, use this source stub to create the org.opends.server.protocols.internal.InternalMozillaLDAPSocketFactory class which implements that interface and allows users to more easily use the Mozilla LDAP SDK for Java to invoke internal operations in the server. Note that the source stub is used only to allow our code to compile. Anyone that wants to use the Mozilla LDAP SDK for Java to perform internal operations will need to supply the full library containing the LDAP SDK for Java. ------------------------------------------------------------------------ r3090 | jvergara | 2007-09-17 12:24:03 -0700 (Mon, 17 Sep 2007) | 2 lines Only display the 'Base DN initialized successfully.' if we pass the displayProgress flag. ------------------------------------------------------------------------ r3091 | jvergara | 2007-09-17 12:26:05 -0700 (Mon, 17 Sep 2007) | 3 lines Fix for issue 2293 - dsreplication log messages not correct. Use the proper server in the progress message. ------------------------------------------------------------------------ r3092 | david_page | 2007-09-17 14:18:20 -0700 (Mon, 17 Sep 2007) | 3 lines 1. Fix API type error. 2. Add testcase to check that cached key is reused for successive encryptions that request the same algorithm and key length (instead of generating another key). ------------------------------------------------------------------------ r3093 | arnaud_lacour | 2007-09-17 14:32:10 -0700 (Mon, 17 Sep 2007) | 1 line fix for invalid default staf config for the email service ------------------------------------------------------------------------ r3094 | coulbeck | 2007-09-17 15:13:18 -0700 (Mon, 17 Sep 2007) | 1 line Spelling of 'occurred'. ------------------------------------------------------------------------ r3095 | smaguin | 2007-09-18 07:09:58 -0700 (Tue, 18 Sep 2007) | 2 lines remove issue 2259 ------------------------------------------------------------------------ r3096 | matthew_swift | 2007-09-18 08:27:50 -0700 (Tue, 18 Sep 2007) | 2 lines Modify the aggregation definition support to permit multiple source "enabled" boolean properties. This is useful in components such as the LDAP connection handler where the referenced key/trust manager must be enabled only if the connection handler is enabled and if it is using SSL. ------------------------------------------------------------------------ r3097 | al_xipe | 2007-09-18 11:36:30 -0700 (Tue, 18 Sep 2007) | 1 line removed the integration tests. This test suite is completely ported in the functional test suite. No loss of coverage here. ------------------------------------------------------------------------ r3098 | coulbeck | 2007-09-18 11:37:07 -0700 (Tue, 18 Sep 2007) | 3 lines Fix for issues 2282 and 2285. Do not check ADS certificate validity period. ------------------------------------------------------------------------ r3099 | jvergara | 2007-09-18 14:25:31 -0700 (Tue, 18 Sep 2007) | 4 lines Fix for issue 2307. Use the new option for the template file. ------------------------------------------------------------------------ r3100 | neil_a_wilson | 2007-09-18 14:28:58 -0700 (Tue, 18 Sep 2007) | 4 lines Fix a problem that could prevent monitor providers that support periodic updates from being started. Also, add a layer of protection against uncaught exceptions from the MonitorProvider.updateMonitorData() method. ------------------------------------------------------------------------ r3101 | jvergara | 2007-09-18 15:58:30 -0700 (Tue, 18 Sep 2007) | 2 lines Fix for 2293. ------------------------------------------------------------------------ r3102 | kenneth_suter | 2007-09-18 16:33:07 -0700 (Tue, 18 Sep 2007) | 1 line commented out broken checkstyle invocation ------------------------------------------------------------------------ r3103 | kenneth_suter | 2007-09-18 16:41:27 -0700 (Tue, 18 Sep 2007) | 1 line removed integration test artifacts ------------------------------------------------------------------------ r3104 | matthew_swift | 2007-09-18 17:31:06 -0700 (Tue, 18 Sep 2007) | 6 lines More changes relating to issue 1449: aggregation support. This change adds some niceness to dsconfig so that it will ask users if they want to enable a referenced component which is currently disabled. If the user says yes, dsconfig will enable the referenced component and commit the change. If this fails (e.g. the current state of the component means that it cannot be enabled), the user is given the opportunity to edit the properties of the component in order to fix the problems. Users a free to cancel out at any moment. As part of this change I also refactored some of the error handling. One advantage of this is that if a problem occurs while using dsconfig non-interactively, more helpful messages will be displayed in certain situations. For example, if there are missing mandatory properties, a table is displayed showing the mandatory properties and their syntax. ------------------------------------------------------------------------ r3105 | kenneth_suter | 2007-09-18 17:49:27 -0700 (Tue, 18 Sep 2007) | 1 line Fix for issue 2245 in which duplicate log entries were being written to the task for persistence by the backend and causing problems. I've also prepended the message timestamp and message count numbers to make sure that the log messages are unique ------------------------------------------------------------------------ r3107 | pgamba | 2007-09-19 02:22:21 -0700 (Wed, 19 Sep 2007) | 1 line #793 / Ability to search the replication server db ------------------------------------------------------------------------ r3108 | gbellato | 2007-09-19 05:15:36 -0700 (Wed, 19 Sep 2007) | 4 lines Fix for 2234 : NullPointerException if multimaster domain created for non defined suffix The fix if simply to avoid null pointer exception and to prevent creation of replication domain on base-dn that are not part of any backend. ------------------------------------------------------------------------ r3110 | matthew_swift | 2007-09-19 07:10:04 -0700 (Wed, 19 Sep 2007) | 1 line Add the ability to query a managed object path's name. ------------------------------------------------------------------------ r3111 | matthew_swift | 2007-09-19 07:16:12 -0700 (Wed, 19 Sep 2007) | 1 line Partial fix for issue 1449: add support in dsconfig for dynamically creating new components when editing aggregation properties. ------------------------------------------------------------------------ r3112 | jvergara | 2007-09-19 07:40:07 -0700 (Wed, 19 Sep 2007) | 2 lines After some discussions it has been decided to merge the setup and uninstall commands so that we have the behavior that we had before. So with this changes, in order to work in CLI mode the option --cli must be specified. ------------------------------------------------------------------------ r3113 | neil_a_wilson | 2007-09-19 08:05:28 -0700 (Wed, 19 Sep 2007) | 3 lines Update the SystemInfoMonitorProvider to add support for listing the JVM arguments used to run the server. ------------------------------------------------------------------------ r3114 | jvergara | 2007-09-19 08:55:37 -0700 (Wed, 19 Sep 2007) | 2 lines Only display the warning message informing that there were errors reading the configuration of the servers in the ADS when the ADS already existed. ------------------------------------------------------------------------ r3115 | lutoff | 2007-09-19 09:02:22 -0700 (Wed, 19 Sep 2007) | 1 line fix for issue #2226 (Typo in upgrade --help) ------------------------------------------------------------------------ r3118 | jvergara | 2007-09-19 09:35:26 -0700 (Wed, 19 