Metacat

Use status.toLowerCase() to deal with ReplicationStatus conversion issues. This needs to be reviewed.

Use Subject.equals() when comparing DNs rather than CertificateManager.equalsDN(). Don't lock the pid in isNodeAuthorized() to debug for timeout issues. Minor debugging changes.

give the Metacat admin users FULL permissions on all data/docs
http://bugzilla.ecoinformatics.org/show_bug.cgi?id=4728

correct path for question mark icon -- though the documentation link is broken

remove replication control panel from dev skin -- now in admin interface
http://bugzilla.ecoinformatics.org/show_bug.cgi?id=5528

replication control panel now fully implemented as an admin configuration screen
http://bugzilla.ecoinformatics.org/show_bug.cgi?id=5528

change the footer to be regwhitetext style.

make regtext style black and add new style regwhitetext.

move replication configuration actions to the admin servlet and out of the replication servlet
http://bugzilla.ecoinformatics.org/show_bug.cgi?id=5528

Using the method sending form parameters rather than form object.
The reason is IE will invalidate the form object after putting a login message on the div which contains the form.

Add methods to send form parameters to the server.

save SystemMetadata when replicating data and metadata -- this way if/when the node decides to be a DataONE MN it already has the information needed for each object

Minor logging for isNodeAuthorized(), and compare subjects properly. Change this to Subject.compareTo() when it is vetted.

check for authenticated and verified user permissions

throw NotAuthorized when there is no session

Catch RuntimeExceptions thrown by Hazelcast as opposed to general Exceptions to we don't catch exceptions we're trying to throw.

include Subject comparator changes

get params from multipart params for systemMetadataChanged call

generalize exception handling -- add cause detail

remove DataONE schema reference in xml_catalog

Changes to setReplicationStatus and isNodeAuthorized(), working out minor bugs in replication.

include exception cause when throwing new exception (combine RuntimeException in Exception handling -- they are almst identical)

use /cn/xslt/ for the standard cn deployment

new jars with (at least) xslt updates for the D1 CN

throw InvalidToken when session is null

correct typo

Send the correct node id (the target node) when calling setReplicationStatus()

get pid from normal params, not the URL -- the client should include them in the params -- and not as a serialized "object" since it is just a string value

check obsoletes and obsoletedBy PIDs when updating objects

delete system metadata when MN.delete() is called.

Using the method which reloads the page after sending login. This will fix an issue that the search function couldn't get the session id after login.

Add a new method which will reload the page after submitting a form.

throw InvalidToken when there is no session (certificate) provided in update() and delete() methods.

Calls to setReplicationStatus() can only be made by a CN or the MN that is the target replica node. Implement this service restriction in CNodeService using CertificateManager's equalsDN() method.

The ReplicationStatus parameter is 'status', not 'replicationStatus', in the architecture documentation.

Although parameters for setReplicationStatus() are expected as multipart/form-data fields, they seem to be added to the HttpServletRequest as URL parameters during the proxy forwarding in d1_cn_rest_proxy. Test for their existence as multipart fields, but fall back to request params, otherwise, throw an InvalidRequest exception.

updated d1_libclient jar from trunk

updated d1_common jar from trunk

lookup stylesheet from metacat.properties for CN list objects and list formats. This is used in conjunction with the CN rest service deployment where the xslt is actually kept.

actually persist the MN id value to the properties file

set the newly assigned MN id after we call CN.register().

Added stack trace debugging for CNodeService.isNodeAuthorized() for tracking down replication issues.

DataONE MN registration/configuration is now its own configuration page in the admin interface.
http://bugzilla.ecoinformatics.org/show_bug.cgi?id=5531

Since we're using a multipart form to encode parameters, extract the params out of the multipart form prior to doing a get() from the multipartparams map in setReplicationStatus(). Likewise, do the same in updateReplicationMetadata() and setReplicationPolicy().

New libclient jar with changes to CNode.setReplicationStatus() (r5824).

Use a session object that is set to null when calling CNode.setReplicationStatus()

Add debugging code to MNodeService.getReplica().

Set a new Session object to null, to be overwritten by the CertificateManager session information from the X.509 certificate.

more changes for http://bugzilla.ecoinformatics.org/show_bug.cgi?id=5527

get server param only when it is expected

check replication table (not keystore) for trusted server host name match

Adding new D1 jars (r5818) with changes to libclient's CNode.setReplicationStatus(). It now sends multipart params rather than files since there's no XML structure to ReplicationStatus.

added note about PermGen space + Geoserver

Fix cast to List<Node> in isNodeAuthorized().

