52 Commits

Author SHA1 Message Date
Russell Bryant
1f0798f4fb Use constant time string comparisons for auth.
Fix bug 942644.

Use constant time string comparisons when doing authentication to help
guard against timing attacks.

Change-Id: I88c4c5cd9edd9e5d60db07b6ae2638b74a2a2e17
2012-02-28 14:57:12 -05:00
Russell Bryant
e90424e88b Call setgroups() before setuid() and setgid().
Fixes bug 989569.

This patch ensures that the list of groups is completely reset when dropping
privileges.

Change-Id: I049f75e66e08a4a6361504b013bc68c4c38ef093
2012-02-07 14:20:42 -05:00
gholt
dd839048f1 Updated TimeoutError and except Exception refs...
Updated eventlet.TimeoutError (deprecated) references to
Timeout and, more importantly, updated many except Exception
clauses to except (Exception, Timeout).

Change-Id: Ib089265551bd20b94c00ea84f11140ccd795d301
2011-11-07 16:26:03 +00:00
gholt
872420efdb Expiring Objects Support
Please see the doc/source/overview_expiring_objects.rst for
more detail.

Change-Id: I4ab49e731248cf62ce10001016e0c819cc531738
2011-11-01 15:49:00 +00:00
David Goetz
bed607b07a adding unit tests 2011-08-30 12:07:32 -07:00
John Dickinson
0504fffb05 added client_ip to all proxy log lines not otherwise containing it 2011-08-11 14:36:02 -05:00
gholt
024df7c0f2 Merged from trunk 2011-06-13 20:51:06 +00:00
gholt
bb48838404 Adding some tests 2011-06-10 15:55:25 +00:00
gholt
81c6ca0b2c Merged from trunk 2011-05-11 02:51:31 +00:00
Clay Gerrard
7c2bf134b1 fixed lockups and lost messages in swift-init and capture_stdio 2011-03-30 15:04:15 -05:00
gholt
b09b5e64e1 Tests; bug fixes 2011-03-24 07:46:02 +00:00
Clay Gerrard
27c559c89a update functional tests configuration 2011-03-03 22:27:16 +00:00
David Goetz
2886655717 peer review edits 2011-02-25 09:09:02 -08:00
Clay Gerrard
bdba519e02 PEP8 2011-02-24 16:21:14 -06:00
Clay Gerrard
92a5414f25 went ahead and spoofed a [func_test] section 2011-02-24 12:28:17 -06:00
David Goetz
7144693bf5 merge to trunk 2011-02-21 10:50:56 -08:00
David Goetz
7728904dda audit zero byte files quickly without true value 2011-02-14 20:25:40 +00:00
Clay Gerrard
6554c16e0a merged trunk 2011-02-12 01:55:57 -06:00
Clay Gerrard
1095f27590 Prepare for trunk merge.
Refactored some of the swift_init classes into a new module in
swift.common, changed some names.  Removed the bin test stuff.  Fixed
some bugs, added some features.
2011-02-11 13:18:19 -06:00
Michael Barton
b2e0b926a4 Changes to support deployment on IPv6 2011-02-11 17:27:05 +00:00
gholt
88ae726f9b Merge from trunk 2011-02-10 14:29:08 -08:00
Clay Gerrard
5d0bc6b9c7 logging refactor to support proxy access logs
New log level "notice" set to python log level 25 maps to syslog priority
LOG_NOTICE.  Used for some messages in the proxy server, but will be available
to all apps using the LogAdapter returned from get_logger.  Cleaned up some
code in get_logger so that console logging works with log_routes and removed
some unneeded bits.  NamedFormatter functionality was split between LogAdapter
(which now inherits from logging.LoggerAdapter) and TxnFormatter (which now is
only responsible for adding the log records txn_id).

The proxy server app now configures a separate logger for access line logging.
By default it will use the same settings as the regular proxy logger.
2011-02-10 14:59:52 -06:00
Clay Gerrard
461bf8df71 added new proxy-server configuration options for access_log_facility and
access_log_name
2011-02-05 15:38:49 -06:00
Clay Gerrard
f9fa63686c Moved proxy server access log messages into their own log level
Added new "access" log level available on swift loggers that will be routed to
the LOG_NOTICE priority in syslog for easy redirection of access log messages
via rsyslog and syslog-ng.
2011-02-03 15:23:07 -06:00
Michael Barton
c2931e157c random newline 2011-02-03 19:53:47 +00:00
Michael Barton
70903a98bb merge trunk 2011-02-03 19:08:59 +00:00
gholt
cb58430321 logging: use routes to separate logging configurations 2011-02-02 13:39:08 -08:00
gholt
fdf20184e4 Fix duplicate logging 2011-02-02 09:38:17 -08:00
Michael Barton
a4b6ae6e57 merge trunk 2011-01-29 03:00:01 +00:00
David Goetz
3ea09dd0e6 merge to trunk 2011-01-26 14:38:13 -08:00
David Goetz
86cb12036b removing blank excepts 2011-01-26 14:31:33 -08:00
David Goetz
189a3584f0 pep8 2011-01-20 17:07:01 -08:00
David Goetz
59f996b552 fixing rate limiting to allow for catch up 2011-01-20 17:05:44 -08:00
Michael Barton
67de0c88f4 ipv6 support 2011-01-16 09:52:08 +00:00
David Goetz
9c0b1c95b1 merging to trunk 2011-01-10 17:11:06 -08:00
Anne Gentle
8823427161 Changed copyright notices on py files and the single rst file with a copyright notice 2011-01-04 17:34:43 -06:00
David Goetz
f811be80ff changes after peer review, pep8 and eventlet.sleep 2010-12-30 12:30:04 -08:00
David Goetz
6c86920ccd merging to trunk 2010-12-28 15:26:42 -08:00
David Goetz
8dee94fd7c adding defaults, docs, and unit tests 2010-12-28 14:54:00 -08:00
Michael Barton
ef4e23ee43 tests fixed 2010-12-20 21:57:19 +00:00
Michael Barton
d7dd3ec065 gettext updates 2010-12-20 21:47:50 +00:00
David Goetz
893fdd0907 adding in rate limiting and unit tests 2010-12-16 16:20:57 -08:00
Clay Gerrard
ab53587796 fixed some calls to get_logger that didn't clean up after themselves 2010-11-19 16:20:17 -06:00
Clay Gerrard
c007d0296e removed unneeded daemonize function from utils, pulled get_socket out of run_wsgi, reworked test_utils and test_wsgi 2010-11-19 12:15:41 -06:00
Clay Gerrard
d583fd9bdb cleaned up test reloads 2010-11-17 17:17:05 -06:00
Clay Gerrard
57a35f0d7c added helper/util to parse command line args; removed some duplicated code in
server/daemon bin scripts;  more standized python/linux daemonization
procedures; fixed lp:666957 "devauth server creates auth.db with the wrong
privileges"; new run_daemon helper based on run_wsgi simplifies daemon
launching/testing; new - all servers/daemons support verbose option when
started interactivlty which will log to the console; fixed lp:667839 "can't
start servers with relative paths to configs"; added tests
2010-11-11 16:41:07 -06:00
John Dickinson
60d159fd39 updated readconf test 2010-10-08 14:55:43 -05:00
John Dickinson
8ee2cbaeee updated readconf test 2010-10-08 14:47:40 -05:00
John Dickinson
4111a16189 updated readconf test 2010-10-08 14:29:24 -05:00
John Dickinson
665b7f97fb added readconf unit test 2010-10-08 14:14:08 -05:00