[PATCH] 454 Replaced group dialog with group page.
by Endi Sukma Dewata
The dialog used to edit group attributes has been replaced with a
details page since it will be required for breadcrumbs. A new HTML
template has been added for this page.
Ticket #654
--
Endi S. Dewata
10 years
[PATCH] 453 Replaced user dialog with user page.
by Endi Sukma Dewata
The dialog used to edit user attributes has been replaced with a
details page since it will be required for breadcrumbs. A new HTML
template has been added for this page.
The renderField() in EntryPage has been renamed to loadField() for
consistency with the Dialog clas.
Ticket #654
--
Endi S. Dewata
10 years
[PATCH] 452 Replaced token dialog with token page.
by Endi Sukma Dewata
The dialog used to edit token attributes has been replaced with a
details page since it will be required for breadcrumbs. A new HTML
template has been added for this page.
Changing token status now can be done both in token list page and
in token details page.
The EntryPage has been modified such that it requires the editable
fields to be specified for the add mode.
To improve the appearance, the input fields in all dialogs and pages
will now appear as read-only while the data is still loading.
Ticket #654
--
Endi S. Dewata
10 years
[PATCH] 451 Added enable/disable functionality for TPS audit.
by Endi Sukma Dewata
A new method has been added to TPS audit REST service to enable or
disable audit logging. The CLI and UI have been modified to provide
a way to acces this functionality. Also, new ACL entries have been
added for audit.
Ticket #955
--
Endi S. Dewata
10 years
[PATCH] 450 Added error dialog for TPS UI.
by Endi Sukma Dewata
Previously error messages were displayed using alert(). It has been
replaced with a new ErrorDialog which can be formatted properly.
Ticket #949
--
Endi S. Dewata
10 years
[PATCH] 448 Added change token status dialog.
by Endi Sukma Dewata
A new dialog has been added to change the token status. The status
can be changed by clicking the Status value in the tokens table.
Initially the status is Uninitialized. The status can be changed
according to the allowed status transitions defined in the CS.cfg.
The status and reason fields in TokenRecord is now translated into
a single status field in TokenData. This way the UI only needs to
handle a single status field.
A new field has also been added to the database for token type.
Some issues displaying and updating some token attributes have been
fixed as well.
Ticket #654
--
Endi S. Dewata
10 years
[PATCH] 447 Refactored UI framework.
by Endi Sukma Dewata
Previously the content of table cells was generated by JavaScript
code. Now the content can be defined in the HTML template to allow
cleaner separation from the code. Attributes of the entry being
displayed in the row can now be specified in the template using
${attribute} notation. A special attribute called "parent" can be
used to refer to the attributes of the parent object. The current
templates have been modified to utilize this feature.
The renderIDColumn() in TableItem is no longer needed so it has been
removed. An open() method is added to handle any links in the cell.
The PropertiesTableItem has been moved into tps.js.
The "attributes" property in Dialog and EntryPage has been renamed
to "entry".
Ticket #654
--
Endi S. Dewata
10 years
[pki-devel][PATCH] 0008-Further-progress-Format-operation.patch
by John Magne
Patch accomplishes the following:
1. Read applet into memory to prepare to write to token.
2. With tpsclient create secure channel by implementing Initialize Update and ExternalAuthenticate messages.
3. Support for MAC and encryption for messages going on after secure channel has been created.
4. Implemented method to remove an aid file or instance from the token.
5. Added some symkey methods to allow TPS to manipulate session keys.
Have not tried this with real token as of yet. The tpsclient does verify of the MAC coming from the server and decrypts encrypted messages. Decrypted messages have to be correct for the MAC verification to work.
Next step will be to add the phone home servlet to the TPS and give it a try with a real token and esc.
10 years
[PATCH] 0002 Trac Ticket #884 TPS Rewrite: Audit and other Logging
by Christina Fu
Attached please find the patch for Trac Ticket #884
https://fedorahosted.org/pki/ticket/884
This TPS Rewrite patch focuses on making Auditing and other Logging
available.
The Java Logging framework is actually readily available. The gist of
the work for this ticket was mostly mapping the old TPS audit events
defined in audit.h to where the java ones are defined:
LogMessages.properties, as well as making sure the audit signing
signatures are legit.
The link to the mapping, as provided in the ticket is :
http://pki.fedoraproject.org/wiki/TPS_Rewrite#Audit_Messages
TPS rewrite authors are to consult the wiki page to find the right audit
message formatter to use while doing the rewrite work.
The mapping or detail of each audit message and format could change per
CC review at a later time.
Example usage can also be found in the ticket.
In my developer's environment setup, I was able to generate signed audit
messages and run AuditVerify to verify the signatures.
What is NOT covered:
* cloning consideration
* convenience routines to simplify the calls for auditing (this can be
written when we have a clear picture of whether some information can be
conveniently retrieved at a central location: e.g. perhaps some kind of
"session" within the current running thread)
* actual auditing calls (to be made by individual TPS rewrite authors
where appropriate)
review comments welcome.
Christina
10 years
