pki.git - Unnamed repository; edit this file 'description' to name the repository.

	Commit message (Collapse)	Author	Age	Files	Lines
*	Link to resteasy-base on rhel systems when running pkispawnalee-91	Ade Lee	2012-11-21	1	-1/+7
\|
*	Enabled Tomcat security manager.	Endi Sukma Dewata	2012-10-26	1	-0/+7
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	The tomcat.conf and the template deployment configuration have been modified to enable the security manager. The operations script has been modified to generate a new catalina.policy from the standard Tomcat policy, the standard PKI policy and the custom policy every time the instance is started. The current catalina.policy has been changed to store a header for the dynamically generated catalina.policy. A new pki.policy has been added to store the default PKI security policy. An empty custom.policy has been added to store policy customization. Ticket #223
*	add selinux context for pkidaemon, remove unneeded pid and lock code	Ade Lee	2012-10-05	1	-48/+3
\| \| \| \| \|	remove runcon from operations, add rules for spawn/destroy, add mgrepl changes to policy
*	Fixed conflicting log4j.properties.	Endi Sukma Dewata	2012-09-19	1	-1/+0
\| \| \| \| \| \| \| \| \|	The <instance>/lib link has been replaced with a real folder which contains links to the files in /usr/share/tomcat/lib. This way the log4j.properties can be placed in this folder without causing conflicts with other instances. Ticket: #284
*	Fixed problems with optional pki-symkey.	Endi Sukma Dewata	2012-09-18	1	-1/+4
\| \| \| \| \| \| \| \|	The deployment and init scripts have been fixed to create and check the link to symkey.jar if a TKS instance is added, and remove the link if the instance is removed. Ticket #331
*	Added proxy realm.	Endi Sukma Dewata	2012-09-05	1	-15/+37
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	CMS engine is a singleton and it's used by PKI realm to authenticate users accessing the subsystem. Since a Tomcat instance may contain multiple subsystems, each having separate realm, the PKI JAR links need to be moved into WEB-INF/lib so that they will run inside separate class loaders. Tomcat also requires that the authenticator and realm classes be available in common/lib. To address this a new package pki-tomcat.jar has been added. The package contains the authenticator and a proxy realm. When the subsystems start running, they will register their own realms into the proxy realms such that the authentications will be forwarded to the appropriate subsystems. Ticket #89
*	Verify symbolic links and update CS.cfg for Dogtag 10	Matthew Harmsen	2012-08-29	1	-0/+413
\| \| \| \| \| \| \|	* TRAC Ticket #301 - Need to modify init scripts to verify needed symlinks in an instance * TRAC Ticket #303 - Dogtag 10: CS.cfg parameters for Dogtag 9 instance running under Dogtag 10 packages . . .
*	Fixed operations to operate on correct number of instances	Ade Lee	2012-08-03	1	-100/+2
\| \| \| \| \| \| \|	Reverted previous fix to pkidaemon and operations. Now, as expected, systemctl start/stop pki-tomcatd@foo.service will stop instance foo, whereas pki-tomcatd.target will affect all tomcatd instances.
*	PKI Deployment Scriptlets	Matthew Harmsen	2012-08-02	1	-0/+98
\| \| \| \| \| \| \| \| \|	* PKI TRAC Ticket #279 - Dogtag 10: Fix remaining 'cloning' issues in 'pkispawn' . . . * PKI TRAC Ticket #280 - Dogtag 10: Fix remaining issues in 'pkidestroy' related to deletion of more than one instance . . . * PKI TRAC Ticket #281 - Dogtag 10: Fix 'pkidaemon'/'operations' issue to handle individual instance . . .
*	Selinux policy for new configuration.	Ade Lee	2012-07-25	1	-1/+1
\| \| \| \| \| \|	Added tomcat_t for java processes. Added aliases for old types to allow compatibility of existng subsystems. Added install scripts for pkispawn and pkidestroy
*	PKI Deployment Scriptlets	Matthew Harmsen	2012-05-25	1	-0/+1155
	* Integration of Tomcat 7 * Addition of centralized 'pki-tomcatd' systemd functionality to the PKI Deployment strategy * Removal of 'pki_flavor' attribute