sblim-devel — All SBLIM-related discussion, including tech support

Re: [Sblim-devel] CIM class meta data information

[Klaus K. <kk...@su...>]

Hi Dave,

* Dave Heller <hel...@li...> [May 07. 2014 03:46]:
> Hi George,
> 
> Yes, those are the methods for retrieving class metadata, if I 
> understand what you are driving at.  Openwsman apparently already has 
> some functionality in this regard.  I was able to successfully run the 
> following queries against SFCB on the back end:
> 
>    wsman invoke -a GetClass 
> http://schemas.openwsman.org/wbem/wscim/1/intrinsic/Linux_ComputerSystem 
> -u wsman -p secret

these method calls (GetClass, EnumerateClassNames) are non-standard
and only available in Openwsman. These were added in past due to the lack
of an appropriate WS-Management standard.

Apparently this has changed and WS-Management now defines ways to
retrieve class information. George is trying to implement that.

> 
> (I only got consistent results using localconnect, the CIM-XML interface 
> was a bit buggy here)

Hmm, worth a bug report ? ;-)


Klaus
-- 
SUSE LINUX Products GmbH, GF: Jeff Hawn, Jennifer Guild, Felix Imendörffer, HRB 16746 (AG Nürnberg)
Maxfeldstraße 5, 90409 Nürnberg, Germany

Re: [Sblim-devel] CIM class meta data information

[Dave H. <hel...@li...>]

Hi George,

Yes, those are the methods for retrieving class metadata, if I 
understand what you are driving at.  Openwsman apparently already has 
some functionality in this regard.  I was able to successfully run the 
following queries against SFCB on the back end:

   wsman invoke -a GetClass 
http://schemas.openwsman.org/wbem/wscim/1/intrinsic/Linux_ComputerSystem 
-u wsman -p secret

   wsman invoke -a EnumerateClassNames 
http://schemas.openwsman.org/wbem/wscim/1/intrinsic -N root/cimv2 -u 
wsman -p secret
   wsman invoke -a EnumerateClassNames 
http://schemas.openwsman.org/wbem/wscim/1/intrinsic -N root/interop -u 
wsman -p secret

(I only got consistent results using localconnect, the CIM-XML interface 
was a bit buggy here)

Is this not working for you?  Or maybe you are trying to do something 
different?

Dave



On 05/02/2014 02:03 AM, George varghese wrote:
> Hi All,
>
> I am trying to implement CIM Metadata access in openwsman(WS Management
> CIM binding specification-DSP0227). For implementing it, I want to know
> which methods are called for getting the class metadata details.
>
> I saw API's in CIMClientLib/cmci.h for calling to get these details from
> CIMOM,
>
>
>       CMPIConstClass* (*getClass)
>                  (CMCIClient* cl,
>                   CMPIObjectPath* op, CMPIFlags flags, char**
> properties, CMPIStatus* rc);
>
>
>
>       CMPIEnumeration* (*enumClassNames)
>                  (CMCIClient* cl,
>                   CMPIObjectPath* op, CMPIFlags flags, CMPIStatus* rc);
>
>       CMPIEnumeration* (*enumClasses)
>                  (CMCIClient* cl,
>                   CMPIObjectPath* op, CMPIFlags flags, CMPIStatus* rc);
>
> I think, these are the methods for getting the meta data details, Is it
> correct? .
>
> Please help to me for implementing it.
>
> Regards,
> George
>
>
> On Thu, Feb 6, 2014 at 9:43 AM, George varghese <geo...@gm...
> <mailto:geo...@gm...>> wrote:
>
>     Hi,
>
>     How to implement client access to CIM class meta data
>     information(section 15 in WS-Management CIM Binding spec.) in provider.
>
>     Please reply.
>
>     Regards,
>     George
>
>
>
>
> ------------------------------------------------------------------------------
> "Accelerate Dev Cycles with Automated Cross-Browser Testing - For FREE
> Instantly run your Selenium tests across 300+ browser/OS combos.  Get
> unparalleled scalability from the best Selenium testing platform available.
> Simple to use. Nothing to install. Get started now for free."
> http://p.sf.net/sfu/SauceLabs
>
>
>
> _______________________________________________
> Sblim-devel mailing list
> Sbl...@li...
> https://lists.sourceforge.net/lists/listinfo/sblim-devel
>

Re: [Sblim-devel] CIM class meta data information

[George v. <geo...@gm...>]

Hi All,

I am trying to implement CIM Metadata access in openwsman(WS Management CIM
binding specification-DSP0227). For implementing it, I want to know which
methods are called for getting the class metadata details.

