https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=246270
Resolves: bug 246270
Bug Description: The notion of a "Server Root" has gone away in Admin
Server, so the Console needs to adjust for this.
Reviewed by: ???
Files: see diff
Branch: HEAD
Fix Description: The server root was mainly used for a deprecated merge
config capability in the Console. The attached changes remove all
traces of the server root. I've also bumped the version up to 1.1.0,
improved the build system, turned the startconsole script into a
template, fixed some theme bugs, and worked on the RPM packaging.
Platforms tested: FC6 & RHEL4
Flag Day: no
Doc impact: no
https://bugzilla.redhat.com/bugzilla/attachment.cgi?id=158240&action=diff
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=246124
Resolves: bug 246124
Bug Description: The findSIEDNByIDSSL() function in adminutil needs to use
the credentials used to authenticate to the webserver instead of the siedn
when calling getServerDNListSSL().
Reviewed by: ???
Files: see diff
Branch: HEAD
Fix Description: The attached diffs save the siedn off before calling
getServerDNListSSL() and set the userdn and password in the AdmLDAPInfo
to the credentials supplied by the password pipe. There's also an
unrelated
change in the code that parses admpw. On my machine (FC6 i386), the
parsing
of admpw was giving incorrect results as viewed in gdb. For some reason,
the pointer was being incremented before assignment. Noriko did not
observe
this on her RHEL4 machine, but we agreed that the changes I made are more
safe as we will always get the intended results.
Platforms tested: FC6
Flag Day: no
Doc impact: no
https://bugzilla.redhat.com/bugzilla/attachment.cgi?id=158146&action=diff
Summary: Configure Pass Thru Auth
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=244749
The first diff is for the Admin Server setup and is almost identical to the proposal in comment #20, which is reviewed by Rich (Thank you!)
The second one is for the Directory Server ds_newinst; proposing to remove the dependency on the Configuration Directory from the DS code and moving them to the Admin Server code.
Thanks,
--noriko
------- Additional Comments From nhosoi(a)redhat.com 2007-06-27 17:57 EST -------
Created an attachment (id=158070)
--> (https://bugzilla.redhat.com/bugzilla/attachment.cgi?id=158070&action=view)
cvs diffs (adminserver)
Files:
Makefile.am
admserv/newinst/src/AdminUtil.pm.in
admserv/newinst/src/dirserver.map.in
admserv/newinst/src/register_param.map.in
admserv/newinst/src/setup-ds-admin.pl.in
admserv/schema/ldif/15dspta.ldif.tmpl.in
Description: resurrected the code adding cn=Pass Through Authentication for
o=netscape. In addition to the one in comment #20, adding the calling code to
admserv/newinst/src/setup-ds-admin.pl.in in case the new server is
non-configuration DS.
------- Additional Comments From nhosoi(a)redhat.com 2007-06-27 18:01 EST -------
Created an attachment (id=158071)
--> (https://bugzilla.redhat.com/bugzilla/attachment.cgi?id=158071&action=view)
cvs diff (ldapserver)
Files:
ldap/admin/src/create_instance.[ch]
Description:
1) removing the dependency on the config_ds
2) ds_newinst always adds "cn=Pass Through Authentication" with the
nsslapd-pluginEnabled value off.
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=246020
Resolves: bug 246020
Bug Description: The current viewlog CGI needs to be modified to be able
to work
properly with the Console.
The CGI currently only supports the GET request method. This works
for Admin
Express, but Console expects it to support the POST request method.
The output of the CGI currently includes a log selection combo box as
well as
other HTML elements that make for a nice useful log viewer page in Admin
Express. The Console needs to be able to get get the raw log content
that it
requests.
Reviewed by: ???
Files: see diff
Branch: HEAD
Fix Description: The attached diffs address the above issues. With
these changes,
the CGI will work with both the GET and POST request methods. I've
added a new
CGI parameter called "nohtml". This optional parameter is a flag that
allows the
caller to ask for only the raw content to be sent back. This
satisfies the needs
of the Console while keeping the behavior the same for Admin Express.
Platforms tested: FC6
Flag Day: no
Doc impact: no
https://bugzilla.redhat.com/bugzilla/attachment.cgi?id=158068&action=diff
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=245665
Resolves: bug 245665
Bug Description: The dsa library in Admin Server still heavily relies on the
concept of a server root. This library is used by the Directory Server cgi
tasks.
The dsa library should try to get paths dynamically from the Directory
Server
config when possible. Other paths that are not in the config, such as the
location of command-line utilities, should be passed in as a define at
compilation time.
Reviewed by: ???
Files: see diff
Branch: HEAD
Fix Description: This pass eliminated the usage of a "server root" in
the dsa library.
I also refactored some of the code that was referring to the "install
root" as
it did not seem to really represent the directory that it refers to.
I renamed
it to "instance dir" and adjusted the getter function and variables
accordingly. I needed to pass in the DS libdir as a define for being
able to
find the instance dir in the code.
I also found that I was incorrectly using the lockdir config attribute
to set
the rundir, which was causing problems for the start, stop, and
restart CGIs.
We don't have the rundir in cn=config by default, but we already have
it set as
a PIDDIR define, so I opted to use that instead. The start, stop, and
restart
CGIs now work properly.
