Bug 4038 Grant Creation is Broken

This patch correctly increments consecutive calls to
PreparedStatement.setInt().

Change-Id: Ib07d8568ce536a987f6235d96103d4af6343a990
Signed-off-by: Ryan Goulding <ryandgoulding@gmail.com>

Merge "Bug 1911 Updating user info will result in un-redacted password field returned in the response"

Merge "Bug 1910 Enforce domain name uniqueness"

Merge "Bug 3519 Stop creating static exception instances"

Bug 1911 Updating user info will result in un-redacted password field returned in the response

Changes /auth/v1/users/{id} endpoint so that PUT request returns
a user with a redacted password.  Abstracts a REDACTED_PASSWORD
constant.

Change-Id: Ib692727a69dd00f34d83ccb63095ed7623926518
Signed-off-by: Ryan Goulding <ryandgoulding@gmail.com>

Bug 1910 Enforce domain name uniqueness

Domain names should be unique.  This change enforces domain name
uniqueness at the database layer.

Change-Id: I1cc90a3ae8683e6c51c5fd0c394b1d5973aed86c
Signed-off-by: Ryan Goulding <ryandgoulding@gmail.com>

Merge "Reorder authN feature order to prioritize MD-SAL startup"

Merge "Bug 2923 Restarting the controller causes multiple insertions users"

Bug 3519 Stop creating static exception instances

Stop using static exceptions so the stack trace is accurate.

Change-Id: Ib8e62813578ca1ab5ec52e41d7357af92b8129ef
Signed-off-by: Ryan Goulding <ryandgoulding@gmail.com>

Reorder authN feature order to prioritize MD-SAL startup

Change-Id: Iad0814dcd30daa9d24d029def8526a0211104639
Signed-off-by: Wojciech Dec <wdec@cisco.com>

Bug3680 - Fix loading of AuthN config
(Issue caused by project structure cleanup)

Change-Id: I6cc0a8d137b56da11d38a97a29fa2862f360f65a
Signed-off-by: Wojciech Dec <wdec@cisco.com>

Bug 2923 Restarting the controller causes multiple insertions users

Changes criteria of StoreBuilder.init() so it is called when
"idmlight.db.mv.db" does not exist.  Previously, the code checked for the
existence of "idmlight.db".  This convention changed with the addition of
H2 as the data store backing AAA data.

Change-Id: Ifa15ce89b414bbbb32b34d2ca38a3504921d8e27
Signed-off-by: Ryan Goulding <ryandgoulding@gmail.com>

Temporarily workaround deployment issue for aaa-artifacts

Change-Id: Ia9f6fa78f588982ee9ee1a54ebbd53fed13f5632
Signed-off-by: Thanh Ha <thanh.ha@linuxfoundation.org>

Fix missing <distributionManagement> for merge jobs

Change-Id: Ib11e06c8474185e4a64e52503b676bcd7020e333
Signed-off-by: Thanh Ha <thanh.ha@linuxfoundation.org>

Convert features/authn to use features-parent

features-parent contains all the magic needed to properly resolve
versions and test features, migrate to use it, simplifying things here.

Change-Id: I57abb28149837aa16b113de87f3412b00f4c5e4b
Signed-off-by: Robert Varga <rovarga@cisco.com>

Convert features/authz to use features-parent

features-parent contains all the magic needed to properly resolve
versions and test features, migrate to use it, simplifying things here.

Change-Id: I382c47cb2df0f8b53911c794a86909604f7a6ce3
Signed-off-by: Robert Varga <rovarga@cisco.com>

Convert features/api to use features-parent

features-parent contains all the magic needed to properly resolve
versions and test features, migrate to use it, simplifying things here.

Change-Id: I2467c292b697d88883592cbcf6bebed0070dea49
Signed-off-by: Robert Varga <rovarga@cisco.com>

Rename and move commons/parent

Move commons/parent to top-level directory and rename it to aaa-parent,
to follow common projects structure recommendations.

Change-Id: I9a075e39129f23a21664df2e7f57ac8a73679dd4
Signed-off-by: Robert Varga <rovarga@cisco.com>

Add aaa-artifacts

This commit centralizes the artifacts produced by aaa project for
consumption in other projects. Also import it in the parent, so
internal dependency versions can be picked up easily.

Change-Id: I889a057bdf5a050583e65e3d8fdbe938d2e15c19
Signed-off-by: Robert Varga <rovarga@cisco.com>

Rework parent structure to point to parent

Having projects point to the aggregator defeats the idea of a parent,
especially if the aggregator does not define anything except its child
modules.

Change-Id: Ib20399817bf48eb30ffa706863559a5e7976be59
Signed-off-by: Robert Varga <rovarga@cisco.com>

Merge "Move build section into parent"

Merge "Remove unneeded dependency"

Merge "BUG 3858 - Increasing default token cache expiry to 60min"

BUG 3858 - Increasing default token cache expiry to 60min

Change-Id: Id24472b3246b981ae8a76e464b263527322e8d9d
Signed-off-by: Wojciech Dec <wdec@cisco.com>

Move build section into parent

Change-Id: Idd079ccfaacc520c8215db07cdbd08b1f6e06fb9
Signed-off-by: Robert Varga <rovarga@cisco.com>

Remove unneeded dependency

The yang model in aaa-credential-store-api does not depend on the models
pulled in, hence there is no need for the dependency.

Change-Id: I9b3cf4d9817568edbd8445acd7e56daa134f7862
Signed-off-by: Robert Varga <rovarga@cisco.com>

Bug 3820 Incorrect database initialization

This change enables IdmLightApplication to initialize the data store.

Change-Id: I65566cc5900199bffd37e43e5bb761794ae6c382
Signed-off-by: Ryan Goulding <ryandgoulding@gmail.com>

Bug 3820 Incorrect database initialization

Added username and password parameters to database initialization.  This is
necessary in order to access the database from a psql client.  This change
enforces the Singleton design pattern for IdmLightApplication.  The
getDbConnect() functionality included in UserStore, RoleStore, GrantStore
and DomainStore is consolidated in
IdmLightApplication.getConnection(Connection existingConnection) function.

Change-Id: Ib001e05548acf401c4633712cd7ab3ff6a2d2b44
Signed-off-by: Ryan Goulding <ryandgoulding@gmail.com>

Merge "Bug 2809:Fix AAA error reporting"

Merge "Bug 2321 - Adding Authentication to IdmLight API"

Merge "Changing sql queries to prepared statements in idmlite"

Bug 2809:Fix AAA error reporting

Change-Id: I61c923cec41fbe2244151c354ccba0fc49703faf
Signed-off-by: Debalina Ghosh <debalina.ghosh@hp.com>

Bug 2321 - Adding Authentication to IdmLight API

Change-Id: I6197c4e518202e9d285958df741228a1dec268ad
Signed-off-by: Wojciech Dec <wdec@cisco.com>

Bug 3578 - Fixing reachability of IdmLight + cleanup of Idmlight feature bundles.

Change-Id: I6ab84171703b365b5d05bd900bc30c2634711796
Signed-off-by: Wojciech Dec <wdec@cisco.com>

Changing sql queries to prepared statements in idmlite

Change-Id: I609aaccb718dfcbd8f02bd45a6568adeb1cd5b7e
Signed-off-by: Debalina Ghosh <debalina.ghosh@hp.com>

Merge "Ensure that the TokenStore is unregistered when closed"

Merge "BUG 3343 - Fix encrypter's stack trace as log... continued..."

BUG 3343 - Fix encrypter's stack trace as log... continued...

Change-Id: Id9ae459e29800f75285804bd3a225b831c434d26
Signed-off-by: Wojciech Dec <wdec@cisco.com>

Merge "BUG 3342 - call super.finalize in stores"

BUG 3343 - Fix encrypter's stack trace as log

Change-Id: I40b5a21d0cbf891abede31fee7d55114d26ab0ac
Signed-off-by: Wojciech Dec <wdec@cisco.com>

BUG 3342 - call super.finalize in stores

Change-Id: I45bac5d48a08dc9d103e3b66890781351ee2e740
Signed-off-by: Wojciech Dec <wdec@cisco.com>

Ensure that the TokenStore is unregistered when closed

The ServiceLocator maintains a reference to all registered token stores and
when a request for get is made it goes through all the registered token stores
to see which one might have the token.

