pki.git/base/common/src/com/netscape, branch ticket-309

Refactored GetCookie servlet.

2012-10-17T23:26:18+00:00

The GetCookie servlet has been refactored to use the new
SecurityDomainProcessor.

Ticket #309

Enabled authentication for security domain REST interface.

2012-10-17T23:26:10+00:00

The REST interface for security domain has been refactored and
configured such that it requires authentication. A CLI has been
added to get an installation token.

Ticket #309

Reverted to old interface and httpclient to get installation token.

2012-10-12T20:18:10+00:00

This is a workaround until we can get the new interface working on IPA
clones.

Return to d9 behavior for RetrieveModificationsTask

2012-10-12T03:55:12+00:00

Added version number into server status.

2012-09-28T14:43:26+00:00

The GetStatus servlet has been modified to include the server version
number.

Ticket #339

fall back to old interface for installtoken if needed

2012-09-28T02:40:00+00:00

Renamed escapeDN() into escapeRDNValue().

2012-09-28T02:22:18+00:00

The escapeDN() has been renamed into escapeRDNValue() for better
clarity.

Ticket #193

(fixed warning for) task #304 TMS ECC infrastructure (enrollment with client-side and server-side key generation, and key archival)

2012-09-27T00:20:54+00:00

Use getStatus servlet to provide startup status

2012-09-21T19:42:42+00:00

Ticket 314

Changes to use standard dbuser

2012-09-20T02:20:34+00:00

We create a user that can be used to connect to the database using the
subsystem cert for client auth.  We identified this user, using the seeAlso
attribute and provided certmap rules to this effect.

For this user, we used to reuse the uid = user CA-hostname-port, which is already
created for inter-system communication.  But this is problematic if more than one
dbuser exists, as the directory server may bind as the incorrect user.  In any
replication topology, there must be only one dbuser using the subsystem cert.

To simplify things, we create a new user specifically for this purpose
(pkidbuser), and we remove the seeAlso attribute from the older dbusers.

A script is needed to convert existing dogtag 9 istances to use the new user,
and set the relevant acls.  This will be done in a separate commit.