Platforms tested: FC6
Flag Day: no
Doc impact: no
https://bugzilla.redhat.com/bugzilla/attachment.cgi?id=157923&action=diff
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=245665
Resolves: bug 245665
Bug Description: The dsa library in Admin Server still heavily relies on the
concept of a server root. This library is used by the Directory
Server cgi
tasks.
The dsa library should try to get paths dynamically from the Directory
Server
config when possible. Other paths that are not in the config, such as the
location of command-line utilities, should be passed in as a define at
compilation time.
Reviewed by: ???
Files: see diff
Branch: HEAD
Fix Description: This is a first pass at cleaning up the paths in
dsalib. These
changes make the path getter functions use the Directory Server config
values
where possible. The next step is to pass the proper paths to the
command-line
utilities at compile time.
Platforms tested: FC6
Flag Day: no
Doc impact: no
https://bugzilla.redhat.com/bugzilla/attachment.cgi?id=157833&action=diff
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=245369
Resolves: bug 245369
Bug Description: mod_admserv: Task cache refresh uses wrong credentials
Reviewed by: ???
Files: see diff
Branch: HEAD
Fix Description: When the user requests a Task url, the admin server first
figures out which server instance (or product) the request is for, then
checks
to see if it has seen that server or product before. If not, it uses the
function sync_task_sie_data() to read the task data from the SIEs and ISIEs.
However, it needs to use the credentials of the currently authenticated user
to do so, because the tasks are protected by ACIs, and the user should
only be
allowed to read those tasks the user has access to. The interface to read
these tasks is not great. It expects the SIE is a user with a password, and
it attempts to bind as that user, instead of the currently authenticated
user.
I had to hack it to force it to use the current userdn and password instead
of the SIE DN and SIE password.
The SIE DN and password are now deprecated for binding. There were a couple
of places where the SIE was used for both the bind DN and the SIE DN. I've
created another structure member for the admservSieDN for use as the SIE
(the
configuration base DN) instead of as a bind DN, and deprecated the use
of the
SIE as the bind DN elsewhere in the code.
Platforms tested: RHEL4
Flag Day: no
Doc impact: no
https://bugzilla.redhat.com/bugzilla/attachment.cgi?id=157632&action=diff
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=245214
Resolves: bug 245214
Bug Description: adminserver: Solaris port for 1.1
Reviewed by: ???
Files: see diff
Branch: HEAD
Fix Description: Fortitude can supply different components, depending on
the operating system. On Fedora, mod_nss and Apache are already there,
so we don't use Fortitude.
On RHEL4, we use Fortitude for mod_nss.
On Solaris, we use Fortitude for Apache and mod_nss.
I've created a fortitude.m4 that can handle all of these cases, and
changed the existing httpd.m4 and mod_nss.m4 to first see if
fortitude.m4 has found the component. configure will also pass the
proper --with flags to mod_admserv and mod_restartd.
ICU introduces a dependency on C++. Solaris requires linking with the
C++ libraries and that also requires using C++ to link as well. This
means using the CXXLINK macro.
There were a few other minor porting issues which required the
additional compiler defines and use of config.h.
We need to set the libpath before using the @cgibindir@/config program.
LIBPATH was not being set correctly on Solaris because I was using the
extended sort flags instead of the standard ones.
Platforms tested: Solaris 9 64bit
Flag Day: no
Doc impact: no
https://bugzilla.redhat.com/bugzilla/attachment.cgi?id=157561&action=diff
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=245212
Resolves: bug 245212
Bug Description: mod_admserv: Solaris port for 1.1
Reviewed by: ???
Files: see diff - new file dummy.cpp
Branch: HEAD
Fix Description: There are several problems with building/running
mod_admserv on Solaris. The biggest is that ICU introduces a dependency
on C++. Solaris requires linking with the C++ libraries and that also
requires using C++ to link as well. This means using the CXXLINK
macro. However, automake will only generate this macro if it detects a
C++ source file in Makefile.am. So, we have to introduce a dummy.cpp
file to force automake to generate the CXXLINK macro, then use that to
link the module.
I also added some support for Fortitude, although this will be handled
by adminserver when building mod_admserv as part of adminserver.
Platforms tested: Solaris 9 64bit
Flag Day: no
Doc impact: no
https://bugzilla.redhat.com/bugzilla/attachment.cgi?id=157560&action=diff
--
Fedora-directory-devel mailing list
Fedora-directory-devel(a)redhat.com
https://www.redhat.com/mailman/listinfo/fedora-directory-devel
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=245208
Resolves: bug 245208
Bug Description: adminutil: Solaris port for 1.1
Reviewed by: ???
Files: see diff - new file dummy.cpp
Branch: HEAD
Fix Description: There are several problems with building/running
adminutil on Solaris. The biggest is that ICU introduces a dependency
on C++. Solaris requires linking with the C++ libraries and that also
requires using C++ to link as well. This means using the CXXLINK
macro. However, automake will only generate this macro if it detects a
C++ source file in Makefile.am. So, we have to introduce a dummy.cpp
file to force automake to generate the CXXLINK macro, then use that to
link the shared libraries.
Accept automake version 1.10 or later.
Look for mozldap6 first, then mozldap.
Platforms tested: Solaris 9 64bit
Flag Day: no
Doc impact: no
https://bugzilla.redhat.com/bugzilla/attachment.cgi?id=157558&action=diff