I saw API's in CIMClientLib/cmci.h for calling to get these details from
CIMOM,


     CMPIConstClass* (*getClass)
                (CMCIClient* cl,
                 CMPIObjectPath* op, CMPIFlags flags, char** properties,
CMPIStatus* rc);



     CMPIEnumeration* (*enumClassNames)
                (CMCIClient* cl,
                 CMPIObjectPath* op, CMPIFlags flags, CMPIStatus* rc);

     CMPIEnumeration* (*enumClasses)
                (CMCIClient* cl,
                 CMPIObjectPath* op, CMPIFlags flags, CMPIStatus* rc);

I think, these are the methods for getting the meta data details, Is it
correct? .

Please help to me for implementing it.

Regards,
George


On Thu, Feb 6, 2014 at 9:43 AM, George varghese <geo...@gm...> wrote:

> Hi,
>
> How to implement client access to CIM class meta data information(section
> 15 in WS-Management CIM Binding spec.) in provider.
>
> Please reply.
>
> Regards,
> George
>

Re: [Sblim-devel] CIM Client configuration for SSL connections

[Vihang K. <vka...@vm...>]

Thanks for the suggestions Dave.

Vihang

----- Original Message -----
From: "Dave Heller" <hel...@li...>
To: "Vihang Karajgaonkar" <vka...@vm...>
Cc: sbl...@li...
Sent: Monday, April 28, 2014 4:29:52 PM
Subject: Re: [Sblim-devel] CIM Client configuration for SSL connections

There isn't currently any support for this in the Java client, and it is 
(arguably) a bit beyond the scope of the JCC to do this, but rather 
within the scope of the application *using* the Java Client.  That said, 
it would be helpful to access some of the JCC internal classes that 
perform the SSL authentication, if one were to implement this, to avoid 
duplication.  Ideally the JCC would have some API extension to expose 
certificate information (and other pertinent details of the SSL/TLS 
connection) to the calling application, so that the application could 
make some sort of decision (interactive or otherwise) to accept/import 
the endpoint certificate.

This would require the implementation of a custom X509TrustManager 
interface, along with the bits to expose the required methods, etc. via 
the API.  There are currently no plans to add any such support.

I have seen some custom X509TrustManager implementations on the 'net, 
that allow an interactive certificate import using a simple (y/n) 
command line interface.  You might be able to implement something like 
this in JCC, which would give you the support in a sort of hackish way, 
but this might suit your needs.

Really the "better way" is, rather than relying on the import of 
(possibly many) individual CIMOM certificates into a local truststore, 
to implement some true PKI in your environment.  That is, use CIMOM 
certificates that are signed by some central certificate authority 
(local or otherwise), and install the CA certificate into your client 
truststore.  (assuming not already included in the Java default 
truststore)  Then, your CIMOMs will be trusted automatically by your 
clients, as appropriate, according to your PKI.  This is obviously much 
more scalable and reliable than relying on user interaction.

Another more scalable approach is to forego the local truststore (file) 
altogether and implement a X509TrustManager that supports LDAP based 
authentication.  This would really be a more appropriate enhancement for 
the JCC.

Dave


On 04/28/2014 03:22 PM, Vihang Karajgaonkar wrote:
> Thanks so much Dave.
>
> I am currently looking into possibility of implementing certificate based authentication for my CIM Client. According to the documents, the CIMOM certificate should be imported into the truststore before CIM Client application initiates the connection. Is there a better way to do this? Can we do it in the run-time such that we can retrieve the certificate that CIMOM sent during the first connection, and then trust the certificate based on a user action?
>
> Thanks,
> Vihang

Re: [Sblim-devel] CIM Client configuration for SSL connections

[Dave H. <hel...@li...>]

There isn't currently any support for this in the Java client, and it is 
(arguably) a bit beyond the scope of the JCC to do this, but rather 
within the scope of the application *using* the Java Client.  That said, 
it would be helpful to access some of the JCC internal classes that 
perform the SSL authentication, if one were to implement this, to avoid 
duplication.  Ideally the JCC would have some API extension to expose 
certificate information (and other pertinent details of the SSL/TLS 
connection) to the calling application, so that the application could 
make some sort of decision (interactive or otherwise) to accept/import 
the endpoint certificate.