Sep 2007) | 2 lines When the user provides both the global administrator and the server specific authentication in non-interactive mode when enabling replication, try if the global administrator authentication can be used and prefer it to the server specific one. ------------------------------------------------------------------------ r3119 | kenneth_suter | 2007-09-19 10:03:37 -0700 (Wed, 19 Sep 2007) | 8 lines This commit would clarifies the local operation vs. task scheduling behavior by: Printing a helpful error message if the user provides a start time without LDAP connection information. Printing a helpful error message if the user tries to provide LDAP connection information without a the startTime option. Allows the user to schedule a task for immediate execution in the server by providing the startTime argument value of '0' in addition to a numberic value in 'YYYYMMDDhhmmss'. ------------------------------------------------------------------------ r3120 | neil_a_wilson | 2007-09-19 10:05:42 -0700 (Wed, 19 Sep 2007) | 10 lines Add a new monitor provider that can be used to monitor memory usage within the JVM, including: - The total number of garbage collections (per memory pool) - The total duration of all garbage collections (per memory pool) - The averge duration for a garbage collection (per memory pool) - The duration of the most recent garbage collection (per memory pool) - The current size of each memory region - The size of each memory region after the last garbage collection ------------------------------------------------------------------------ r3121 | abobrov | 2007-09-19 10:35:25 -0700 (Wed, 19 Sep 2007) | 3 lines - add Mac native application bundles for QuickSetup, Uninstall and StatusPanel. note that these bundles are not self contained and cannot be arbitrary moved outside of OpenDS distribution or installation location. ------------------------------------------------------------------------ r3122 | coulbeck | 2007-09-19 14:17:12 -0700 (Wed, 19 Sep 2007) | 2 lines Fix for issue 2297: dsreplication enable No reachable peer in the domain. Move up the code that seeds the trust store so it happens before replication is enabled (as per gui setup equivalent code). ------------------------------------------------------------------------ r3123 | jvergara | 2007-09-19 15:28:36 -0700 (Wed, 19 Sep 2007) | 3 lines Fix a copy paste typo that made that there was a duplicate replication error return code. Eliminate some progress messages in resetGenerationId method. ------------------------------------------------------------------------ r3124 | jvergara | 2007-09-19 15:45:37 -0700 (Wed, 19 Sep 2007) | 2 lines Adapt the Installer class with the changes in the interface of import-ldif. ------------------------------------------------------------------------ r3125 | abobrov | 2007-09-19 15:58:07 -0700 (Wed, 19 Sep 2007) | 4 lines - Use runtime casts and casted instanceof to workaround related bugs in JDK versions prior to 1.5.0_08. These changes were ok'ed by Matt on condition that once Mac users have fixed JDK release i agree to track and remove all that "just plain ugly" stuff. ------------------------------------------------------------------------ r3126 | jdemendi | 2007-09-20 00:08:29 -0700 (Thu, 20 Sep 2007) | 22 lines Before the fix I was registering the workflows with the server whenever a backend was registered with the server (in the automatic configuration mode). However when a new base DN was added to an existing backend, the corresponding workflow was not created nor registered with the server! So I have moved the workflow creation and registration to the DirectoryServer.registerBaseDN() method. That way, any change to the backends and/or backend baseDNs are taken into account and the workflows are updated accordingly: - Workflows are created and registered with the server 1) at server startup for each and every enabled backend 2) when a backend is dynamically added or enabled 3) when a backend baseDN is added to an enabled backend - Workflows are deregistered and removed when 1) server is shutting down 2) a backend is disabled 3) a backend baseDN is removed --This line, and these below, wll be ignored-- M tests/unit-tests-testng/src/server/org/opends/server/core/NetworkGroupTest.java M src/server/org/opends/server/workflowelement/localbackend/LocalBackendWorkflowElement.java M src/server/org/opends/server/core/DirectoryServer.java M src/server/org/opends/server/extensions/ConfigFileHandler.java M src/server/org/opends/server/backends/RootDSEBackend.java ------------------------------------------------------------------------ r3127 | pgamba | 2007-09-20 02:11:13 -0700 (Thu, 20 Sep 2007) | 1 line #2271 severe errors in logs after replication config ------------------------------------------------------------------------ r3128 | pgamba | 2007-09-20 03:25:24 -0700 (Thu, 20 Sep 2007) | 1 line #2271 severe errors in logs after replication config - remove inconsistent error message when retrieving genID ------------------------------------------------------------------------ r3129 | matthew_swift | 2007-09-20 05:06:25 -0700 (Thu, 20 Sep 2007) | 1 line Fix potential NPE in generated code. ------------------------------------------------------------------------ r3130 | matthew_swift | 2007-09-20 05:07:10 -0700 (Thu, 20 Sep 2007) | 1 line Make sure that constraints are enforced when decoding managed objects in unit tests. ------------------------------------------------------------------------ r3133 | gbellato | 2007-09-20 06:54:09 -0700 (Thu, 20 Sep 2007) | 6 lines Fix for 2244 : null pointer Exception in replication code. The problem was a missing test for a null value in the case of a modify operation with a replace with null mod. I've also added a test for this case. ------------------------------------------------------------------------ r3134 | pgamba | 2007-09-20 07:06:16 -0700 (Thu, 20 Sep 2007) | 1 line Fix a javadoc warning about non inherited searchBackend method ------------------------------------------------------------------------ r3135 | lutoff | 2007-09-20 07:35:30 -0700 (Thu, 20 Sep 2007) | 2 lines Fix for issue #582 (Need Client-Side Configuration File) ------------------------------------------------------------------------ r3136 | neil_a_wilson | 2007-09-20 08:14:04 -0700 (Thu, 20 Sep 2007) | 6 lines Correct the schema definitions so that we use attribute names of ds-cfg-plugin-order-post-synchronization-* rather than ds-cfg-plugin-order-synchronization-*. OpenDS Issue Number: 2308 ------------------------------------------------------------------------ r3137 | lutoff | 2007-09-20 08:16:52 -0700 (Thu, 20 Sep 2007) | 1 line Fix typo ------------------------------------------------------------------------ r3138 | coulbeck | 2007-09-20 08:22:04 -0700 (Thu, 20 Sep 2007) | 1 line Remove debug calls to Database#count during startup. ------------------------------------------------------------------------ r3139 | lutoff | 2007-09-20 08:34:02 -0700 (Thu, 20 Sep 2007) | 1 line Fix for issue #2313 (typo) ------------------------------------------------------------------------ r3141 | neil_a_wilson | 2007-09-20 09:31:33 -0700 (Thu, 20 Sep 2007) | 6 lines Fix a problem with the JE import code in which an exception will be thrown if there are more than 50 entries in the LDIF data that contain one or more descendants. OpenDS Issue Number: 2256 ------------------------------------------------------------------------ r3142 | pgamba | 2007-09-20 09:46:22 -0700 (Thu, 20 Sep 2007) | 1 line Fix ReplicationTestServer failure by removing all entries before starting ------------------------------------------------------------------------ r3143 | jvergara | 2007-09-20 12:04:22 -0700 (Thu, 20 Sep 2007) | 4 lines Fix for 2318. In UIFactory we try to update the UIManager but this may fail when we do not have the DISPLAY. Catch the exception and log a message in the logger when this occurs. ------------------------------------------------------------------------ r3144 | kenneth_suter | 2007-09-20 12:31:21 -0700 (Thu, 20 Sep 2007) | 1 line Fix for issue 2227 in which unpredictable behavior results from an upgrade or reversion process replacing the upgrade script while the upgrade process is running on Windows. This code will compare the running version of the script with the new version to see whether or not the script actually needs replacing. If so the script is copied with an extension NEW. When the script starts it checks for the existence of upgrade.bat.NEW and if exists prints a message informing the user that they must replace the old version of the script with the new version before continuing. ------------------------------------------------------------------------ r3146 | boli | 2007-09-20 13:38:20 -0700 (Thu, 20 Sep 2007) | 4 lines Fixed an issue where the fixed time log rotation policy is not rotating the logs at the time configured. The rotation time was interpreted as UTC time instead of the local time zone. Fix for issue 2279 ------------------------------------------------------------------------ r3147 | neil_a_wilson | 2007-09-20 13:54:36 -0700 (Thu, 20 Sep 2007) | 4 lines Update the local backend modify processing to break out the account status notifications into a separate method, which helps improve performance and make garbage collection more stable and predictable. ------------------------------------------------------------------------ r3148 | neil_a_wilson | 2007-09-20 14:53:46 -0700 (Thu, 20 Sep 2007) | 3 lines Update the time thread to make the "time" variable volatile. This will ensure that no thread will have the possibility of seeing partial updates to it. ------------------------------------------------------------------------ r3149 | neil_a_wilson | 2007-09-20 17:12:01 -0700 (Thu, 20 Sep 2007) | 6 lines Update the way the server normalizes schema element definitions so that they are more correctly handled and are more forgiving with regard to things like extra spaces in the definition. OpenDS Issue Number: 2171 ------------------------------------------------------------------------ r3150 | neil_a_wilson | 2007-09-20 17:49:05 -0700 (Thu, 20 Sep 2007) | 6 lines Update a number of result codes to make the values more consistent across operations. Also, eliminate a number of incorrect uses of the OPERATIONS_ERROR result and replace them with the more correct OTHER result. OpenDS Issue Number: 1786 ------------------------------------------------------------------------ r3151 | smaguin | 2007-09-21 00:44:14 -0700 (Fri, 21 Sep 2007) | 2 lines add restart after changinf plugin-type attribut which is not dynamic ------------------------------------------------------------------------ r3152 | lutoff | 2007-09-21 02:14:09 -0700 (Fri, 21 Sep 2007) | 2 lines Bug Fix: server root directory should be get with 'standard' feature Code optimization in file check ------------------------------------------------------------------------ r3153 | kenneth_suter | 2007-09-21 08:38:15 -0700 (Fri, 21 Sep 2007) | 1 line fix for issue 2225 where use is printed twice when invoked via --help argument ------------------------------------------------------------------------ r3154 | boli | 2007-09-21 10:21:57 -0700 (Fri, 21 Sep 2007) | 4 lines Removed presence indexes for all default indexes except ACI. Presence indexes are not necessary in many cases where equality indexes are defined. Under load, heavy contention exists in the presence indexes and lock timeouts can occur. Fix for issue 2186 ------------------------------------------------------------------------ r3155 | jvergara | 2007-09-21 10:31:33 -0700 (Fri, 21 Sep 2007) | 6 lines Fix for issues 2314 and 2238. Display the DNs with special characters instead of using the escaped UTF-8 version. Rename Listeners to Connection Handlers. Following Brian's advice do not display the internally used backends (ads-truststore, replicatedChanges and admin data) nor the LDIF connection handler. ------------------------------------------------------------------------ r3156 | boli | 2007-09-21 10:56:30 -0700 (Fri, 21 Sep 2007) | 4 lines The valid set of categories and severities have changed since the messaging refactory. The error logger wiki page (https://www.opends.org/wiki//page/TheErrorLogger) is updated to reflect the new names. The configuration definition is also changed to reflect the new names. Fix for issue 2066 ------------------------------------------------------------------------ r3157 | jvergara | 2007-09-21 11:09:24 -0700 (Fri, 21 Sep 2007) | 7 lines Fix for 2320. Updated the message to show the details at the end. Identify if we are having a problem with the certificate and have an specific message on this c ase. ------------------------------------------------------------------------ r3158 | boli | 2007-09-21 15:23:25 -0700 (Fri, 21 Sep 2007) | 4 lines Fix for issue where the size of log files might exceed the max file size set in the size limit rotation policy. It now checks to see if the new message will exceed the limit before writing instead of after. Fix for issue 2301 ------------------------------------------------------------------------ r3159 | neil_a_wilson | 2007-09-22 19:34:21 -0700 (Sat, 22 Sep 2007) | 2 lines Fix a transposed copyright year range in VersionMonitorProvider. ------------------------------------------------------------------------ r3160 | neil_a_wilson | 2007-09-22 19:38:12 -0700 (Sat, 22 Sep 2007) | 10 lines Add support for an LDIF backend. Entries in this backend will be held in memory, and all read operations will be served from memory, but the underlying data will be stored in an LDIF file on disk and any write operation will cause that LDIF file to be updated. This backend supports all major operations, including moving/renaming non-leaf entries with the modify DN operation, and also supports the subtree delete control and LDIF import and export operations. Backup and restore operations are not currently supported. ------------------------------------------------------------------------ r3161 | neil_a_wilson | 2007-09-22 23:14:00 -0700 (Sat, 22 Sep 2007) | 3 lines Fix a problem in the LDIF backend in which references to subordinate entries were not properly updated for modify DN operations. ------------------------------------------------------------------------ r3165 | kenneth_suter | 2007-09-24 05:15:23 -0700 (Mon, 24 Sep 2007) | 2 lines Creation of a base DN registry for managing the base DN and naming context to backend maps. Supports a 'test' mode that can be used to test whether registration/deregistration operations will be acceptable. ------------------------------------------------------------------------ r3167 | matthew_swift | 2007-09-24 06:36:37 -0700 (Mon, 24 Sep 2007) | 1 line Remove unused AggregationRelationDefinition class and references. ------------------------------------------------------------------------ r3169 | mkeyes | 2007-09-24 11:21:00 -0700 (Mon, 24 Sep 2007) | 2 lines adding calls to testcase_Preamble and testcasePostamble to the dsconfig functional tests so that the functional test reports will contain their results. ------------------------------------------------------------------------ r3171 | abobrov | 2007-09-24 