Kelven Yang
34f8f795e1
CLOUDSTACK-2039: Improve console access security with 128-bit AES encryption and securely-randomized key generation
2013-04-15 16:52:22 -07:00
Kelven Yang
da2e6461a6
Remove temporary hacking and use Official way to wire-up servlet with injection under Spring
2013-01-30 15:21:01 -08:00
Kelven Yang
f8e5740c31
A workaround to injection problems in servlets (ConsoleProxyServlet and RegisterCompletionServlet) classes
2013-01-24 18:04:48 -08:00
Kelven Yang
6fb1a1e6f1
Fix issues after another round of merge
2013-01-11 16:54:32 -08:00
Alex Huang
fac2270240
more files changed
2013-01-10 15:29:14 -08:00
Alex Huang
56e5fbdee2
removed import of componentlocator and inject from all files
2013-01-10 11:44:47 -08:00
Rohit Yadav
6fc3bc3760
api_refactor: refactor vpn and vm apis
...
- Refactor VPN and VM APIs to admin and user pkgs
- Names space, org.apache.cloudstack
- Fix refactored apis in commands*.in
- Fix comments etc.
- Expand tabs, remove trailing whitespace
Signed-off-by: Rohit Yadav <bhaisaab@apache.org>
2012-12-03 21:27:02 -08:00
Kelven Yang
3609e44b58
commit for https://reviews.apache.org/r/6608/
2012-08-27 10:39:49 -07:00
Kelven Yang
04bf1a33c6
apply patch https://reviews.apache.org/r/6572/
2012-08-13 17:28:41 -07:00
Alex Huang
c1c952b42b
should have used non url safe
2012-08-07 16:58:16 -07:00
Alex Huang
a6a864a1a8
Removed Base64 file and use the apache version
2012-08-07 15:41:54 -07:00
David Nalley
e87558256c
Patch from Chip Childers
...
https://reviews.apache.org/r/5704/
License header updates for the server folder
2012-07-02 09:51:21 -04:00
David Nalley
ae4b66283a
cleaning up some line endings
2012-07-02 09:50:28 -04:00
Kelven Yang
e8a5d51da7
Support console access through rebooting with XAPI session re-negotiation
2012-05-16 17:02:22 -07:00
Kelven Yang
c5083787c2
Hardening console proxy AJAX protocol to address security concerns
2012-04-19 12:10:33 -07:00
Rajesh Battala
327049b5c5
CS-14546: Fixed bug Unable to view console in System and Guest VMs and Added Upgrade script
2012-04-19 21:15:45 +05:30
Kelven Yang
8b8973f941
Complete XenServer Secure Console proxy implementation
2012-04-10 15:57:52 -07:00
Rajesh Battala
3cbb8bc198
Xenserver Secure Console Proxy Phase I
2012-04-10 18:01:56 +05:30
David Nalley
59436be4ee
fixing line endings in server
2012-04-07 20:13:10 -04:00
frank
2f634c0913
Switch to Apache license
2012-04-03 04:50:05 -07:00
Kelven Yang
8f2b6dc791
do not default display name from null to other name like host name
2012-01-30 14:57:50 -08:00
Alena Prokharchyk
83400cd15f
bug 12776: if there are multiple objects involved in resource creation, verify that they belong to the same account
...
status 12776: resolved fixed
2012-01-17 13:40:37 -08:00
Alena Prokharchyk
c581506103
bug 12306: list* command revamp
2012-01-09 10:07:42 -08:00
Alena Prokharchyk
209c4aa881
bug 12444: allow accessing Project's vms console
...
status 12444: resolved fixed
2011-12-08 14:38:21 -08:00
Kelven Yang
c3eba2933e
bug 11973: Escape VM name to prevent from XSS attack. Reviewed-by: Alex huang
2011-11-28 11:38:31 -08:00
Kelven Yang
d9c41df1a1
Make console proxy support UUID
2011-11-03 16:24:08 -07:00
alena
a1331d1cfc
Intermidiate checkin to Project feature:
...
1) Introduce new managers - ProjectManager and DomainManager. Moved all domain related code from AccountManager to DomainManager.
2) Moved some code from ManagementServerImpl to the correct managers.
