Rohit Yadav
4b45d25152
CLOUDSTACK-8272: Python based file-lock free password server implementation
...
- VRs are single CPU, so Threading based implementation favoured than Forking based
- Implements a Python based password server that does not use file based locks
- Saving password mechanism is provided by using secure token only to VR (localhost)
- Old serve_password implementation is removed
- Runs with Python 2.6+ with no external dependencies
- Locks used within threads for extra safety
Signed-off-by: Rohit Yadav <rohit.yadav@shapeblue.com>
2015-03-12 13:56:28 +05:30
Rohit Yadav
cfd4573335
engine: Add Upgrade path from 4.5.0 to 4.5.1
...
Encrypts:
- Remote access vpn preshared key
- StoragePool's user info
- Keystore's key
This closes #112
Signed-off-by: Rohit Yadav <rohit.yadav@shapeblue.com>
2015-03-12 12:13:28 +05:30
Rohit Yadav
c198dfdb7a
Update pom and version usage to 4.5.1-SNAPSHOT
...
Signed-off-by: Rohit Yadav <rohit.yadav@shapeblue.com>
2015-03-12 12:13:18 +05:30
Rohit Yadav
2d00f9ede6
server: remove unused import in ImageStoreJoinDaoImpl
...
Signed-off-by: Rohit Yadav <rohit.yadav@shapeblue.com>
2015-03-11 17:26:50 +05:30
Sanjay Tripathi
eca7f9cacc
CLOUDSTACK-8315: CS API listVMSnapshot doesn't have tags ‘project’ and ‘projectid’.
...
(cherry picked from commit 182d770f9f5fef26e5136b20ee71c34e5327ca43)
Signed-off-by: Rohit Yadav <rohit.yadav@shapeblue.com>
2015-03-11 16:39:18 +05:30
Rohit Yadav
02cadc3fb3
api: avoid sending sensitive data in api response
...
- UI: use post when updating user
- S3: don't send s3 key in the response
- VPN: don't send preshared key in remoteaccessvpn api response
- Snapshot response should set zone id not volume's device id
Signed-off-by: Rohit Yadav <rohit.yadav@shapeblue.com>
2015-03-11 16:34:11 +05:30
Rohit Yadav
7d2ffe063d
systemvms: use Debian http redirector for apt repos
...
Picked in parts from https://github.com/apache/cloudstack/pull/103/files
Signed-off-by: Rohit Yadav <rohit.yadav@shapeblue.com>
2015-03-11 13:22:09 +05:30
Laszlo Hornyak
a04dd7162e
CLOUDSTACK-8304: disable snapshots from non-snapshot repositories
...
Signed-off-by: Laszlo Hornyak <laszlo.hornyak@gmail.com>
Signed-off-by: Rajani Karuturi <rajanikaruturi@gmail.com>
This closes #100
(cherry picked from commit 9a38b2f7de79888cdbbb2dca2305d6ec10f81ee0)
Signed-off-by: Rohit Yadav <rohit.yadav@shapeblue.com>
2015-03-11 13:08:00 +05:30
Sanjay Tripathi
5aedeb74f9
CLOUDSTACK-8312: The storage usage of "Primary Storage Allocated" is incorrect.
...
(cherry picked from commit 520d96724ac437aa0a9ed391066f4f0879eaef7e)
Signed-off-by: Rohit Yadav <rohit.yadav@shapeblue.com>
2015-03-11 13:07:47 +05:30
Star Guo
290938b08e
scripts: add ip set interface up because in CentOS7 the interface will not auto up
...
This closes #97
Signed-off-by: Rohit Yadav <rohit.yadav@shapeblue.com>
2015-03-10 10:18:10 +05:30
René Moser
729e239a47
systemvm: correct sftp subsystem path of debian wheezy
...
This closes #104
Signed-off-by: Rohit Yadav <rohit.yadav@shapeblue.com>
(cherry picked from commit 47de4a12f4440c959c22f4a6fdf51545565152f1)
Signed-off-by: Rohit Yadav <rohit.yadav@shapeblue.com>
2015-03-10 10:15:54 +05:30
Rohit Yadav
f3f47f25ba
systemvm: avoid tcp responses with timestamp
...