This would require the implementation of a custom X509TrustManager 
interface, along with the bits to expose the required methods, etc. via 
the API.  There are currently no plans to add any such support.

I have seen some custom X509TrustManager implementations on the 'net, 
that allow an interactive certificate import using a simple (y/n) 
command line interface.  You might be able to implement something like 
this in JCC, which would give you the support in a sort of hackish way, 
but this might suit your needs.

Really the "better way" is, rather than relying on the import of 
(possibly many) individual CIMOM certificates into a local truststore, 
to implement some true PKI in your environment.  That is, use CIMOM 
certificates that are signed by some central certificate authority 
(local or otherwise), and install the CA certificate into your client 
truststore.  (assuming not already included in the Java default 
truststore)  Then, your CIMOMs will be trusted automatically by your 
clients, as appropriate, according to your PKI.  This is obviously much 
more scalable and reliable than relying on user interaction.

Another more scalable approach is to forego the local truststore (file) 
altogether and implement a X509TrustManager that supports LDAP based 
authentication.  This would really be a more appropriate enhancement for 
the JCC.

Dave


On 04/28/2014 03:22 PM, Vihang Karajgaonkar wrote:
> Thanks so much Dave.
>
> I am currently looking into possibility of implementing certificate based authentication for my CIM Client. According to the documents, the CIMOM certificate should be imported into the truststore before CIM Client application initiates the connection. Is there a better way to do this? Can we do it in the run-time such that we can retrieve the certificate that CIMOM sent during the first connection, and then trust the certificate based on a user action?
>
> Thanks,
> Vihang

Re: [Sblim-devel] CIM Client configuration for SSL connections

[Vihang K. <vka...@vm...>]

Thanks so much Dave.

I am currently looking into possibility of implementing certificate based authentication for my CIM Client. According to the documents, the CIMOM certificate should be imported into the truststore before CIM Client application initiates the connection. Is there a better way to do this? Can we do it in the run-time such that we can retrieve the certificate that CIMOM sent during the first connection, and then trust the certificate based on a user action?

Thanks,
Vihang

----- Original Message -----
From: "Dave Heller" <hel...@li...>
To: sbl...@li...
Sent: Monday, April 28, 2014 11:08:57 AM
Subject: Re: [Sblim-devel] CIM Client configuration for SSL connections

Hi Vihang,

It sounds like your question pertains more to configuration in general 
than it does to SSL specifically.  You can find documentation for both 
in the ./org/sblim/cimclient/doc-files folder in the project (that is, 
packaged with the Java CIM Client) or on the web at:

https://urldefense.proofpoint.com/v1/url?u=http://sblim.sourceforge.net/cim-client2-v22-doc/org/sblim/cimclient/doc-files/configuration.html&k=oIvRg1%2BdGAgOoM1BIlLLqw%3D%3D%0A&r=JJTdWpNc91BJtQHVcV00ozCvrrHJkhV%2FACfSosF43PY%3D%0A&m=LgTMWiB9RXrobDbW8zaIKksm33fPso1Wi3jIA%2BK0USQ%3D%0A&s=9673ccb7d240f7db84fb901ee40d922afc00445e64534e39f8e9242823365fb2
https://urldefense.proofpoint.com/v1/url?u=http://sblim.sourceforge.net/cim-client2-v22-doc/org/sblim/cimclient/doc-files/secure.html&k=oIvRg1%2BdGAgOoM1BIlLLqw%3D%3D%0A&r=JJTdWpNc91BJtQHVcV00ozCvrrHJkhV%2FACfSosF43PY%3D%0A&m=LgTMWiB9RXrobDbW8zaIKksm33fPso1Wi3jIA%2BK0USQ%3D%0A&s=d041b0a20c3b857d391dd31213efc75a3724210e25ad1c0fd75340ae5ffd2485
https://urldefense.proofpoint.com/v1/url?u=http://sblim.sourceforge.net/cim-client2-v22-doc/org/sblim/cimclient/doc-files/indications.html&k=oIvRg1%2BdGAgOoM1BIlLLqw%3D%3D%0A&r=JJTdWpNc91BJtQHVcV00ozCvrrHJkhV%2FACfSosF43PY%3D%0A&m=LgTMWiB9RXrobDbW8zaIKksm33fPso1Wi3jIA%2BK0USQ%3D%0A&s=f12a83ffa031ef9797fb8e6b3808ca3b1e2d0b32970e77146144141f034b219a
https://urldefense.proofpoint.com/v1/url?u=http://sblim.sourceforge.net/cim-client2-v22-doc/org/sblim/cimclient/doc-files/secure_indications.html&k=oIvRg1%2BdGAgOoM1BIlLLqw%3D%3D%0A&r=JJTdWpNc91BJtQHVcV00ozCvrrHJkhV%2FACfSosF43PY%3D%0A&m=LgTMWiB9RXrobDbW8zaIKksm33fPso1Wi3jIA%2BK0USQ%3D%0A&s=e797c87fbfe1ae96578296b198761728d4a4f45b8d1d7577f5c9a3897e7f2b99