3) New resource limit for Domain - Project
2011-09-20 18:35:28 -07:00
Kelven Yang
0421eafba0
bug 10765: add japanese keyboard support for linux OSes
2011-08-31 15:53:01 -07:00
Kelven Yang
1abbc007ba
bug 8954: only root admin can access console proxy, SSVM and DomR
2011-03-23 14:46:34 -07:00
Kelven Yang
7168278455
Console access API with API key, there is an issue that it actually depends on existing web session. This is the fix for it
2011-03-21 11:28:31 -07:00
Kelven Yang
3113ae4993
Add display name to user VM in console title
2011-02-11 11:43:00 -08:00
Kelven Yang
737954bed8
1) prepare to seperate volume/snapshot logic to secondary storage VM
...
2) Add vmware.service.console configuration variable to allow customized VMware setup
2011-02-10 16:41:19 -08:00
Kelven Yang
e7c8872651
Use URL safe BASE64 encoding for console access ticket generation.
2011-01-27 11:54:41 -08:00
Frank
39f75887b1
bug 7722: open vswitch -
...
1. add more readable log when tunnel create failed
2. correct drop flow when port number more than 10
other fixs:
return false when vm is null in checkSessionPermision
this avoid null pointer Exception
2011-01-14 13:47:50 -08:00
Kelven Yang
e9b446e3bd
Bug 6905: explicitly deny access when management server is not fully up for service
2011-01-14 10:58:24 -08:00
Kelven Yang
56d8fb6a0b
Bug 7015: allow domain admin to be able to access domR console
2011-01-06 05:27:32 -08:00
Kelven Yang
cb7b6867c6
Bug 7370: Give domain admin permission to view user VM under its domain scope
2011-01-04 23:42:49 -08:00
alena
dfecc1f448
Changed account state to be in lower case.
2010-12-30 09:57:59 -08:00
Alex Huang
544fa7ff1b
remote access vpn, user ip address changes
2010-12-29 09:32:54 -08:00
alena
d077b127aa
bug 7498: fixed search by keyword in listUserVm/listSystemVms/listRouters commands
...
status 7498: resolved fixed
2010-12-13 15:22:11 -08:00
Kelven Yang
68e6706fbe
Fix a number of issues related with vmware on new networking
2010-12-09 19:33:30 -08:00
Kelven Yang
c2ada1d8d8
bug 6905: send better response error message when service is not fully ready to serve requests
2010-12-06 13:48:56 -08:00
Kelven Yang
54f177cacc
1) Make generic dao be able to persist UTF-8 string for internationalization support
...
2) Undo gson Unicode escape in API response object to avoid double escaping which can break Javascript from getting correct text content
3) Correct API layer in dealing with character encoding
4) Remove double escape in cloud.core.js
2010-11-30 09:40:54 -08:00
Kelven Yang
dd9b1634f7
Allow host behind cluster to return real VNC host IP address
2010-11-24 15:17:08 -08:00
Kelven Yang
0653d6d7f6
Improve console access security with random generated hash key
2010-11-12 16:59:58 -08:00
alena
1c24deda34
1) Refactored current Apis not to use reflection for method invocation. In new version following has to be done:
...
* Implement callCreate() and execute() methods in apis extending BaseAsyncCreateCmd (example - CreateVolumeCmd)
* Implement execute() method in apis extending BaseCmd and BaseAsyncCmd (example - deleteVolumeCmd and deleteUserCmd)
We no longer need createMethod(), method(), manager() fields in @Implementation annotation, cleanup has to be done.
2) Moved Account/User related methods to AccountManagerImpl. Methods are exposed via AccountService interface.
3) Enhanced exception handing for Api calls.
4) Created ConfigurationService interface, all Api config methods are exposed via it.
2010-11-08 11:27:36 -08:00
Alex Huang
e27bb550fe
Harmony among gurus
2010-11-03 21:18:31 -07:00
Kelven Yang
8555eb1913
Fix the broken ConsoleProxyServlet after the merge of API refactoring changes
2010-10-15 11:17:27 -07:00
Kris McQueen
2740ba6c40
final merge of master->2.1.refactor preparing for merge back into master
2010-10-12 14:46:24 -07:00
Kelven Yang
5f3bb36650
1) Merge following change from 2.1.X
...
Add time stamped ticket to console access URL to make it more secure
2) Fix a problem caused by the inconsistency of using different path seperator between windows platform and linux platform
2010-10-04 15:31:05 -07:00