Signed-off-by: Rohit Yadav <rohit.yadav@shapeblue.com>
2015-03-09 17:10:13 +05:30
Rohit Yadav
b879916f5c
CLOUDSTACK-7639: make cidr updation more efficient
...
check and update only when required
Signed-off-by: Rohit Yadav <rohit.yadav@shapeblue.com>
2015-03-09 16:29:05 +05:30
Rohit Yadav
b2b9de7fa3
CLOUDSTACK-7639: make cidrlist update when updateNetworkAclItem is called
...
Signed-off-by: Rohit Yadav <rohit.yadav@shapeblue.com>
2015-03-09 15:40:32 +05:30
ramamurtis
fde2887476
CLOUDSTACK-8307: UI not showing all Domains, if there are more than 24 domains then the last domain gets cut off on firefox and IE. Added a flag in treeview widget and based on the flag adding css class which will make overflow as scroll instead of the default auto.
...
Fixes #101
Signed-off-by: Rohit Yadav <rohit.yadav@shapeblue.com>
(cherry picked from commit 8591383bcc09b4fd0ff1c6336c6c45199be250b3)
Signed-off-by: Rohit Yadav <rohit.yadav@shapeblue.com>
2015-03-09 14:27:23 +05:30
Rohit Yadav
ab8f367850
systemvm: have apache2 use secure SSL cipher suite
...
Created using Mozilla's ssl config generator:
https://mozilla.github.io/server-side-tls/ssl-config-generator/
Intermediate setting was used, with apache version 2.2.22 and openssl 1.0.1e
Oldest compatible clients:
Firefox 1, Chrome 1, IE 7, Opera 5, Safari 1, Windows XP IE8, Android 2.3, Java 7
Signed-off-by: Rohit Yadav <rohit.yadav@shapeblue.com>
2015-03-09 12:43:42 +05:30
Abhinandan Prateek
519488fcdc
fixing misleading comment
2015-03-09 00:20:28 -04:00
Pierre-Luc Dion
d9cf0e2479
update 4.5.0 bugfix list, add Update this file quick howto at the end using jira-changes.py
2015-03-08 11:51:33 -04:00
Rohit Yadav
f9090eacd6
CLOUDSTACK-8248: loadCidrs before sending response
...
Fixes regression from CLOUDSTACK-6582
Signed-off-by: Rohit Yadav <rohit.yadav@shapeblue.com>
2015-03-06 21:43:24 +05:30
Phillip Kent
edf7675d2e
modify description for name parameter in ListVMsCmd.java
...
(cherry picked from commit d4523c577813b9c21df55bd18776bee6ad872588)
Signed-off-by: Rohit Yadav <rohit.yadav@shapeblue.com>
2015-03-05 18:28:34 +05:30
René Moser
e39ec2767e
CreatePortForwardingRuleCmd: Fix typos and update descriptions.
...
Signed-off-by: Sebastien Goasguen <runseb@gmail.com>
This closes #94
2015-03-05 11:02:05 +01:00
Rajani Karuturi
04efdce901
Fixed PMD NullDeref issues in S3Utils.
...
(cherry picked from commit debcbcc1454789936407583fe0aba8e158b16cad)
Signed-off-by: Rohit Yadav <rohit.yadav@shapeblue.com>
2015-03-05 12:49:38 +05:30
Sebastien Goasguen
76674c40d4
Fix marvin version in Dockerfile
2015-03-04 14:48:57 +01:00
Rajani Karuturi
1f97f94046
Fixed checkstyle issues due to commit 0b6c540a203453580bb76a0d0a60be292fccfa0e
...
(cherry picked from commit c5c1b1d4628c5fc7a402586325c7bf937f42766e)
Signed-off-by: Rohit Yadav <rohit.yadav@shapeblue.com>
2015-03-04 16:59:13 +05:30
santhosh
0ae5912f00
listDirectory method updated to use ObjectListing.isTruncated().
