pki.git/base/server/tomcat/src, branch master

Add groups and request attributes to external principals

2017-03-16T07:46:18+00:00

Add the ExternalAuthenticationValve valve, which, if an externally
authenticated principal is available, reads the REMOTE_USER_GROUP
information from the Coyote request and adds the groups ("roles" in
Tomcat terminology) to the principal.

It also saves a complete copy of the request attribute map in the
princpial.  The new class ExternalPrincipal is used to achieve this.

Part of: https://pagure.io/dogtagpki/issue/1359

Remove unused dependency from tomcat classes build

2017-02-07T00:41:44+00:00

Removed redundant find_file() for Tomcat libraries.

2016-12-18T11:12:44+00:00

The CMake scripts have been modified to remove redundant
invocations of find_file() to find Tomcat libraries.

https://fedorahosted.org/pki/ticket/2560

Fixed pki-tools build order.

2016-12-18T11:11:36+00:00

To help troubleshooting build issues the pki-tools build targets
have been modified such that they run sequentially. This way error
messages will be easier to find in the build log.

https://fedorahosted.org/pki/ticket/2463

Generalized list of files in CMakeLists.txt.

2016-11-11T22:22:07+00:00

The list of source and class files in some CMake files have been
generalized to allow renaming Java packages without changing the
CMake files again.

https://fedorahosted.org/pki/ticket/6

Added CMake target dependencies.

2016-07-26T19:18:14+00:00

To help troubleshooting build issues, some CMake dependencies have
been added to some targets even though the actual codes do not
require those dependencies. This will ensure the targets are built
sequentially so build failures can be found more easily at the end
of the build log.

https://fedorahosted.org/pki/ticket/2403

Fix build on Fedora 25

2016-07-01T00:16:28+00:00

Look for the right JAX-RS API JAR (it has moved in Fedora 25).

Also remove a lot of redundant 'find_file' operations for this JAR.

Fixes: https://fedorahosted.org/pki/ticket/2373

Extract common base class for SSLAuthenticatorWithFallback

2016-01-21T09:59:17+00:00

Two Tomcat version-specific implementations of
SSLAuthenticatorWithFallback exist, with much duplicate code.
Extract an abstract base class 'AbstractPKIAuthenticator' and
implement just the unique bits in the concrete classes.

Part of: https://fedorahosted.org/pki/ticket/1359

Startup log message improvementes.

2015-06-16T21:51:38+00:00

The PKIListener has been modified to verify that all subsystems
are running and to show the command to enable the subsystem if it
was disabled due to errors.

https://fedorahosted.org/pki/ticket/1406

Patches to get nuxwdog working with systemd

2015-05-10T20:09:24+00:00

This patch adds some new unit files and targets for starting instances
with nuxwdog, as well as logic within the pki-server nuxwdog module to
switch to/from the old and new systemd unit files.

It also corrects some issues found in additional testing of the nuxwdog
change scripts.

To use nuxwdog to start the instance, a user needs to do the following:

1. Create an instance normally.
2. Run: pki-server instance-nuxwdog-enable 
3. Start the instance using:
   systemctl start pki-tomcatd-nuxwdog@.service

To revert the instance, simply do the following:

1. Run: pki-server instance-nuxwdog-disable 
2. Start the instance using:
   systemctl start pki-tomcatd@.service