It is not necessary to set the properties for each instance of the 
client individually, although you can do that if your application 
requires it.  The difference between global config, 
client/listener-specific config and thread-specific config is explained 
in configuration.html.  Let me know if you have questions after reading 
that.

Perhaps your confusion comes from the difference between 
client.getProperties() and client.getProperty(), where client is an 
instance of WBEMClient.  It's true that client.getProperties() does not 
return any values set in the .properties file.  That's because 
properties from the file are global properties, and 
client.getProperties() only returns those properties specific to that 
client instance (as set via client.setProperty() for example).  To 
return a list of global properties, including those read from the file, 
you can use System.getProperties().

client.getProperty() behaves a little differently.  This method will 
return a value for the property in question in the following precedence: 
local (i.e thread-specific), client-specific, global, default (i.e as 
set in WBEMConfigurationDefaults).  So in that sense, 
client.getProperty() can return a value that was set via the .properties 
file, wheareas client.getProperties() will not.  I hope that clarifies.

Dave H.


On 04/23/2014 06:28 PM, Vihang Karajgaonkar wrote:
> Hi Everyone,
>
> I need to understand how to configure the CIM Client. The
> WBEMConfiguration.getGlobalConfiguration() gives the properties settings
> from sblim-cim-client2.properties file. But the WBEMClient.getProperties
> does not have the properties from the sblim-cim-client2.properties file.
> Do we have to explicitly set all the properties again for each instance
> of WBEMClient? If not, how do we enforce the client to pick the
> configuration properties from the sblim-cim-client2.properties file
> wherever it is created?
>
> Thanks,
> Vihang
>
>
> ------------------------------------------------------------------------------
> Start Your Social Network Today - Download eXo Platform
> Build your Enterprise Intranet with eXo Platform Software
> Java Based Open Source Intranet - Social, Extensible, Cloud Ready
> Get Started Now And Turn Your Intranet Into A Collaboration Platform
> https://urldefense.proofpoint.com/v1/url?u=http://p.sf.net/sfu/ExoPlatform&k=oIvRg1%2BdGAgOoM1BIlLLqw%3D%3D%0A&r=JJTdWpNc91BJtQHVcV00ozCvrrHJkhV%2FACfSosF43PY%3D%0A&m=LgTMWiB9RXrobDbW8zaIKksm33fPso1Wi3jIA%2BK0USQ%3D%0A&s=09d2d16a529580f2309172f76f9bf54987b280265f4ebdf704bda4f4b4af8eaa
>
>
>
> _______________________________________________
> Sblim-devel mailing list
> Sbl...@li...
> https://urldefense.proofpoint.com/v1/url?u=https://lists.sourceforge.net/lists/listinfo/sblim-devel&k=oIvRg1%2BdGAgOoM1BIlLLqw%3D%3D%0A&r=JJTdWpNc91BJtQHVcV00ozCvrrHJkhV%2FACfSosF43PY%3D%0A&m=LgTMWiB9RXrobDbW8zaIKksm33fPso1Wi3jIA%2BK0USQ%3D%0A&s=e6c8726ddcc206654b4beabe3e38d9a08210cfa4cf1c178a76e404d07445d2fe
>


