delta/python-packages/qpid-python.git/cpp/src/qpid/acl, branch QPID-6125-ProtocolRefactoring

QPID-5890: Validation refactoring. Fix Coverity MIXED_ENUM complaint.

2014-07-28T13:48:57+00:00

git-svn-id: https://svn.apache.org/repos/asf/qpid/trunk/qpid@1614031 13f79535-47bb-0310-9956-ffa450edef68

QPID-4123: C++ Broker ACL creates too many rules

2014-07-23T17:01:40+00:00

Recent changes have added new tables to define what
are ACL lookups and their properties. This commit
finishes that work by not propagating rules that
will never match. Also, it completes the scaffolding
for allowed and denied host lists to be fully 
integrated. This commit:

* Adds startup logging of ACL validation tables
  with cross references to possible rule matches.
* Hooks the ACL host allow/deny connection lists
  into self test.
* Fixes self tests that get broken by proper rule
  table handling.
* Introduces a 'create connection' decision mode
  similar to ACL rule decision mode.
* Describes it all in doc book.



git-svn-id: https://svn.apache.org/repos/asf/qpid/trunk/qpid@1612874 13f79535-47bb-0310-9956-ffa450edef68

QPID-4947: Injecting derived host address failed to strip IPv6 [] decoration

2014-07-18T19:28:10+00:00

git-svn-id: https://svn.apache.org/repos/asf/qpid/trunk/qpid@1611776 13f79535-47bb-0310-9956-ffa450edef68

QPID-5902: Replace boost::make_shared with boost::shared_ptr

2014-07-17T17:35:01+00:00

git-svn-id: https://svn.apache.org/repos/asf/qpid/trunk/qpid@1611409 13f79535-47bb-0310-9956-ffa450edef68

QPID-4947: C++ Broker ACL restricts hosts from which users may connect.

2014-07-15T22:54:51+00:00

This commit adds:
* Acl rule file "create connection host=hostname" support for allowing and denying connections.
* AclHost class to represent a host specified in the rule file.
* Global and user-specific lists of AclHost rules. Created by AclReader and consumed by AclConnectionCounter.
* Address range checks and other giblets in SocketAddress:
** asString support to hide IPv6 decoration and service (port) details.
** binary comparison of network addresses.
** new firstAddress function to complement existing nextAddress. Socket addrinfo for AclHost objects is computed once only for lifetime of Acl file load.
** Posix and Windows implementations are identical.
* New unit test for address comparisons. Testing a live broker is great but forcing connections to be from some arbitrary IPv4 or IPv6 address is hard. So there's a unit test for that.

Further discussion about this feature is in https://reviews.apache.org/r/23322

git-svn-id: https://svn.apache.org/repos/asf/qpid/trunk/qpid@1610874 13f79535-47bb-0310-9956-ffa450edef68

QPID-5890: Add missing "queuename" property to Security doc. Rearrange entries in AclValidator for better automated doc generation.

2014-07-15T13:59:43+00:00

git-svn-id: https://svn.apache.org/repos/asf/qpid/trunk/qpid@1610700 13f79535-47bb-0310-9956-ffa450edef68

QPID-5890: Add missing "queuename" property for MOVE QUEUE and REDIRECT QUEUE

2014-07-15T13:40:51+00:00

git-svn-id: https://svn.apache.org/repos/asf/qpid/trunk/qpid@1610697 13f79535-47bb-0310-9956-ffa450edef68

QPID-5890: Refactor AclModule

2014-07-13T13:36:50+00:00

Remove AclHelper::loaValidationMap() function from AclLexer and replace it
with new logic in AclValidator.

See https://reviews.apache.org/r/23447/ for a visual diff of the changes.


git-svn-id: https://svn.apache.org/repos/asf/qpid/trunk/qpid@1610195 13f79535-47bb-0310-9956-ffa450edef68

QPID-5890: Refactoring AclModule.h

2014-07-11T20:43:51+00:00

* make single instances of strings associated with enums
* make more compact search functions
* make string definitions const
* return 'const string&' instead of copies of temporaries
* add self test as string defs sanity check
* export AclHelper to satisfy tests (!!)



git-svn-id: https://svn.apache.org/repos/asf/qpid/trunk/qpid@1609828 13f79535-47bb-0310-9956-ffa450edef68

QPID-5890: Refactor AclModule.h

2014-07-11T15:27:19+00:00

Move code from .h file into AclLexer source module.
Does not change basic function structure.



git-svn-id: https://svn.apache.org/repos/asf/qpid/trunk/qpid@1609728 13f79535-47bb-0310-9956-ffa450edef68