If we have a stale token store then it will also have a reference to a stale
data broker which will throw an exception when a transaction is created on it -
this exception happens to be a runtime exception and if ignored will result in
the exception surfacing all the way to the filter.

Change-Id: I4a66b144529ab5a99a6f53e5bb2ab176e18de703
Signed-off-by: Moiz Raja <moraja@cisco.com>
(cherry picked from commit 1c39e3a07ee047dd84405b466f6ad74b6e5d761f)

Bumping Snapshots version following lithium branch cut

Change-Id: I899df32cc839364df4551c152fdd9a997a8ea072
Signed-off-by: Wojciech Dec <wdec@cisco.com>

Do not override odlparent properties.

Change-Id: Ic7217c8bfd67dbd380a79b8ed5c7c60af93009e8
Signed-off-by: Wojciech Dec <wdec@cisco.com>

Merge "Do not override Karaf version"

Add authorisation data

Change-Id: If1a332b929a2dcb0bfcda0e578d99c20b2de3168
Signed-off-by: Wojciech Dec <wdec@cisco.com>

Do not override Karaf version

Change-Id: I4407c8d8ed90a37f0a55c5e4db092faa28d0ab08
Signed-off-by: Tony Tkacik <ttkacik@cisco.com>

Merge "Cleanup after sql-lite"

Cleanup after sql-lite

Change-Id: I4d0270aa8c9cdfba45aa2f6ca1cb7398d31e5bed
Signed-off-by: Wojciech Dec <wdec@cisco.com>

Reverted config location line formatting

 - looks like karaf is sensitive to whitespaces here
   https://issues.apache.org/jira/browse/KARAF-3506

Change-Id: I98a58023015ab2cb64c0522fbe8a3d9fc7586034
Signed-off-by: Michal Rehak <mirehak@cisco.com>

Fixed missing dependency on authn config.

Change-Id: I0ca414e8c1e76c47290323b84740480a2b46bcce
Signed-off-by: Tony Tkacik <ttkacik@cisco.com>

Merge "Change AAA features to default to cluster capable"

Merge "Remove redundant restconf connector config file"

Change AAA features to default to cluster capable

Change-Id: Id6478d446da94cd58000fcda05a0bec28916f194
Signed-off-by: Wojciech Dec <wdec@cisco.com>

Merge "Implementation of MD-SAL Token Cache"

Implementation of MD-SAL Token Cache

Change-Id: I7d966b52edc1e6d62860285630ee3e215917b26c
Signed-off-by: Wojciech Dec <wdec@cisco.com>

Remove redundant restconf connector config file

Change-Id: I7be4f31ddcd11eb95fa26c52350ac15a5d3f62ad
Signed-off-by: Wojciech Dec <wdec@cisco.com>

Adding unit tests to idmlite

Change-Id: I5ebd86085cf3e1ac88843c656f10480203879da4
Signed-off-by: Kailash Khalasi <kailash.khalasi@hp.com>

Revert db path

Change-Id: I694122d8616a650d2c78776c3eb3613cff4f6e8f
Signed-off-by: Wojciech Dec <wdec@cisco.com>

Replacement from SQLite to H2 as JDBC provider
Updated to fix issues with H2 persistence replacement code.

Change-Id: I2c589e8f48576bdf02ac923c7f8d838d4185fb89
Signed-off-by: EduardoPerez <eduardo.perez2@hp.com>

Add <relativePath/> to ensure Maven pulls artifact from Nexus

Needed by autorelease to be able to find and replace this value
prebuild.

Change-Id: Ida4e11bd27a7e72f278dd90e6152ba240299859c
Signed-off-by: Thanh Ha <thanh.ha@linuxfoundation.org>

Use dependencyManagement imports

Upstream projects provide their declarations in artifacts artiffact --
import it to get coherent version management.

Change-Id: I0d1b1cc400167f9e63a1ad730e3405c5d0cf2823
Signed-off-by: Robert Varga <rovarga@cisco.com>

Fix JDK8 javadoc compatibility

JDK8 is more picky about javadocs. Fix them up so the project can be
built using JDK8.