11:44:51 -0700 (Mon, 24 Sep 2007) | 2 lines - fix FindBugs positives. ------------------------------------------------------------------------ r3173 | matthew_swift | 2007-09-24 12:12:29 -0700 (Mon, 24 Sep 2007) | 2 lines Cosmetic changes to visitor argument names to align them with naming conventions used elsewhere in the admin framework. ------------------------------------------------------------------------ r3174 | boli | 2007-09-24 12:13:20 -0700 (Mon, 24 Sep 2007) | 4 lines Fixed a issue where executing an external process using the StaticUtils.exec method might never return. This will cause the server to dead lock when setting the file permissions using the UNIX chmod command. A particular case where this may happen is during log rotation on Java 5. Fix for issue 2116 ------------------------------------------------------------------------ r3175 | matthew_swift | 2007-09-24 12:14:01 -0700 (Mon, 24 Sep 2007) | 2 lines Modify the getAllConstraints method to calculate the list of constraints dynamically. Previously the list of constraints was cached which prevented run-time changes from taking effect in sub-definitions. ------------------------------------------------------------------------ r3179 | matthew_swift | 2007-09-24 13:38:02 -0700 (Mon, 24 Sep 2007) | 4 lines Fix issue 1449: aggregation support. This change implements the remaining required functionality for issue 1449. It adds client side support for enforcing referential integrity between components. ------------------------------------------------------------------------ r3181 | neil_a_wilson | 2007-09-24 16:15:46 -0700 (Mon, 24 Sep 2007) | 6 lines Perform a significant refactoring of the local backend workflow element classes so that they use smaller method sizes, which allows the VM to better optimize the code. Also, move the code for processing each type of operation into the class for the associated operation rather than keeping it all in the LocalBackendWorkflowElement class. ------------------------------------------------------------------------ r3182 | boli | 2007-09-24 16:21:28 -0700 (Mon, 24 Sep 2007) | 4 lines Added messages to better indicate when a log file can not be opened due to possible file permission problems. A case where this can happen if the user configures a logger to set permission on the log file that will make it unwritable to OpenDS (ie, UNIX mode 555). This allows the user better realize the problem and take corrective action. Fix for issue 2107 ------------------------------------------------------------------------ r3183 | neil_a_wilson | 2007-09-24 18:54:38 -0700 (Mon, 24 Sep 2007) | 7 lines Further split up the local backend modify operation to allow it to be better optimized, and do the same for SearchFilter.matchesEntryInternal and Entry.conformsToSchema. Also, fix a problem in the local backend operations where cancel requests were not being handled correctly. ------------------------------------------------------------------------ r3185 | kenneth_suter | 2007-09-24 19:35:50 -0700 (Mon, 24 Sep 2007) | 2 lines Enabled the task schedulable utilities to track progress of running tasks by polling the corresponding entry in the task backend and printing log messages until the task is complete. If LDAP connection arguments are specified and no start time is specified the default behavior is to track the running task until it is finished executing. If a start time is specified, the task utilities will schedule the task and exit immediately. ------------------------------------------------------------------------ r3187 | lutoff | 2007-09-25 00:29:14 -0700 (Tue, 25 Sep 2007) | 1 line add properties file template ------------------------------------------------------------------------ r3188 | gbellato | 2007-09-25 00:29:24 -0700 (Tue, 25 Sep 2007) | 8 lines some replication hardening : - fix some race conditions in namingConflict test - add some cleanup at the end of ReplicationServerDynamicConfTest and IsolationTest - don't use anymore 2 statics in the replication code that could cause problem when in-core restart are done. - improve the shutdown by making sure that all threads are done before returning ------------------------------------------------------------------------ r3189 | lutoff | 2007-09-25 00:32:05 -0700 (Tue, 25 Sep 2007) | 4 lines With these modificationd, if both useSSL and useStartTls are set to false in the properties file, dsconfig interactive mode will not prompt for protocol. ------------------------------------------------------------------------ r3190 | jvergara | 2007-09-25 01:49:02 -0700 (Tue, 25 Sep 2007) | 2 lines Only seed the ads truststore when the ADS were not already replicated. This avoids a NullPointerException when we enable replication on a baseDN between two servers and another baseDN was already being replicated. ------------------------------------------------------------------------ r3191 | jvergara | 2007-09-25 05:53:59 -0700 (Tue, 25 Sep 2007) | 5 lines Fix two issues: 1. Update the configuration of the replication servers in the topology to point to the new replication servers. 2. In non-interactive mode, only display the error messages accessing the servers that were already registered before the command was launched. In general we will not be able to access the newly created server with the Global Administrator so this check should be done BEFORE registering the server in the ADS. ------------------------------------------------------------------------ r3193 | kenneth_suter | 2007-09-25 07:05:34 -0700 (Tue, 25 Sep 2007) | 1 line Makes the behavior of specifying -t argument consistent when specifying either a future time or the magic '0' value indicating immediate execution. In both of these cases not the utility will exit immediately after scheduling the task ------------------------------------------------------------------------ r3195 | jvergara | 2007-09-25 07:45:59 -0700 (Tue, 25 Sep 2007) | 6 lines Fix for issue 2261 (dsreplication should provide a view of the replicated baseDNs in a topology). The following changes are targetted to provide a CLI view on the replication topology and on replication monitoring. A script-frindly option has been added to be able to parse more easily the output of this subcommand. ------------------------------------------------------------------------ r3196 | ugaston | 2007-09-25 09:08:30 -0700 (Tue, 25 Sep 2007) | 1 line Remove configure-ds wrapper function, as configure-ds is to be removed ------------------------------------------------------------------------ r3197 | jvergara | 2007-09-25 09:40:03 -0700 (Tue, 25 Sep 2007) | 2 lines Remove the configure-ds scripts. ------------------------------------------------------------------------ r3198 | kenneth_suter | 2007-09-25 10:28:41 -0700 (Tue, 25 Sep 2007) | 1 line For schedulable utilities have return code reflect success of scheduled task when monitoring task in synchronous mode ------------------------------------------------------------------------ r3199 | coulbeck | 2007-09-25 11:38:03 -0700 (Tue, 25 Sep 2007) | 1 line These changes use the new LDIF backend implementation so that the adminRoot backend is always present. The adminRoot LDIF backend is initially populated with the admin container entries, except for the cn=Servers container. To avoid breaking the setup and dsreplication tools, I have changed things so that the absence of the cn=Servers container entry implies that the server is not yet configured as an ADS server. I have commented out code that is no longer applicable. ------------------------------------------------------------------------ r3200 | david_page | 2007-09-25 13:27:29 -0700 (Tue, 25 Sep 2007) | 3 lines Issue 466 (partial) Add some secret key handling code. ------------------------------------------------------------------------ r3201 | treydrake | 2007-09-25 13:28:42 -0700 (Tue, 25 Sep 2007) | 1 line Fix for issue 2343. Migrated plugin to current logging/message API and added javadocs. ------------------------------------------------------------------------ r3202 | coulbeck | 2007-09-25 14:00:55 -0700 (Tue, 25 Sep 2007) | 1 line Replace use of Java 6 Arrays.copyOf with System.arraycopy. ------------------------------------------------------------------------ r3203 | kenneth_suter | 2007-09-25 14:14:19 -0700 (Tue, 25 Sep 2007) | 1 line fixed eol-style property ------------------------------------------------------------------------ r3204 | dugan | 2007-09-25 14:20:03 -0700 (Tue, 25 Sep 2007) | 1 line Fix password modify regression. Issue 2342. ------------------------------------------------------------------------ r3205 | coulbeck | 2007-09-25 15:11:45 -0700 (Tue, 25 Sep 2007) | 1 line Implement Get Symmetric Key Extended Operation for crypto manager symmetric key distribution. ------------------------------------------------------------------------ r3206 | neil_a_wilson | 2007-09-25 17:49:44 -0700 (Tue, 25 Sep 2007) | 27 lines Update the backend API to include new isIndexed methods that can be used to determine whether a given attribute is indexed in a specified manner, or that can be used to determine whether a specified filter is indexed. At present, all backends except the JE backend and the replication backend are considered always indexed for all operations. The JE backend is only considered indexed based on its index configuration. The replication backend is never considered indexed. Update the following components to make use of this new isIndexed capability: - The DSEE-compatible access control handler will now log a warning message at startup if it detects that there is no presence index for the aci attribute, which can make startup take a long time on a big database. - The group manager will now log a warning message at startup if any of the group implementation filters are unindexed, which can make startup take a long time on a big database. - The referential integrity plugin now requires that all of the attributes for which referential integrity is to be maintained must be configured with equality indexes. - The unique attribute plugin now requires that all of the attributes for which uniqueness is to be enforced must be configured with equality indexes. This commit also updates the LDIF backend so that it is possible to indicate via configuration whether its base DNs should be registered as public or private base DNs. The LDIF backend used as the admin root has been updated so that it is considered a private backend. The replication backend has also been updated so that it is considered a private backend. ------------------------------------------------------------------------ r3207 | neil_a_wilson | 2007-09-25 19:19:37 -0700 (Tue, 25 Sep 2007) | 4 lines Update the appropriate identity mappers and certificate mappers to use the new isIndexed API in the backend to ensure that all referenced attributes are indexed for equality. ------------------------------------------------------------------------ r3209 | matthew_swift | 2007-09-26 05:21:02 -0700 (Wed, 26 Sep 2007) | 1 line Merge branches/temp-admin@3208 onto trunk@3208. ------------------------------------------------------------------------ r3210 | kenneth_suter | 2007-09-26 08:56:11 -0700 (Wed, 26 Sep 2007) | 7 lines Addresses issue 2143 which is intended to help with the readability of the usage statements by allowing options to be grouped logically by type. Many of the utilities arguments have grown to such an extent that it is difficult to sort through the various types of arguments to find what you are looking for. For instance the usage statement for the task schedulable arguments are mixed with the LDAP connection arguments which makes them difficult to ignore if they want to use the tool in offline mode. This code also make consistent the position of standard options (e.g. help, version, quiet, verbose) within usage statements. ArgumentParser (and SubCommandArgumentParse) have 4 built-in groups: General Options (for help and version commands), LDAP Connection Options (e.g. host, port), Utility Input/Output Options (e.g. quiet, verbose, no-prompt, argument file etc) and default options (for ungrouped arguments). The default group appears first in the list without a header to maintain backward consistency. Other groups can be defined for a usage statement by supplying an ArgumentGroup to the addArgument() method. ------------------------------------------------------------------------ r3211 | neil_a_wilson | 2007-09-26 09:18:59 -0700 (Wed, 26 Sep 2007) | 4 lines Update the Get Symmetric Key extended operation handler so that it has its own object class and config definition rather than relying on the generic configuration. This makes it easier to use through dsconfig. ------------------------------------------------------------------------ r3212 | kenneth_suter | 2007-09-26 09:40:17 -0700 (Wed, 26 Sep 2007) | 1 line corrected reference to start-ds script ------------------------------------------------------------------------ r3213 | matthew_swift | 2007-09-26 10:00:30 -0700 (Wed, 26 Sep 2007) | 1 line Remove adm:oid elements as these are no longer part of the XML schema. ------------------------------------------------------------------------ r3214 | kenneth_suter | 2007-09-26 11:52:25 -0700 (Wed, 26 Sep 2007) | 1 line Addresses issue 2338 in which manage-tasks signals an error if the user tries to use SSL connection options. The reason for the error is that LDAPConnectionArgumentParser does not properly support initialization of the LDAPConnectionOption's SSL connection factory. This change involves adding some state variables to LDAPConnectionConsoleInteraction that are populated during the session ------------------------------------------------------------------------ r3215 | jvergara | 2007-09-26 11:57:15 -0700 (Wed, 26 Sep 2007) | 6 lines Fix for 2306: configure replication encryption on or off in dsreplication and setup-gui Provide new options in the command line and new GUI in order to be able to configure secure replication. The dsreplication status command-line has also been modified to display information about the replication security configuration. ------------------------------------------------------------------------ r3216 | mkeyes | 2007-09-26 12:22:31 -0700 (Wed, 26 Sep 2007) | 2 lines Updated some of the security functional tests to reflect recent upgrades in the OpenDS source code. ------------------------------------------------------------------------ r3217 | al_xipe | 2007-09-26 12:31:59 -0700 (Wed, 26 Sep 2007) | 1 line Catching up with dev which disabled presence indexes out of the box ------------------------------------------------------------------------ r3218 | jvergara | 2007-09-26 13:05:48 -0700 (Wed, 26 Sep 2007) | 3 lines Fix for issue 2354 (dsreplication CLI : parallel runs should raise more explicit error information). The messages have been updated with a reference to the log file and a String representation of the exception that caused the error. ------------------------------------------------------------------------ r3219 | mkeyes | 2007-09-26 14:02:38 -0700 (Wed, 26 Sep 2007) | 2 lines Updating some security password validator functional tests to reflect recent upgrades in the