Skip to content

Conversation

@svetterIO
Copy link
Contributor

Features:

  • Directory create with id function added [aac\runtime_template]
  • Handle isam 9.0.5 extProperties client attribute [api_protection/clients.py]
  • Compare LTPA files for idempotency on junction creation
  • compare zip file contents [utilities/tools.py]
  • check runtime template root import for idempotency
  • check management root on import_zip for idempotency

BugFix [aac\runtime_template]:

  • runtime_template root: add check_mode and force parameter to be passed through delete call
  • runtime_template file: File checker should compare to None, otherwise if id=0 the check would generate a false positive

svetterIO and others added 7 commits January 28, 2019 11:32
BugFix:
- runtime_template root: add check_mode and force parameter to be passed through delete call
- runtime_template file: File checker should compare to None, otherwise if id=0 the check would generate a false positive
Feature:  Directory create with id function added
perform compare checks for zip on:
 - number of files
 - file content comparison one by one
adding verification check on runtime template root files between server and zip in import_file function. (makes use of new function: files_same_zip_content in ibmsecurity.utilities.tools)
adding verification check on management root files between server and zip in import_file function. (makes use of new function: files_same_zip_content in ibmsecurity.utilities.tools)
@ram-ibm
Copy link
Collaborator

ram-ibm commented May 22, 2019

I have changed for runtime_template that I need to merge as well. So will need to work this one carefully.

svetterIO and others added 16 commits July 1, 2019 09:44
Upload of aac runtime template files needs path+name instead of id for check and delete function
If zip files for runtime template comparison is missing, skip it.
This indicates aac or federation module is maybe not activated
Configure entire scim with idempotency checking
… restrictions)

load of signer certificates had following issues:
-  loading of local runtime certificates not possible (e.g. ansible can not reach local aac runtime certificate for checking)
- ansible is required to be able to load the certificate for comparison (firewall restrictions can prevent this to work properly)

fix: additional parameter  "check_remote" introduces.
description: parameter "check_remote" controls whether to load remote certificate into ansible for comparison or to simply compare the kdb for existance of the label. For backward compatibility and default behavior (LMI) reasons "check_remote" parameter is set to False by default.
…rties by name

This feature attempts to find the uuids from the properties "EmailMessage.serverConnection", "ScimConfig.serverConnection" and "CI.serverConnection". If a UUID is found, the value for this property is replaced by this UUID, otherwise the value remains unchanged.
This allows you to set ServerConnections by name, while still allowing you to create the ServerConnection directly from the UUID.
…ld numbering

ValueError: cannot switch from manual field specification to automatic field numbering
…connection parameters

Adding compare functionality to all server connection types: ci, ldap, smtp, ws, jdbc

1. Attention: ci server connection parameter changed.
Following functions
 set
 update
 delete
have been updated to work with the name parameter instead of id parameter.

2. Attention: jdbc type parameter removed and made static = 'db2'

All these changes are adjustments to harmonize the functions signature accross all server connections (ci, ldap, ws, smtp, jdbc)
REST API does two checks:
1. name already exist
2. filename (under which the file will be stored to the appliance) already exist
The checks are indepentent from each other. If one of the checks fails an error will be raised by API call.
_check function now reflects this behaviour by checking name and filename parameter for conflicts.
manual re-engineering of server_connections ci, jdbc, smtp and ws from previous commit (1d1bb76) to resolve merge conflict easily.
@svetterIO
Copy link
Contributor Author

Before accepting the pull request, following considerations:

  1. The merge conflict for server_connections is now resolved (commit: 690df2c).
    As part of the merge conflict resolution, I left out the type parameter as this is a static string for every class:
    • ws.py [type=ws]
    • ldap.py [type=ldap]
    • ci.py [type=ci]
    • smtp.py [type=smtp]
    • jdbc.py [type=db2]
      Unfortunately the type for jdbc is db2 and therefore different to the filename. I used the filename in previous implementations as type parameter for some playbooks, which now would break by introducing the additional type parameter.
  2. Check the commit to fix the load of signer certificates(a481576)
    The currently implented behavior has changed so that now a parameter "check_remote" is necessary to trigger the retrieval and checking of signer certificates from the ansible server.
    Previous commit (c3b3522) broke customer implementations, where firewall blocked the load of the remote certificates from the ansible server.

@svetterIO svetterIO closed this Aug 15, 2019
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants