55 Commits

Author SHA1 Message Date
Paul McMillan
92fbf44d10 Fixed grammar and improve docs.
Corrected its/it's mistakes, harmonized line wrapping within some docs
and clarified doc wording in several places.

Change-Id: Ib9ac6d5e859f770a702e1fad6de8d4abe0390b47
2012-04-10 12:27:14 -07:00
John Dickinson
1ecf5ebba1 updated copyright date for all files
Change-Id: Ifd909d3561c2647770a7e0caa3cd91acd1b4f298
2012-03-19 13:45:34 -05:00
John Dickinson
e75bb9045b fixed pep8 issue and renamed strcmp_const_time to streq_const_time
Change-Id: Ifc21f0ec08ac2ba120a67795e82082b18e08584e
2012-02-28 21:38:30 -06:00
Russell Bryant
1f0798f4fb Use constant time string comparisons for auth.
Fix bug 942644.

Use constant time string comparisons when doing authentication to help
guard against timing attacks.

Change-Id: I88c4c5cd9edd9e5d60db07b6ae2638b74a2a2e17
2012-02-28 14:57:12 -05:00
Russell Bryant
e90424e88b Call setgroups() before setuid() and setgid().
Fixes bug 989569.

This patch ensures that the list of groups is completely reset when dropping
privileges.

Change-Id: I049f75e66e08a4a6361504b013bc68c4c38ef093
2012-02-07 14:20:42 -05:00
gholt
dd839048f1 Updated TimeoutError and except Exception refs...
Updated eventlet.TimeoutError (deprecated) references to
Timeout and, more importantly, updated many except Exception
clauses to except (Exception, Timeout).

Change-Id: Ib089265551bd20b94c00ea84f11140ccd795d301
2011-11-07 16:26:03 +00:00
gholt
872420efdb Expiring Objects Support
Please see the doc/source/overview_expiring_objects.rst for
more detail.

Change-Id: I4ab49e731248cf62ce10001016e0c819cc531738
2011-11-01 15:49:00 +00:00
David Goetz
bed607b07a adding unit tests 2011-08-30 12:07:32 -07:00
John Dickinson
0504fffb05 added client_ip to all proxy log lines not otherwise containing it 2011-08-11 14:36:02 -05:00
gholt
024df7c0f2 Merged from trunk 2011-06-13 20:51:06 +00:00
gholt
bb48838404 Adding some tests 2011-06-10 15:55:25 +00:00
gholt
81c6ca0b2c Merged from trunk 2011-05-11 02:51:31 +00:00
Clay Gerrard
7c2bf134b1 fixed lockups and lost messages in swift-init and capture_stdio 2011-03-30 15:04:15 -05:00
gholt
b09b5e64e1 Tests; bug fixes 2011-03-24 07:46:02 +00:00
Clay Gerrard
27c559c89a update functional tests configuration 2011-03-03 22:27:16 +00:00
David Goetz
2886655717 peer review edits 2011-02-25 09:09:02 -08:00
Clay Gerrard
bdba519e02 PEP8 2011-02-24 16:21:14 -06:00
Clay Gerrard
92a5414f25 went ahead and spoofed a [func_test] section 2011-02-24 12:28:17 -06:00
David Goetz
7144693bf5 merge to trunk 2011-02-21 10:50:56 -08:00
David Goetz
7728904dda audit zero byte files quickly without true value 2011-02-14 20:25:40 +00:00
Clay Gerrard
6554c16e0a merged trunk 2011-02-12 01:55:57 -06:00
Clay Gerrard
1095f27590 Prepare for trunk merge.
Refactored some of the swift_init classes into a new module in
swift.common, changed some names.  Removed the bin test stuff.  Fixed
some bugs, added some features.
2011-02-11 13:18:19 -06:00
Michael Barton
b2e0b926a4 Changes to support deployment on IPv6 2011-02-11 17:27:05 +00:00
gholt
88ae726f9b Merge from trunk 2011-02-10 14:29:08 -08:00
Clay Gerrard
5d0bc6b9c7 logging refactor to support proxy access logs
New log level "notice" set to python log level 25 maps to syslog priority
LOG_NOTICE.  Used for some messages in the proxy server, but will be available
to all apps using the LogAdapter returned from get_logger.  Cleaned up some
code in get_logger so that console logging works with log_routes and removed
some unneeded bits.  NamedFormatter functionality was split between LogAdapter
(which now inherits from logging.LoggerAdapter) and TxnFormatter (which now is
only responsible for adding the log records txn_id).