Change-Id: I423570f532338f6253dc31b16a8ca73324c38970
Signed-off-by: Robert Varga <rovarga@cisco.com>

Make sure insertion order is retained

Tests require toString() to be stable, which in turn requires we do not
use HashMaps, as their iteration order is undefined.

Change-Id: Iba53a84acb53a249e64acc604d831c7f4bd57f69
Signed-off-by: Robert Varga <rovarga@cisco.com>

Merge "delete hello example"

Merge "Adding Yang based token-cache-api"

Merge "Do not instantiate Booleans, Strings and Longs"

Do not instantiate Booleans, Strings and Longs

The two possible values are available as constants, so use them
directly, lowering the amount of garbage we generate.

For an empty String, we can just use a literal. For Longs, instead of
explicit construction, we can use valueOf(), which can end up using the
same instance. Also, we can use autoboxing to let JVM promote a value as
appropriate.

Change-Id: Icf9405d691a08c20dde78a5fe05bd4fab5947741
Signed-off-by: Robert Varga <rovarga@cisco.com>

Added Karaf feature for the keystone plugin.

Change-Id: I7660b6d50ad8dbe3f47b242494fbbd209bba4995
Signed-off-by: John Borz <john.borz@hp.com>

Fixed typo in credential model.

Change-Id: If9b83393e81d7eacf0f364f6155cb9dc64dadcae
Signed-off-by: Tony Tkacik <ttkacik@cisco.com>

Fixed AuthZ DataBroker not implementing getExtensions

Change-Id: I9d0cb13043576060c1aa0acf2788e19c493dee97
Signed-off-by: Tony Tkacik <ttkacik@cisco.com>

Adding Yang based token-cache-api

Change-Id: I141d5a2b970a2913309f159a4db9224dc8958153
Signed-off-by: Wojciech Dec <wdec@cisco.com>

Re-enable running of SingleFeaturesTest.Fix failing tests.

- switch to using odlparent:features-test instead of yangtools:features-test.
- fix failing features tests

Change-Id: Icb61adef1e06feda40f7c934ee87ba7b4fe7e53e
Signed-off-by: Sherry Krell <sherry.krell@hp.com>

Added feature dependencies to features/api

Change-Id: Ib0ac42d2fb0d46d45c81f868a7ae500c9d65ae68
Signed-off-by: Tony Tkacik <ttkacik@cisco.com>

yang model for storing security credentials

Change-Id: I8045ca9b752bd777e7048837382d646503982455
Signed-off-by: Steve Dean <sdean@hp.com>
Signed-off-by: Nathan Harmon <nathan.harmon@hp.com>

Refactor ClaimBuilder, update unit tests.

- fix builder to only create object within build()
- make built object immutable
- add validation

Change-Id: Icbd39ab06d9de444dfebaf110cc42fac2065bbf9
Signed-off-by: Sherry Krell <sherry.krell@hp.com>

Merge "Refactor AuthenticationBuilder, update unit tests. - fix builder to only create object within build() - make built object immutable - use composition instead of inheritance for Claim - add validation"

Merge "Initial AAA Karaf features for cluster capable MD-SAL based token cache"

Refactor AuthenticationBuilder, update unit tests.
- fix builder to only create object within build()
- make built object immutable
- use composition instead of inheritance for Claim
- add validation

Change-Id: I324210f0743ce113d8bcafd5861d74414c5dfa0d
Signed-off-by: Sherry Krell <sherry.krell@hp.com>

Bug 868: Migrated AuthZ to use Forwarding Sessions.

Change-Id: I65ca5c694694ce52853c2ec7ce69fd73eb0062e2
Signed-off-by: Tony Tkacik <ttkacik@cisco.com>

Removed override of checkstyle version.

Change-Id: Iaa9a92d9cab025ffa68fb2f1323d72feaffcca50
Signed-off-by: Tony Tkacik <ttkacik@cisco.com>

Initial AAA Karaf features for cluster capable MD-SAL based token cache

Change-Id: Iae808ffcc966ce77018612338930fad9a10f1f85
Signed-off-by: Wojciech Dec <wdec@cisco.com>

Removing Authz RPC timeout in response

Change-Id: I04d7965cdf3d839b429423195d35b262fd9c1b0e
Signed-off-by: Wojciech Dec <wdec@cisco.com>

Merge "Workaround for sqlite wrapping issue in Karaf 3.0.3."