...
Because buckets can contain a virtually unlimited number of keys, the
complete results of a list query can be extremely large. To manage large
result sets, Amazon S3 uses pagination to split them into multiple
responses.
Signed-off-by: Rajani Karuturi <rajanikaruturi@gmail.com>
This closes #25
(cherry picked from commit 0b6c540a203453580bb76a0d0a60be292fccfa0e)
Signed-off-by: Rohit Yadav <rohit.yadav@shapeblue.com>
2015-03-04 16:59:12 +05:30
Sanjay Tripathi
8069b17250
CLOUDSTACK-8296 VMs cannot be migrated with XenMotion as network is not available.
...
(cherry picked from commit 736c7d7668796af96f223a2c6cd82aac6789a2ee)
Signed-off-by: Rohit Yadav <rohit.yadav@shapeblue.com>
2015-03-04 16:59:12 +05:30
Laszlo Hornyak
c8e6fbb812
kvm: Check the return value of the cloudstack-setup-agent command
...
Bug-Url: https://issues.apache.org/jira/browse/CLOUDSTACK-8016
Signed-off-by: Laszlo Hornyak <laszlo.hornyak@gmail.com>
Signed-off-by: Rajani Karuturi <rajanikaruturi@gmail.com>
This closes #93
(cherry picked from commit 7c1590ffd67b74f52fe374b0fb91f8c1ef731c39)
Signed-off-by: Rohit Yadav <rohit.yadav@shapeblue.com>
2015-03-04 16:56:48 +05:30
Jayapal
dd6bcde65b
CLOUDSTACK-8298: Update copying large size VR config file in xenserver
...
When there is large size VR configuration (aggregate commands) copying data to VR using vmops plugin was failed
because of the ARG_MAX size limitation. The configuration data size is around 300KB.
Updated this to create file in host by scp with file contents. This will create file in host.
Then copy the file from the host to VR using hte vmops createFileInDomr method.
In host file get created in /tmp/ with name VR-<UUID>.cfg, once it copied to VR this file will be removed.
(cherry picked from commit 619f0142555d2245e3fa90036f825525191b31bd)
Signed-off-by: Rohit Yadav <rohit.yadav@shapeblue.com>
2015-03-04 16:56:07 +05:30
Sebastien Goasguen
9562175ca7
Add Dockerfile for simulator
2015-03-04 12:00:32 +01:00
Marcus Sorensen
def4a5ef5a
LibvirtComputingResource: Support 'Oracle Linux 7' as pv guest
...
Change-Id: I0b720de1b86b09ceb4ae19b3edcdcac7c557da18
2015-03-03 10:46:38 -08:00
Abhinandan Prateek
79cdcf8d7d
CLOUDSTACK-8265: added foreign key constriant on guest os id
2015-03-03 01:45:48 -05:00
Rohit Yadav
0f819f1583
server: check and set sercure cookie flag only after login
...
Signed-off-by: Rohit Yadav <rohit.yadav@shapeblue.com>
2015-02-28 18:20:56 +05:30
Rohit Yadav
b6b3494782
CLOUDSTACK-7063, CLOUDSTACK-7064: Add security headers on HTTP response
...
- Adds X-XSS-Protection header
- Adds X-Content-Type-Options header
- Fixes to use json content type defined from global settings
- Uses secure cookie if enabled in global settings
Signed-off-by: Rohit Yadav <rohit.yadav@shapeblue.com>
2015-02-28 18:12:37 +05:30
Rohit Yadav
f70afa1375
scripts: use cloudmanagementserver.keystore instead of cloud.keystore
...
Signed-off-by: Rohit Yadav <rohit.yadav@shapeblue.com>
2015-02-28 17:05:29 +05:30
Rohit Yadav
814e5574dc
pbkdf2: fix encoding issue when converting byte[] to String
...
Signed-off-by: Rohit Yadav <rohit.yadav@shapeblue.com>
2015-02-28 00:42:27 +05:30
Rohit Yadav
dd5fb2ebd6
server: fix unit test to fix build
...