The proxy server app now configures a separate logger for access line logging.
By default it will use the same settings as the regular proxy logger.
2011-02-10 14:59:52 -06:00
Clay Gerrard
461bf8df71 added new proxy-server configuration options for access_log_facility and
access_log_name
2011-02-05 15:38:49 -06:00
Clay Gerrard
f9fa63686c Moved proxy server access log messages into their own log level
Added new "access" log level available on swift loggers that will be routed to
the LOG_NOTICE priority in syslog for easy redirection of access log messages
via rsyslog and syslog-ng.
2011-02-03 15:23:07 -06:00
Michael Barton
c2931e157c random newline 2011-02-03 19:53:47 +00:00
Michael Barton
70903a98bb merge trunk 2011-02-03 19:08:59 +00:00
gholt
cb58430321 logging: use routes to separate logging configurations 2011-02-02 13:39:08 -08:00
gholt
fdf20184e4 Fix duplicate logging 2011-02-02 09:38:17 -08:00
Michael Barton
a4b6ae6e57 merge trunk 2011-01-29 03:00:01 +00:00
David Goetz
3ea09dd0e6 merge to trunk 2011-01-26 14:38:13 -08:00
David Goetz
86cb12036b removing blank excepts 2011-01-26 14:31:33 -08:00
David Goetz
189a3584f0 pep8 2011-01-20 17:07:01 -08:00
David Goetz
59f996b552 fixing rate limiting to allow for catch up 2011-01-20 17:05:44 -08:00
Michael Barton
67de0c88f4 ipv6 support 2011-01-16 09:52:08 +00:00
David Goetz
9c0b1c95b1 merging to trunk 2011-01-10 17:11:06 -08:00
Anne Gentle
8823427161 Changed copyright notices on py files and the single rst file with a copyright notice 2011-01-04 17:34:43 -06:00
David Goetz
f811be80ff changes after peer review, pep8 and eventlet.sleep 2010-12-30 12:30:04 -08:00
David Goetz
6c86920ccd merging to trunk 2010-12-28 15:26:42 -08:00
David Goetz
8dee94fd7c adding defaults, docs, and unit tests 2010-12-28 14:54:00 -08:00
Michael Barton
ef4e23ee43 tests fixed 2010-12-20 21:57:19 +00:00
Michael Barton
d7dd3ec065 gettext updates 2010-12-20 21:47:50 +00:00
David Goetz
893fdd0907 adding in rate limiting and unit tests 2010-12-16 16:20:57 -08:00
Clay Gerrard
ab53587796 fixed some calls to get_logger that didn't clean up after themselves 2010-11-19 16:20:17 -06:00
Clay Gerrard
c007d0296e removed unneeded daemonize function from utils, pulled get_socket out of run_wsgi, reworked test_utils and test_wsgi 2010-11-19 12:15:41 -06:00
Clay Gerrard
d583fd9bdb cleaned up test reloads 2010-11-17 17:17:05 -06:00
Clay Gerrard
57a35f0d7c added helper/util to parse command line args; removed some duplicated code in
server/daemon bin scripts;  more standized python/linux daemonization
procedures; fixed lp:666957 "devauth server creates auth.db with the wrong
privileges"; new run_daemon helper based on run_wsgi simplifies daemon
launching/testing; new - all servers/daemons support verbose option when
started interactivlty which will log to the console; fixed lp:667839 "can't
start servers with relative paths to configs"; added tests
2010-11-11 16:41:07 -06:00
John Dickinson
60d159fd39 updated readconf test 2010-10-08 14:55:43 -05:00