Fix identities for security data storage, retrieval and generation

For the new security data storage and retrieval, and for symmetric
key generation, we need to store the identity of the agent that is
requesting and approving each operation, both in the ldap record
and in the audit logs.  (Tickets 806 and 807)

This patch also adds required logic to check that the owner of the
recovery request is the same agent that retrieves the key.  It also
adds missing audit log constants for symmmetric key generation so that
they will show up in the audit log.

1 files changed, 0 insertions, 3 deletions

diff --git a/base/kra/src/com/netscape/kra/RecoveryService.java b/base/kra/src/com/netscape/kra/RecoveryService.java
index 1b5781ca0..7b1685b4d 100644
--- a/base/kra/src/com/netscape/kra/RecoveryService.java
+++ b/base/kra/src/com/netscape/kra/RecoveryService.java
@@ -103,9 +103,6 @@ public class RecoveryService implements IService {
     public static final String ATTR_USER_CERT = "cert";
     public static final String ATTR_DELIVERY = "delivery";
 
-    // for Async Key Recovery
-    public static final String ATTR_APPROVE_AGENTS = "approvingAgents";
-
     private IKeyRecoveryAuthority mKRA = null;
     private IKeyRepository mStorage = null;
     private IStorageKeyUnit mStorageUnit = null;