------------------------------------------------------------------------------
"Accelerate Dev Cycles with Automated Cross-Browser Testing - For FREE
Instantly run your Selenium tests across 300+ browser/OS combos.  Get 
unparalleled scalability from the best Selenium testing platform available.
Simple to use. Nothing to install. Get started now for free."
https://urldefense.proofpoint.com/v1/url?u=http://p.sf.net/sfu/SauceLabs&k=oIvRg1%2BdGAgOoM1BIlLLqw%3D%3D%0A&r=JJTdWpNc91BJtQHVcV00ozCvrrHJkhV%2FACfSosF43PY%3D%0A&m=LgTMWiB9RXrobDbW8zaIKksm33fPso1Wi3jIA%2BK0USQ%3D%0A&s=1406267dd8979f0cded7d4ff1034747c2bb2d5a9ddf6eccdd91a6c1e048d94a9
_______________________________________________
Sblim-devel mailing list
Sbl...@li...
https://urldefense.proofpoint.com/v1/url?u=https://lists.sourceforge.net/lists/listinfo/sblim-devel&k=oIvRg1%2BdGAgOoM1BIlLLqw%3D%3D%0A&r=JJTdWpNc91BJtQHVcV00ozCvrrHJkhV%2FACfSosF43PY%3D%0A&m=LgTMWiB9RXrobDbW8zaIKksm33fPso1Wi3jIA%2BK0USQ%3D%0A&s=e6c8726ddcc206654b4beabe3e38d9a08210cfa4cf1c178a76e404d07445d2fe

Re: [Sblim-devel] CIM Client configuration for SSL connections

[Dave H. <hel...@li...>]

Hi Vihang,

It sounds like your question pertains more to configuration in general 
than it does to SSL specifically.  You can find documentation for both 
in the ./org/sblim/cimclient/doc-files folder in the project (that is, 
packaged with the Java CIM Client) or on the web at:

http://sblim.sourceforge.net/cim-client2-v22-doc/org/sblim/cimclient/doc-files/configuration.html
http://sblim.sourceforge.net/cim-client2-v22-doc/org/sblim/cimclient/doc-files/secure.html
http://sblim.sourceforge.net/cim-client2-v22-doc/org/sblim/cimclient/doc-files/indications.html
http://sblim.sourceforge.net/cim-client2-v22-doc/org/sblim/cimclient/doc-files/secure_indications.html

It is not necessary to set the properties for each instance of the 
client individually, although you can do that if your application 
requires it.  The difference between global config, 
client/listener-specific config and thread-specific config is explained 
in configuration.html.  Let me know if you have questions after reading 
that.

Perhaps your confusion comes from the difference between 
client.getProperties() and client.getProperty(), where client is an 
instance of WBEMClient.  It's true that client.getProperties() does not 
return any values set in the .properties file.  That's because 
properties from the file are global properties, and 
client.getProperties() only returns those properties specific to that 
client instance (as set via client.setProperty() for example).  To 
return a list of global properties, including those read from the file, 
you can use System.getProperties().

client.getProperty() behaves a little differently.  This method will 
return a value for the property in question in the following precedence: 
local (i.e thread-specific), client-specific, global, default (i.e as 
set in WBEMConfigurationDefaults).  So in that sense, 
client.getProperty() can return a value that was set via the .properties 
file, wheareas client.getProperties() will not.  I hope that clarifies.

Dave H.


On 04/23/2014 06:28 PM, Vihang Karajgaonkar wrote:
> Hi Everyone,
>
> I need to understand how to configure the CIM Client. The
> WBEMConfiguration.getGlobalConfiguration() gives the properties settings
> from sblim-cim-client2.properties file. But the WBEMClient.getProperties
> does not have the properties from the sblim-cim-client2.properties file.
> Do we have to explicitly set all the properties again for each instance
> of WBEMClient? If not, how do we enforce the client to pick the
> configuration properties from the sblim-cim-client2.properties file
> wherever it is created?
>
> Thanks,
> Vihang
>
>
> ------------------------------------------------------------------------------
> Start Your Social Network Today - Download eXo Platform
> Build your Enterprise Intranet with eXo Platform Software
> Java Based Open Source Intranet - Social, Extensible, Cloud Ready
> Get Started Now And Turn Your Intranet Into A Collaboration Platform
> http://p.sf.net/sfu/ExoPlatform
>
>
>
> _______________________________________________
> Sblim-devel mailing list
> Sbl...@li...
> https://lists.sourceforge.net/lists/listinfo/sblim-devel
>

Re: [Sblim-devel] CIM class meta data information

[George v. <geo...@gm...>]

Hi,

if anybody, please reply for it.

Regards,
George


On Thu, Feb 6, 2014 at 9:43 AM, George varghese <geo...@gm...> wrote:

> Hi,
>
> How to implement client access to CIM class meta data information(section
> 15 in WS-Management CIM Binding spec.) in provider.
>
> Please reply.
>
> Regards,
> George
>

[Sblim-devel] CIM Client configuration for SSL connections

[Vihang K. <vka...@vm...>]

Hi Everyone, 

I need to understand how to configure the CIM Client. The WBEMConfiguration.getGlobalConfiguration() gives the properties settings from sblim-cim-client2.properties file. But the WBEMClient.getProperties does not have the properties from the sblim-cim-client2.properties file. Do we have to explicitly set all the properties again for each instance of WBEMClient? If not, how do we enforce the client to pick the configuration properties from the sblim-cim-client2.properties file wherever it is created? 