OpenDS code. ------------------------------------------------------------------------ r3220 | david_page | 2007-09-26 14:44:15 -0700 (Wed, 26 Sep 2007) | 3 lines Issue 466 (partial) Add ds-cfg-symmetric-key parsing method ------------------------------------------------------------------------ r3221 | neil_a_wilson | 2007-09-26 15:45:48 -0700 (Wed, 26 Sep 2007) | 5 lines Update the 02-config.ldif schema configuration file to compact the OID allocations after the earlier refactoring to use a more consistent naming for our configuration properties. I have also updated the OID registry on our wiki to reflect these changes. ------------------------------------------------------------------------ r3222 | lutoff | 2007-09-27 01:05:34 -0700 (Thu, 27 Sep 2007) | 2 lines Fix for issue #553, As described in Neil's comments, stop-ds can now read arguments values on a properties file. ------------------------------------------------------------------------ r3223 | gary_williams | 2007-09-27 03:04:06 -0700 (Thu, 27 Sep 2007) | 2 lines Issue 1222 path and name of to config.py should be parameterized ------------------------------------------------------------------------ r3224 | gary_williams | 2007-09-27 03:09:42 -0700 (Thu, 27 Sep 2007) | 2 lines Fix invalid arg values passed to dsconfig function ------------------------------------------------------------------------ r3225 | gary_williams | 2007-09-27 03:10:48 -0700 (Thu, 27 Sep 2007) | 2 lines add block and timer around staf log query ------------------------------------------------------------------------ r3226 | gary_williams | 2007-09-27 05:20:41 -0700 (Thu, 27 Sep 2007) | 2 lines more invalid arg values passed to dsconfig function ------------------------------------------------------------------------ r3227 | kenneth_suter | 2007-09-27 06:26:13 -0700 (Thu, 27 Sep 2007) | 1 line Removing the bullet prefix for task log messages since they don't render properly on all platforms and they are less usefull now that log messages are prepended with the date stamp. ------------------------------------------------------------------------ r3228 | al_xipe | 2007-09-27 07:37:57 -0700 (Thu, 27 Sep 2007) | 1 line hack to be able to plot the functional tests result trend ------------------------------------------------------------------------ r3229 | matthew_swift | 2007-09-27 07:50:30 -0700 (Thu, 27 Sep 2007) | 17 lines Improvements to aggregation support and foundation work for expressing arbitrary constraints within components. This change adds support for defining arbitrary conditions which can be used to test properties and their values. Conditions can be used within aggregations to define 1) when a referenced managed object needs enabling and 2) when it is enabled. For example, the LDAP connection handler requires that its key manager provider and trust manager provider are enabled when it is enable and when either SSL or StartTLS are enabled. Conditions are also intended for use within the existing constraint/dependency support. For example, it should be possible to indicate that a property "min" is always less than or equal to a property "max", or that when "use-ssl" is set to true, any required SSL configuration related properties are also defined. This will be implemented in a subsequent change (this change just focuses on the work required to resolve issue 1449). This change adds support for the following conditions: * logical "not" * logical "and" * logical "or" * logical "implies" * contains - determines if a property contains a particular value * is-present - determines if a property has any values (incl. defaults) More will be added as required. ------------------------------------------------------------------------ r3230 | matthew_swift | 2007-09-27 08:00:36 -0700 (Thu, 27 Sep 2007) | 1 line Rename ContainsValueCondition to ContainsCondition to align it with the factory method name in Conditions and the element name in the XML schema. ------------------------------------------------------------------------ r3231 | david_page | 2007-09-27 20:44:00 -0700 (Thu, 27 Sep 2007) | 3 lines Issue 466 (partial) Secret key encoding ------------------------------------------------------------------------ r3232 | lutoff | 2007-09-28 07:12:43 -0700 (Fri, 28 Sep 2007) | 6 lines The following arguments could now be handled in properties file --advanced --quiet --script-friendly --unit-size --unit-time ------------------------------------------------------------------------ r3233 | matthew_swift | 2007-09-28 08:47:50 -0700 (Fri, 28 Sep 2007) | 2 lines Add support for specifying arbitrary constraints in managed object definitions and use it within the LDAP and JMX connection handlers to enforce their SSL/StartTLS settings. This feature will be re-used for other managed object definitions as the need arises. ------------------------------------------------------------------------ r3234 | matthew_swift | 2007-09-28 11:23:35 -0700 (Fri, 28 Sep 2007) | 2 lines Attempt to fix current JDK1.5 failures in ValidateCfgDefn tests: allow test configuration definitions to not register themselves with the TopCfgDefn. Previously, test definitions would register themselves with the TopCfgDefn and then deregister themselves during their tear down phase. However, this didn't seem to be working as expected on JDK1.5 for some reason, and was causing the ValidateCfgDefn tests to fail. ------------------------------------------------------------------------ r3235 | jvergara | 2007-09-28 12:50:40 -0700 (Fri, 28 Sep 2007) | 20 lines Fix for issue 2035 (Use OpenDS specific environment variables to determine the JVM to be used.) Use two environment variables to know which is the JVM to be used by the scripts: OPENDS_JAVA_BIN and OPENDS_JAVA_HOME. When the setup creates the file lib/set-java-home it writes the contents of OPENDS_JAVA_HOME to it (instead of JAVA_HOME which was the previous behavior). Before these changes, the scripts used to look for JAVA_BIN, then JAVA_HOME and finally for the contents of the set-java-home file. The problem with this approach is that if the user required to specify JAVA_HOME or JAVA_BIN to an unsupported version of the JDK (because some other program in the machine had this requirement) the scripts of OpenDS could not run. Now the checks that we do to figure out the JVM are done in the following order: 1. Check if OPENDS_JAVA_BIN is defined in the environment. 2. Check if OPENDS_JAVA_HOME is defined in the environment. 3. Check if OPENDS_JAVA_HOME is defined in the lib/set-java-home file. 4. Check if JAVA_BIN is defined in the environment. 5. Check if JAVA_HOME is defined in the environment. 