GitLab

This reverts commit e709749894d85768044ce0631588385ad06ac06b.
Don't need it after figuring out imagezip

The CM can now receive either an ABAC or a non-ABAC speaksfor
credential in the list of credentials. Thanks to Gary for getting
libabac built on boss so that I could use it! The AM probably needs a
little bit more work since it has a few V3 places where it does not
invoke CMV2 directly, but that should be easy to fix; all of the AMV2
functions will work tough.

Caveat; I don't bother to look at the speaksfor option; if we get a
speaksfor credential, I figure it was cause the user wants to use it!

I added a hacky script called genspeaksfor to create a proper speaks
for credential that allows me to speak for another user. For example:

	genspeaksfor -a urn:publicid:IDN+emulab.net+user+leebee \
	         urn:publicid:IDN+emulab.net+user+stoller

which generates an ABAC speaks for credential that allows me to spead
for leebee. To use the PG test scripts with this credential:

	createsliver.py* -S speaksfor.cred -s slice.cred

Where slice.cred is a plain slice credential issued to leebee and then
given to me via an out of band mechanism (:-).

operates on a single node given ilo password and node_id.

since it had some bitrot.

that we need this a lot, for the IGB interfaces.

renumber the disks down one.

Better for VMs where there might not be NFS access (as in Utah),
and because in general, using NFS is bad, use the web server
instead.

directory so that the new site can talk to the CH.

CM V2 (and thus the AM) now accept a type=speaksfor credential along
with regular credentials. When supplied, the speaksfor caller must be
equal to the owner of the speaksfor credential and the target must be
equal to the owner of the regular credential(s). All operations take
place in the context of the spokenfor user.

Added speaksfor slots to geni_slices,geni_aggregates and geni_tickets.
Also to the history table. But these are just the most recent data.
Each transaction is logged as normal, and the metadata now includes
the speaksfor data and the log always includes all of the credentials.

For testing, there is a new script in the scripts directory to
generate a speaksfor credential. Not installed since it is really
a hack. But to create one:

  perl genspeaksfor urn:publicid:IDN+emulab.net+user+leebee \
	urn:publicid:IDN+emulab.net+user+stoller

which generates a speaksfor credential that says stoller is speaking
for leebee.

Given a slice credential issued to leebee, the test scripts can be
invoked as follows (by stoller):

  createsliver.py -S speaksfor.cred -s slice.cred -c leebee.cred

A copy of leebee's self credential is needed simply cause of the test
script's desire to talk to the SA (which does not support speaksfor).
Not otherwise needed.

Oh, not tested on the AM interface yet.

Also an upcall to add speaksfor metadata to logfile.

This completes linkdelay support for linux, dropping IMQ in favor
of IFB and netem (so that we do not need to build a special kernel).

In this prototype, a speaksfor credential has type=speaksfor,
owner=speaker/tool, target=user, and is signed by the user.

Add -S option to supply a speaksfor credential.
Other small changes to prevent superfluous calls to SA, which
does not support speaksfor.