Signed-off-by: Rohit Yadav <rohit.yadav@shapeblue.com>
2015-02-27 19:18:18 +05:30
Rohit Yadav
5481485a08
CLOUDSTACK-5238: password checks, NPE fixes and minor fixes
...
- insecure authenticators excluded in configuration
- snapshot response should have zone
- remove vmsnapshots when removing accounts
Signed-off-by: Rohit Yadav <rohit.yadav@shapeblue.com>
2015-02-27 18:20:10 +05:30
Rohit Yadav
e000646790
CLOUDSTACK-8273: fix baremetal account creation
...
Signed-off-by: Rohit Yadav <rohit.yadav@shapeblue.com>
2015-02-27 15:52:25 +05:30
Rohit Yadav
9533c54db6
CLOUDSTACK-5237: Add a default PBKDF2-SHA-256 based authenticator
...
Signed-off-by: Rohit Yadav <rohit.yadav@shapeblue.com>
2015-02-27 15:50:09 +05:30
Rohit Yadav
e287de9fd9
CLOUDSTACK-7089: don't log VNC password
...
Signed-off-by: Rohit Yadav <rohit.yadav@shapeblue.com>
2015-02-26 18:10:23 +05:30
Rohit Yadav
cb08707add
CLOUDSTACK-8273: refactor baremetal user name to utils, restrict baremetal user
...
Signed-off-by: Rohit Yadav <rohit.yadav@shapeblue.com>
2015-02-26 17:42:21 +05:30
Rohit Yadav
985a61652e
CLOUDSTACK-8285: check and update IP capacity states based on allocation state
...
- Backend should update if state was diabled and now has changed
- UI's fetch latest does not actually fetch latest
Signed-off-by: Rohit Yadav <rohit.yadav@shapeblue.com>
2015-02-25 16:46:12 +05:30
Rohit Yadav
b462a56f27
CLOUDSTACK-8282: startSystemVM should override consoleproxy.start setting
...
Signed-off-by: Rohit Yadav <rohit.yadav@shapeblue.com>
2015-02-25 14:21:11 +05:30
Abhinandan Prateek
bbaf7d2d95
CLOUDSTACK-8265: added os mappings for Ubuntu 14.04
2015-02-24 07:27:23 -05:00
Marcus Sorensen
344a9f992e
LibvirtComputingResource: Fix coverity scan, recent bugfixes revealed a potential unhandled null in getResizeScriptType
...
Change-Id: I5715a4424646261f2c43cd5e0a16fd72dd12c753
2015-02-23 16:56:54 -08:00
Rohit Yadav
b9e0e914c4
db: use explicit USE statements to avoid SQL failures
...
create-schema-premium.sql may fail with certain MySQL/MariaDB version which
require explicit database use.
(cherry picked from commit 09e26c826f3942946a9e3cbd0c632fc0c7791e56)
Signed-off-by: Rohit Yadav <rohit.yadav@shapeblue.com>
2015-02-23 02:02:02 +05:30
Pierre-Luc Dion
177c190367
CLOUDSTACK-8188: missing labe:label.password.reset.confirm. removed duplicate label.vlan.id from dictionary2.jsp removed duplicate label.vlan from message.properties
2015-02-19 22:12:32 -05:00
Pierre-Luc Dion
34c75f296b
fix CLOUDSTACK-8187 and CLOUDSTACK-8232: missing UI labels
2015-02-19 21:00:33 -05:00
Rohit Yadav
070813a106
CLOUDSTACK-6541: Fix monthly recurring snapshot UI limit, limit to 1-28 days
...
Signed-off-by: Rohit Yadav <rohit.yadav@shapeblue.com>
2015-02-19 15:42:12 +05:30
Rohit Yadav
a85aea74de
CLOUDSTACK-5824: poll for delete snapshot and volume events
...
Signed-off-by: Rohit Yadav <rohit.yadav@shapeblue.com>
2015-02-19 15:33:27 +05:30