- 23 Jul, 2013 4 commits
-
-
Srikanth Raju authored
This reverts commit e709749894d85768044ce0631588385ad06ac06b. Don't need it after figuring out imagezip
-
Srikanth Raju authored
-
Srikanth Raju authored
-
Leigh B Stoller authored
The CM can now receive either an ABAC or a non-ABAC speaksfor credential in the list of credentials. Thanks to Gary for getting libabac built on boss so that I could use it! The AM probably needs a little bit more work since it has a few V3 places where it does not invoke CMV2 directly, but that should be easy to fix; all of the AMV2 functions will work tough. Caveat; I don't bother to look at the speaksfor option; if we get a speaksfor credential, I figure it was cause the user wants to use it! I added a hacky script called genspeaksfor to create a proper speaks for credential that allows me to speak for another user. For example: genspeaksfor -a urn:publicid:IDN+emulab.net+user+leebee \ urn:publicid:IDN+emulab.net+user+stoller which generates an ABAC speaks for credential that allows me to spead for leebee. To use the PG test scripts with this credential: createsliver.py* -S speaksfor.cred -s slice.cred Where slice.cred is a plain slice credential issued to leebee and then given to me via an out of band mechanism (:-).
-
- 22 Jul, 2013 18 commits
-
-
Leigh B Stoller authored
-
Leigh B Stoller authored
-
Leigh B Stoller authored
-
Leigh B Stoller authored
-
Leigh B Stoller authored
-
Leigh B Stoller authored
operates on a single node given ilo password and node_id.
-
Leigh B Stoller authored
-
Leigh B Stoller authored
-
Leigh B Stoller authored
since it had some bitrot.
-
Leigh B Stoller authored
-
Leigh B Stoller authored
-
Leigh B Stoller authored
that we need this a lot, for the IGB interfaces.
-
Leigh B Stoller authored
renumber the disks down one.
-
Leigh B Stoller authored
Better for VMs where there might not be NFS access (as in Utah), and because in general, using NFS is bad, use the web server instead.
-
Leigh B Stoller authored
-
Leigh B Stoller authored
-
Eric Eide authored
-
Mike Hibler authored
-
- 19 Jul, 2013 3 commits
-
-
Mike Hibler authored
-
Mike Hibler authored
-
Leigh B Stoller authored
directory so that the new site can talk to the CH.
-
- 17 Jul, 2013 1 commit
-
-
Leigh B Stoller authored
-
- 15 Jul, 2013 2 commits
-
-
Mike Hibler authored
-
Mike Hibler authored
-
- 11 Jul, 2013 12 commits
-
-
Leigh B Stoller authored
CM V2 (and thus the AM) now accept a type=speaksfor credential along with regular credentials. When supplied, the speaksfor caller must be equal to the owner of the speaksfor credential and the target must be equal to the owner of the regular credential(s). All operations take place in the context of the spokenfor user. Added speaksfor slots to geni_slices,geni_aggregates and geni_tickets. Also to the history table. But these are just the most recent data. Each transaction is logged as normal, and the metadata now includes the speaksfor data and the log always includes all of the credentials. For testing, there is a new script in the scripts directory to generate a speaksfor credential. Not installed since it is really a hack. But to create one: perl genspeaksfor urn:publicid:IDN+emulab.net+user+leebee \ urn:publicid:IDN+emulab.net+user+stoller which generates a speaksfor credential that says stoller is speaking for leebee. Given a slice credential issued to leebee, the test scripts can be invoked as follows (by stoller): createsliver.py -S speaksfor.cred -s slice.cred -c leebee.cred A copy of leebee's self credential is needed simply cause of the test script's desire to talk to the SA (which does not support speaksfor). Not otherwise needed. Oh, not tested on the AM interface yet.
-
Leigh B Stoller authored
Also an upcall to add speaksfor metadata to logfile.
-
Leigh B Stoller authored
-
Leigh B Stoller authored
This completes linkdelay support for linux, dropping IMQ in favor of IFB and netem (so that we do not need to build a special kernel).
-
Leigh B Stoller authored
-
Leigh B Stoller authored
In this prototype, a speaksfor credential has type=speaksfor, owner=speaker/tool, target=user, and is signed by the user.
-
Leigh B Stoller authored
-
Leigh B Stoller authored
-
Leigh B Stoller authored
-
Leigh B Stoller authored
Add -S option to supply a speaksfor credential. Other small changes to prevent superfluous calls to SA, which does not support speaksfor.
-
Leigh B Stoller authored
-
Leigh B Stoller authored
-