Thanks, 
Vihang 

[Sblim-devel] New Release: SFCC 2.2.7

[Dave H. <hel...@li...>]

Hi Folks,

The latest version of the C CIM CLient, SFCC 2.2.7 has just been 
released.  There just one new feature, to expose the SFCB broker's 
markHeap() and releaseHeap() functions through the client function 
table.  This aids memory management for long-running clients using SFCB 
localconnect by allowing CMPI objects to be periodically garbage 
collected.  The change does not affect user running SFCC over CIM-XML.

The use of markHeap() and releaseHeap() is not required but must be used 
with SFCB 1.4.7 or greater when it is used.

The bugfixes, conversely, only affect cim-xml users.  Fix a few parser 
errors, and a memory leak.

See the NEWS file for full list of changes.  The new release is tagged 
(SFCC_2_2_7) in git and the tarball is posted to the SourceForge 
download page.

https://sourceforge.net/projects/sblim/files/sblim-sfcc/

-Dave H.

SBLIM Team

[Sblim-devel] New Release: SFCB 1.4.8

[Dave H. <hel...@li...>]

Hi Folks,

We have a new release today of the SFCB 1.4 branch: SFCB 1.4.8.  There 
are just a handful of new features this time but this release addresses 
some long-standing issues with shutdown and process hangs.

For new features: There is new config property 
enableSslCipherServerPref, which allows a fine adjustment in the 
selection of cipher suite on the connection, by enforcing the server's 
order of preference instead of the client's (as is the case by default). 
  In general, the selection of cipher suite is determined by the openssl 
library based on the "cipher list" provided to the client and the 
server.  SFCB's cipher list is set using the "sslCiphers" config 
property.  Remember, you can use the openssl "s_client" tool to check 
the actual cipher used on the connection, for a given configuration at 
client and server.  See the .cfg file comments for more info.

There a a couple of new properties to control the behavior of the 
indication sender: indicationCurlUseExpect100 and 
indicationCurlHonorRedirect.  This will have little or no impact for 
most environments but users should be aware we shut off curl's use of 
the HTTP Expect:100-continue by default.  This eliminates a short delay 
on indication send that is not desirable unless Expect:100-continue 
behavior is really being used.  For those who do rely on this behavior 
it can be reenabled with indicationCurlUseExpect100.  It can be useful 
in conjunction with HTTP redirect, for example, which can now be enabled 
via the indicationCurlHonorRedirect property.  See 
https://sourceforge.net/p/sblim/sfcb-tix/101/ for more info.

On the aforementioned improvements: SFCB tix #94 is an attempt to reduce 
the likelihood of shutdown hang due to an inter-thread signal being 
missed, as can happen if shutdown occurs under particularly gnarly 
conditions.  #95 is a tweak that tends to prevent a (benign but) 
annoying core dump at the end of shutdown.  #89 improves providerDvr's 
handling and recovery when providers crash, making a req handler less 
likely to hang.  And #96 is an attempt to also not hang a req handler 
when there is a request outstanding at shutdown, which can in fact hang 
the whole shutdown.

Because these changes reduce but do not entirely eliminate the 
possibility of a req handler hang, it is determined we ultimately need 
some sort of configurable req handler timeout.  This is under 
development but will have to wait until the next release!  Watch this 
space for updates: https://sourceforge.net/p/sblim/sfcb-tix/97/.

You can see the NEWS file for full list of changes.  The new release is 
tagged (SFCB_1_4_8) in git and the tarball is posted to the SourceForge 
download page.

http://sourceforge.net/projects/sblim/files/sblim-sfcb/1.4%20branch%20%28current%29/

Thanks to Klaus from Novell for goals/assists on all of the new shutdown 
patches!  And thanks to the others who contributed to this release.

-Dave H.