List the correct REST endpoints for replication in the documentation.

upgrade to 1.0.1-SNAPSHOT DataONE jars

check for blank key passwords

started replication unit test

Keep /dirtySystemMetadata as the REST endpoint for systemMetadataChanged() for now.

New D1 libraries, fix for MNode.isNodeAuthorized() and other exception handling.

MockCNode.getSystemMetadata() no longer throws InvalidRequest.

add note about alternative methods for getting cert/key

use prepared statement place holder (?)

use DateTimeMarshaller for all replication date transfers

print the stacktrace when there is an error -- debuggin!

remove catch blocks for unthrown exceptions

use SSL to get content from stream

Update methods in MNodeService to reflect they modifications of the MN API with regard to exceptions being raised. Largely removed InvalidRequest from a number of methods, and instead threw an appropriate NotFound or ServiceFailure instead.

D1NodeService get(), getSystemMetadata(), and isAuthorized() no longer throw InvalidRequest.

Add new D1 jars with 1.0.0 API additions (MNStorage.systemMetadataChanged()) and libclient fixes.

newer seek tag

uses prepared statement instead of plain old statement.
deprecated the DBConnection.createStatement() method to discourage direct parameter value use in favor of parameter binding.
http://bugzilla.ecoinformatics.org/show_bug.cgi?id=5527

Add a test for systemMetadataChanged. This should be fleshed out more so that the test uses a CN certificate.

Fix getReplica() handling code for getReplica() and systemMetadataChanged(). Calls to getReplica() in MNode were calling get(), so the lack of resource handling was being missed.

Handle multipart params where the libclient methods are using them.

uses prepared statement parameter binding for queries
http://bugzilla.ecoinformatics.org/show_bug.cgi?id=5527

Add new D1 jars with the new MNStorage.systemMetadataChanged() additions.

Add in the systemMetadataChanged() method in MNodeService to respond to notifications. Only allow subjects from CNs listed in the node list to make the call. Update the local copy of the system metadata document for the given pid.

Include the serialVersion in the call to CN.setReplicationStatus() after replicating data.

correctly set the prepared statement parameters for start and end date

check object format id values since they are not Comparable objects

make MNodeServiceTest pass JUnit testing

http://bugzilla.ecoinformatics.org/show_bug.cgi?id=5527

Update CNodeService test to include serialVersion in it's calls as appropriate.

Update CNodeService to use the serialVersion parameter and compare it to the current serialVersion of the system metadata found in the hzSystemMetadata map. Throw an InvalidRequest exception if they are not equal. This affects updateReplicationMetadata(), setReplicationStatus(), setReplicationPolicy(), setAccessPolicy(), and setOwner().

Handle calls to CNReplication REST services. Modify handle() to field calls to /replicaPolicies, /replicaMetadata, /replicaAuthorizations, and /replicaNotifications. Add the isNodeAuthorized(), setReplicationPolicy(), setReplicationStatus(), and updateReplicationMetadata() methods to parse and pass multipart form data and params on to the CNodeService implementing class....

Add new d1_common jar with the API changes that add serialVersion parameters to CNAuthorization and CNReplication methods.

Add support for the various CNReplication calls. Add collectReplicationPolicy() to parse the policy out of the multipart form, and collectReplicaMetadata() to parse out the replica to be updated.

restore -- apparently this was used with reflection in a test...

change to 2.0.0 release
http://bugzilla.ecoinformatics.org/show_bug.cgi?id=5515

skip verification -- remaining TODO

verify certificate

inspect keystore entries for matching client certificate

lookup the correct property for keystore file

drop old identifier when upgrading from 1.9.5 to 2.0.0

use HttpClient to set up SSL connection when doing replication calls -- this will use the server's configured certificate as the client certificate on the request. The server it is calling can then inspect that certificate and decide whether or not it trusts the caller.

use EML style tag for: only show organization when the individual is omitted
http://bugzilla.ecoinformatics.org/show_bug.cgi?id=5499

newer d1 jar (for good measure)

check client-provided certificate when servicing ReplicationServlet requests.

Add updateReplicationMetadata() to the CN service implementation. This was missing from the API, and likely never called. It fully replaces the given replica item in the list of replicas in system metadata.