Merge "Remove <repositories> and <pluginRepositories> sections"

Remove <repositories> and <pluginRepositories> sections

It is recommended that developers and servers configure this locally via
settings.xml.

https://lists.opendaylight.org/pipermail/discuss/2015-January/004482.html

Change-Id: I58b9a6991ebd60b3bfdfcccb2e37a13e711134a3
Signed-off-by: Thanh Ha <thanh.ha@linuxfoundation.org>

Refactor and add unit tests for AuthenticationManager and fix bug that was found in updated method.

Change-Id: I56243d90c502852005031d0238e8e06ddbbe244e
Signed-off-by: Sherry Krell <sherry.krell@hp.com>

Workaround for sqlite wrapping issue in Karaf 3.0.3.

Embed sqlite in idmlight using an older version of bnd (2.1.0). See https://lists.opendaylight.org/pipermail/discuss/2015-February/004653.html

Change-Id: I1965156f13cc37ef2714af114eebdfe56f688d52
Signed-off-by: Nathan Harmon <nathan.harmon@hp.com>

Fix checkstyle if-statements must use braces in aaa-idmlight

- Fix missing braces
- Fix indentation level

Change-Id: I5e81fb561b550a2085ceddf6403273dcb503c5ca
Signed-off-by: Thanh Ha <thanh.ha@linuxfoundation.org>

Fix checkstyle if-statements must use braces in aaa-authn

- Fix if-statements must use braces
- Add missing License headers

Change-Id: I5c9279d1702ec8c3ce0d1b5ea82aef5c7325e620
Signed-off-by: Thanh Ha <thanh.ha@linuxfoundation.org>

Fix checkstyle if-else-for-statements must use braces in aaa-authn-sts

Change-Id: I3c9ad139c47d0e4a07f29ce8b7dea681184c0b60
Signed-off-by: Thanh Ha <thanh.ha@linuxfoundation.org>

Fix checkstyle if-statements must use braces in aaa-authn-keystone

Change-Id: I84c3f8f0342148f71f5968d55d76a80084046a77
Signed-off-by: Thanh Ha <thanh.ha@linuxfoundation.org>

Fix checkstyle for-statements must use braces in aaa-authn-federation

Change-Id: I0a9fa5ebd078eb429d910a5d139153f13bf31937
Signed-off-by: Thanh Ha <thanh.ha@linuxfoundation.org>

Fix checkstyle if-statements must use braces in aaa-authn-store

- Fix checkstyle if-statement brances
- Fix missing License header

Change-Id: Iac67a50e459b363fd3b83f56011028d82b828c62
Signed-off-by: Thanh Ha <thanh.ha@linuxfoundation.org>

Set root pom.xml <name> for Sonar

As mentioned on the mailing list Sonar uses the <name> field of the
pom.xml that is passed to the mvn command as the name of the project in
Sonar. In most cases this is the root pom.xml file in a project. This
patch sets the name to the project shortname.

https://lists.opendaylight.org/pipermail/discuss/2014-November/004024.html

Change-Id: Ic8eabf78c37d6e449a837d34600ed3b86e7947a8
Signed-off-by: Thanh Ha <thanh.ha@linuxfoundation.org>

Merge "Change ENUMS used in config yangs for Strings"

Removed the pax-exam it tests in favor of Robot tests.

Change-Id: I33e0974795d92a4083129b37cb407d7847614c5f
Signed-off-by: Liem Nguyen <liem_m_nguyen@hp.com>

Removed all* features as well as fixing circular dependencies with restconf.

Change-Id: I4de1af27c275d3877f1c5f3cc10fb188bfa28c2c
Signed-off-by: Liem Nguyen <liem_m_nguyen@hp.com>

Change ENUMS used in config yangs for Strings

ENUMs are not properly serialzied in config/netconf and it causes failure when reading/writing data using RESTCONF + Loopback connection

Change-Id: I8f9da4d009cdd3a432dd031ecc3a7cb551454d3d
Signed-off-by: Maros Marsalek <mmarsale@cisco.com>

Merge "Documentation for SSSD Federated IdP authentication"