SBLIM Team

[Sblim-devel] New Release: SFCB 1.3.18

[Dave H. <hel...@li...>]

Hi Folks,

We have a new release today of the SFCB 1.3 branch: SFCB 1.3.18.  The 
1.3 branch is in maintenance mode and we strongly encourage users to 
migrate to SFCB 1.4.  But we do have some bugfixes and a handful of new 
features to bring 1.3 somewhat in sync with 1.4

For new features: There are a few new sfcb.cfg properties pertaining to 
SSL/TLS: sslDhParamsFilePath supports the use of an external Diffie 
Hellman (DH) parameters file, and sslEcDhCurveName allows the user to 
set the "curve name" for Elliptic Curve Diffie Hellman (ECDH) key 
generation.  These options can be used with openssl cipher suites 
supporting "ephemeral" Diffie Hellman (DHE) key exchange algorithms. 
Ephemeral key exchange enhances security by decoupling the private key 
used to generate the session key, from the private key associated with 
the server certificate.  This provides "forward secrecy" while 
maintaining a key exchange algorithm compatible with a conventional 
RSA-based server certificate.  See the .cfg file comments for more info.

Also there is new config property enableSslCipherServerPref, which 
allows a fine adjustment in the selection of cipher suite on the 
connection, by enforcing the server's order of preference instead of the 
client's (as is the case by default).  In general, the selection of 
cipher suite is determined by the openssl library based on the "cipher 
list" provided to the client and the server.  SFCB's cipher list is set 
using the "sslCiphers" config property.  Remember, you can use the 
openssl "s_client" tool to check the actual cipher used on the 
connection, for a given configuration at client and server.

Also added is the feature to reload SSL context without restarting any 
SFCB process, whereas previously it was necessary to restart the HTTP 
daemon.  Any SSL related config property can be updated on the fly by 
sending a SIGUSR2 signal to the HTTP adapter process.  In SFCB 1.4 you 
can determine the pid of the adapter(s) precisely using the new 
SFCB_LABELPROCS feature.  In v1.3 you can use the sfcbproc utility to 
find the pid (although this is not guaranteed!) like this:

$ kill -USR2 $(sfcbproc | grep Daemon | sed 's/^ *//' | cut -d' ' -f1)

For bug fixes: There are a few patches to fix memory leaks with long 
running SFCC clients running in localconnect mode, so we recommend users 
upgrade to the latest SFCC and SFCB if this pertains to your 
environment.  There are also some fixes for some mostly-benign core 
dumps that occur only in unusual cases.  There is also a bugfix for 
indicationDeliveryThreadLimit.

See the NEWS file for full list of changes.  The new release is tagged 
(SFCB_1_3_18) in git and the tarball is posted to the SourceForge 
download page.

https://sourceforge.net/projects/sblim/files/sblim-sfcb/1.3%20branch%20%28maintenance%29/

Enjoy!

-Dave H.

SBLIM Team

Re: [Sblim-devel] Implementing notification feature in provider

[David H. <hel...@us...>]

I think the easiest way to get started is to use the SFCB 
TestIndicationProvider as a template.  Build SFCB with test providers 
enabled (configure --enable-tests=providers, or simply: configure 
--enable-tests, to build all tests).  Run make, make install and then make 
postinstall (last step ensures the test provider is registered with SFCB.

Next, look at the sample XML files here.  1-3 create the necessary 
instances to support the subscription.  4 is a method call that triggers a 
test indication.  5-7 delete the instances pertaining to the subscription. 
 The IndicationSubscription must be deleted first.

$ ls test/TestProviders/tests/IndTest*.xml
IndTest1CreateFilter.xml
IndTest2CreateHandler.xml
IndTest3CreateSubscription.xml
IndTest4CallMethod.xml
IndTest5DeleteSubscription.xml
IndTest6DeleteHandler.xml
IndTest7DeleteFilter.xml

The CreateHandler XML specifies a file URL as the handler destination. 
tail this file to see subscriptions coming in.  If you have a CIM 
indication handler online you can edit the file to point to your handler 
URL.


David E. Heller
IBM Linux Technology Center
hel...@us...




George varghese <geo...@gm...> 
03/05/2014 10:01 AM

To
David Heller/Allentown/IBM@IBMUS, 
cc

Subject
Re: [Sblim-devel] Implementing notification feature in provider






yes. I want to know how to write an indication provider. 

I just go through the sblim-cmpi base provider. I saw code related to 
indication in operatingsystem file. 

if you reply about indication, its very helpful for me.

Regards,
George


On Wed, Mar 5, 2014 at 8:05 PM, David Heller <hel...@us...> wrote:
You want to know how to write an indication provider, is what you are 
asking? 