6. Check if we can figure out the java installation by executing "type java" (in UNIX environments). If any of the above checks is positive, we will try to use the JVM found. Extras: the uninstall script on UNIX now checks that we are using a JDK compatible with 1.5 and displays a user friendly message if it does not. ------------------------------------------------------------------------ r3236 | lutoff | 2007-10-01 05:19:33 -0700 (Mon, 01 Oct 2007) | 1 line Fix for issue #2041 (New - base64 cli olh '-?' defect) ------------------------------------------------------------------------ r3237 | lutoff | 2007-10-01 07:27:00 -0700 (Mon, 01 Oct 2007) | 1 line Fix for issue #2402 ------------------------------------------------------------------------ r3238 | coulbeck | 2007-10-01 18:04:43 -0700 (Mon, 01 Oct 2007) | 3 lines More changes for issue 466. - Defines the schema for secret keys. - Keeps the crypto manager secret key cache up to date with secret keys published in ADS. ------------------------------------------------------------------------ r3239 | gbellato | 2007-10-01 23:43:22 -0700 (Mon, 01 Oct 2007) | 1 line Enable some of the total update replication tests ------------------------------------------------------------------------ r3240 | pgamba | 2007-10-02 02:08:20 -0700 (Tue, 02 Oct 2007) | 1 line Fix for #2356 - Unexpected generation ID error when replication enabled over empty suffix ------------------------------------------------------------------------ r3241 | gbellato | 2007-10-02 02:20:18 -0700 (Tue, 02 Oct 2007) | 1 line fix the init online test that was broken after merge ------------------------------------------------------------------------ r3242 | lutoff | 2007-10-02 05:26:44 -0700 (Tue, 02 Oct 2007) | 1 line Update test ------------------------------------------------------------------------ r3244 | kenneth_suter | 2007-10-02 09:38:40 -0700 (Tue, 02 Oct 2007) | 2 lines Partially addressed issues 2335 and 2336 which call for support of task notifications and dependencies in client task scheduling tools. ------------------------------------------------------------------------ r3245 | coulbeck | 2007-10-02 10:28:42 -0700 (Tue, 02 Oct 2007) | 2 lines More changes for issue 466. Symmetric key values and instance key identifier values are now represented as Strings instead of byte arrays. ------------------------------------------------------------------------ r3246 | kenneth_suter | 2007-10-02 12:28:38 -0700 (Tue, 02 Oct 2007) | 2 lines Addresses issue 2370 in which the non-interactive option issued a success message to a request to cancel an uninterruptable task while executing. This code also causes the command to return a non-zero error code if a non-interactive cancel or info operation is unsuccessful. ------------------------------------------------------------------------ r3247 | abobrov | 2007-10-02 13:22:53 -0700 (Tue, 02 Oct 2007) | 4 lines - [Issue 2406] supportedControl in DSE does not display all the supported controls: advertise Account Usable and GetEffectiveRights via supportedControl of RootDSE. also fix criticality field recognition/process for GetEffectiveRights request control. ------------------------------------------------------------------------ r3248 | david_page | 2007-10-02 14:15:52 -0700 (Tue, 02 Oct 2007) | 3 lines issue 466 (partial) secret key re-wrapping (extended operation support) ------------------------------------------------------------------------ r3249 | lutoff | 2007-10-03 04:46:50 -0700 (Wed, 03 Oct 2007) | 5 lines Modifications related to issue https://opends.dev.java.net/issues/show_bug.cgi?id=582 ldap tools (ldapsearch, ldapdelete, ldapcompare, ldapmodify, ldappasswordmodify) will now be able to use properties files. ------------------------------------------------------------------------ r3250 | jvergara | 2007-10-03 05:15:23 -0700 (Wed, 03 Oct 2007) | 5 lines Fix for issue 2407: dsreplication enable : can't configure several instances when using the same "source". The problem was that the code (if the skip port check was not present) did check that the provided replication port was available in the *local* host. If it was not the case, the error message appeared. The fix consists of performing this check only if the user specified to configure the local server (the only host on which we can actually perform the check). The workaround for this issue is to use the skipPortCheck argument. ------------------------------------------------------------------------ r3251 | lutoff | 2007-10-03 06:45:44 -0700 (Wed, 03 Oct 2007) | 1 line Add filename part of managed properties ------------------------------------------------------------------------ r3252 | pgamba | 2007-10-03 06:49:46 -0700 (Wed, 03 Oct 2007) | 3 lines Fix for Init On lIne unit test failure. After adding a task, the task state is tested and can be already successfully completed ------------------------------------------------------------------------ r3253 | lutoff | 2007-10-03 07:14:46 -0700 (Wed, 03 Oct 2007) | 1 line Fix for issue #2409 (CLI-olh have two -V's ) ------------------------------------------------------------------------ r3255 | david_page | 2007-10-03 08:47:57 -0700 (Wed, 03 Oct 2007) | 3 lines Issue 466 (partial) more secret key stuff ------------------------------------------------------------------------ r3256 | david_page | 2007-10-03 12:29:29 -0700 (Wed, 03 Oct 2007) | 3 lines Issue 466 (partial) add some secret key tests - disabled pending ADS export ------------------------------------------------------------------------ r3258 | coulbeck | 2007-10-04 07:50:19 -0700 (Thu, 04 Oct 2007) | 2 lines More changes for issue 466. Publish newly generated keys in the ADS branch. ------------------------------------------------------------------------ r3259 | coulbeck | 2007-10-04 08:25:26 -0700 (Thu, 04 Oct 2007) | 1 line Enable test case org.opends.server.types.CryptoManagerTestCase#testKeyPersistence. ------------------------------------------------------------------------ r3260 | coulbeck | 2007-10-04 09:18:59 -0700 (Thu, 04 Oct 2007) | 1 line Enable test case org.opends.server.types.CryptoManagerTestCase#testCompromisedKey. ------------------------------------------------------------------------ r3261 | david_page | 2007-10-04 13:07:29 -0700 (Thu, 04 Oct 2007) | 4 lines Issue 466 (partial) CryptoManager More secret key stuff; testcases. ------------------------------------------------------------------------ r3262 | coulbeck | 2007-10-04 13:36:33 -0700 (Thu, 04 Oct 2007) | 1 line Use ConcurrentHashMap for the secret key caches to make access to them thread-safe. ------------------------------------------------------------------------ r3263 | david_page | 2007-10-04 14:31:09 -0700 (Thu, 04 Oct 2007) | 4 lines Issue 466 (partial) CrytoManager cleanup ------------------------------------------------------------------------ r3264 | coulbeck | 2007-10-04 15:57:23 -0700 (Thu, 04 Oct 2007) | 1 line Fix a test case failure caused by the previous commit. ------------------------------------------------------------------------ r3265 | lutoff | 2007-10-05 06:20:51 -0700 (Fri, 05 Oct 2007) | 5 lines Fix for issue #2404 (ds-start --systemInfo does not detect 64 bits amd64 Solaris 10) Add extra information based on the "sun.arch.data.model" system property (see http://java.sun.com/docs/hotspot/HotSpotFAQ.html#64bit_detection) This property has the value "32-bit", "64-bit", or "unknown" ------------------------------------------------------------------------ r3266 | david_page | 2007-10-05 07:42:56 -0700 (Fri, 05 Oct 2007) | 4 lines Issue 466 (partial) CryptoManager use message from chained exception. ------------------------------------------------------------------------ r3267 | jvergara | 2007-10-05 08:13:51 -0700 (Fri, 05 Oct 2007) | 4 lines Fix for issue 2422. Create an initialize-all subcommand that allows to initialize a whole topology by giving a base DN and the connection parameters of the server containing the data that must be used to perform the initialization of the other servers. ------------------------------------------------------------------------ r3268 | david_page | 2007-10-05 10:25:06 -0700 (Fri, 05 Oct 2007) | 4 lines Issue 466 (partial) CryptoManager start on TODO: i18n ------------------------------------------------------------------------ r3269 | david_page | 2007-10-05 11:11:14 -0700 (Fri, 05 Oct 2007) | 4 lines issue 466 (partial) CryptoManager more TODO: i18n cleanup ------------------------------------------------------------------------ r3270 | jvergara | 2007-10-08 05:14:30 -0700 (Mon, 08 Oct 2007) | 2 lines Use UTF-8 as default encoding to read the java stub and write the messages files. ------------------------------------------------------------------------ r3271 | jvergara | 2007-10-08 11:32:35 -0700 (Mon, 08 Oct 2007) | 4 lines Fix for issue 2432 (Japanese characters in QuickSetup dialog are not displayed properly). The fix consists of using SansSerif instead of Arial as the font. SansSerif is one of the logical font names so it is guaranteed that all implementations have it, and so that all the UTF-8 characters have a representation. ------------------------------------------------------------------------ r3272 | david_page | 2007-10-08 12:53:28 -0700 (Mon, 08 Oct 2007) | 5 lines issue 466 (partial) CryptoManager some more i18n changes maybe fix unit test failures on Linux / Java 6 ------------------------------------------------------------------------ r3273 | david_page | 2007-10-08 13:45:54 -0700 (Mon, 08 Oct 2007) | 4 lines issue 466 (partial) CryptoManager more i18n cleanup ------------------------------------------------------------------------ r3274 | david_page | 2007-10-08 19:40:09 -0700 (Mon, 08 Oct 2007) | 4 lines issue 466 (partial) CryptoManager more i18n cleanup ------------------------------------------------------------------------ r3275 | david_page | 2007-10-08 21:33:26 -0700 (Mon, 08 Oct 2007) | 4 lines issue 466 (partial) CryptoManager more i18n cleanup ------------------------------------------------------------------------ r3276 | gary_williams | 2007-10-08 23:15:50 -0700 (Mon, 08 Oct 2007) | 2 lines prevent from writing files to TMPDIR ------------------------------------------------------------------------ r3277 | gary_williams | 2007-10-09 03:09:14 -0700 (Tue, 09 Oct 2007) | 2 lines prevent from writing files to TMPDIR ------------------------------------------------------------------------ r3278 | jvergara | 2007-10-09 09:26:19 -0700 (Tue, 09 Oct 2007) | 4 lines Remove references to the classes ConfigConstants and CryptoManager in ADSContext. The use of these classes in the code can lead to a blocking in the Java Web Start installer. They have been moved to ADSContextHelper, which assumes that all the jars have been downloaded. Appart from that the implementation of ADSContext.createAdministrationData and ADSContext.hasAdminData has been updated. The reason for this is that the code as it was assumed that the "cn=admin data" always existed. This might not be the case if the user removed it using dsconfig (or editing cn=config) or altered its contents using ldapmodify or there was an error during an initialization of the suffix. The setup, dsreplication and dsframework must be able to handle this situation and the code has been updated to do so. ------------------------------------------------------------------------ r3279 | jvergara | 2007-10-09 09:50:31 -0700 (Tue, 09 Oct 2007) | 2 lines Use the actual host name of the server as the default we propose in dsreplication instead of the static "localhost". The rational behind this is that the host name must be stored in the ADS (this is updated for the "enable" subcommand) and storing "localhost" in the ADS only works in a testing environment where replication is done on several instances running on the same machine. ------------------------------------------------------------------------ r3280 | david_page | 2007-10-09 10:18:14 -0700 (Tue, 09 Oct 2007) | 4 lines issue 466 (partial) CryptoManager final i18n cleanup ------------------------------------------------------------------------ r3281 | coulbeck | 2007-10-09 11:54:06 -0700 (Tue, 09 Oct 2007) | 3 lines More changes for Issue 466. When importing a secret key entry from ADS into the crypto manager, if a symmetric key that can be decoded by this instance is not present then request it from another server using the Get Symmetric Key extended operation. Tested by configuring two servers to use 3DES password storage scheme in the default password policy, enabling replication between them and verifying that a user can bind with password to both instances. ------------------------------------------------------------------------ r3282 | david_page | 2007-10-09 12:47:18 -0700 (Tue, 09 Oct 2007) | 8 lines issue 466 (partial) Remove "SECRET_KEY" from ds-cfg-symmetric-key attribute syntax because Cipher.SECRET_KEY is implied by symmetric key. For example, ds-cfg-symmetric-key: EE16497A0BC56D04C0A5C68FC8236247:RSA/ECB/OAEPWITHSHA-1ANDMGF1PADDING:AES/CBC/PKCS5Padding:SECRET_KEY:7F23DB3450182583EC91F7024E6... is now ds-cfg-symmetric-key: EE16497A0BC56D04C0A5C68FC8236247:RSA/ECB/OAEPWITHSHA-1ANDMGF1PADDING:AES/CBC/PKCS5Padding:7F23DB3450182583EC91F7024E6... ------------------------------------------------------------------------ r3283 | david_page | 2007-10-09 12:53:07 -0700 (Tue, 09 Oct 2007) | 2 lines Elide 2 spurious quotation marks. ------------------------------------------------------------------------ r3284 | david_page | 2007-10-09 20:02:31 -0700 (Tue, 09 Oct 2007) | 4 lines issue 466 (partial) CryptoManger comment, todo cleanup ------------------------------------------------------------------------ r3285 | david_page | 2007-10-09 22:17:02 -0700 (Tue, 09 Oct 2007) | 3 lines issues 315, 316, 317, 318 Enable password storage schemes based on encryption now that issue 466 (CryptoManager) features are implemented. ------------------------------------------------------------------------ r3286 | jvergara | 2007-10-10 07:07:38 -0700 (Wed, 10 Oct 2007) | 2 lines Add two missing properties to the LDIF backend when it is created. ------------------------------------------------------------------------ r3287 | david_page | 2007-10-10 09:38:28 -0700 (Wed, 10 Oct 2007) | 4 lines issue 466 (partial) remove redundant server property BACKUP_PROPERTY_CIPHER_ALGORITHM The cipher algorithm used is encoded in the backup data prologue. ------------------------------------------------------------------------ r3288 | gary_williams | 2007-10-10 10:26:46 -0700 (Wed, 10 Oct 2007) | 2 lines add JVM Architecture to xml report ------------------------------------------------------------------------ r3289 | david_page | 2007-10-10 11:08:06 -0700 (Wed, 10 Oct 2007) | 3 lines issue 2440 bin/backup --encrypt and --signHash require online backup ------------------------------------------------------------------------ r3290 | coulbeck | 2007-10-10 13:29:24 -0700 (Wed, 10 Oct 2007) | 1 line Add configuration properties for the crypto manager's preferred digest algorithm, its preferred cipher and mac algorithms and the associated key lengths. ------------------------------------------------------------------------ r3291 | coulbeck | 2007-10-10 14:23:44 -0700 (Wed, 10 Oct 2007) | 1 line Replace System.out and System.err with a null PrintStream when constructing an LDAPConnection. ------------------------------------------------------------------------ r3292 | david_page | 2007-10-10 15:02:54 -0700 (Wed, 10 Oct 2007) | 3 lines issue 2440 bin/restore of encrypted or signed backup requires online server instance ------------------------------------------------------------------------ r3293 | gary_williams | 2007-10-11 00:55:27 -0700 (Thu, 11 Oct 2007) | 2 lines make location of replication topology file configurable ------------------------------------------------------------------------ r3294 | lutoff | 2007-10-11 01:47:01 -0700 (Thu, 11 Oct 2007) | 2 lines Fix create-ads: backend name should not be mandatory as it's always exit in the server Fix unit-test 'beforeclass' and 'afterclass' ------------------------------------------------------------------------