David E. Heller
IBM Linux Technology Center
hel...@us...




George varghese <geo...@gm...> 
03/05/2014 12:57 AM 


To
sbl...@li..., Klaus Kaempf <kk...@su...>, 
cc

Subject
[Sblim-devel] Implementing notification feature in provider








Hi, 

I had using sblim development tool packages for c file creation. In 
provider, I want to implement notification feature in provider.  

Please let me know , how to create indication instance methods for 
implementing it.. 


Regards, 
George
------------------------------------------------------------------------------
Subversion Kills Productivity. Get off Subversion & Make the Move to 
Perforce.
With Perforce, you get hassle-free workflows. Merge that actually works. 
Faster operations. Version large binaries.  Built-in WAN optimization and 
the
freedom to use Git, Perforce or both. Make the move to Perforce.
http://pubads.g.doubleclick.net/gampad/clk?id=122218951&iu=/4140/ostg.clktrk
_______________________________________________
Sblim-devel mailing list
Sbl...@li...
https://lists.sourceforge.net/lists/listinfo/sblim-devel

Re: [Sblim-devel] Implementing notification feature in provider

[David H. <hel...@us...>]

You want to know how to write an indication provider, is what you are 
asking?


David E. Heller
IBM Linux Technology Center
hel...@us...




George varghese <geo...@gm...> 
03/05/2014 12:57 AM

To
sbl...@li..., Klaus Kaempf <kk...@su...>, 
cc

Subject
[Sblim-devel] Implementing notification feature in provider






Hi,

I had using sblim development tool packages for c file creation. In 
provider, I want to implement notification feature in provider. 

Please let me know , how to create indication instance methods for 
implementing it..


Regards,
George
------------------------------------------------------------------------------
Subversion Kills Productivity. Get off Subversion & Make the Move to 
Perforce.
With Perforce, you get hassle-free workflows. Merge that actually works. 
Faster operations. Version large binaries.  Built-in WAN optimization and 
the
freedom to use Git, Perforce or both. Make the move to Perforce.
http://pubads.g.doubleclick.net/gampad/clk?id=122218951&iu=/4140/ostg.clktrk
_______________________________________________
Sblim-devel mailing list
Sbl...@li...
https://lists.sourceforge.net/lists/listinfo/sblim-devel

[Sblim-devel] Implementing notification feature in provider

[George v. <geo...@gm...>]

Hi,

I had using sblim development tool packages for c file creation. In
provider, I want to implement notification feature in provider.

Please let me know , how to create indication instance methods for
implementing it..


Regards,
George

Re: [Sblim-devel] Failed to compile mof file

[Von B. P. <pau...@in...>]

The message is telling you that the MOFs you are extending don't include CIM_SoftwareInstallationCapabilities.

I'm guessing you are trying to implement DMTF DSP1025 Software Update Profile.  It appears that the text about CIM_SoftwareInstallationCapabilities is a typographical error; the class should be CIM_SoftwareInstallationServiceCapabilities.

From: George varghese [mailto:geo...@gm...]
Sent: Sunday, February 23, 2014 10:14 PM
To: sbl...@li...; Klaus Kaempf
Subject: [Sblim-devel] Failed to compile mof file

Hi ,

I have created one class named GK_SoftwareInstallationCapabilities from CIM_SoftwareInstallationCapabilities cim class.


[ Description("Class representing Software Installation Capabilities"),
  Provider("cmpi:cmpiGK__SoftwareInstallationCapabilities")
]
class GK_SoftwareInstallationCapabilities :
        CIM_SoftwareInstallationCapabilities{
};


Then I try to register it with sfcb,


I got the following response,

Sf format being used.
error in /var/lib/sfcb/stage/mofs/indication.mof line 34 near CIM_System: class CIM_SoftwareInstallationCapabilities was referenced but never defined.
Failed compiling the MOF files.

How to resolve this issue,

Please help me,

Regards,
George

[Sblim-devel] Failed to compile mof file

[George v. <geo...@gm...>]

Hi ,

I have created one class named GK_SoftwareInstallationCapabilities from
CIM_SoftwareInstallationCapabilities cim class.


[ Description("Class representing Software Installation Capabilities"),
  Provider("cmpi:cmpiGK__SoftwareInstallationCapabilities")
]
class GK_SoftwareInstallationCapabilities :
        CIM_SoftwareInstallationCapabilities{
};


Then I try to register it with sfcb,


I got the following response,

Sf format being used.
error in /var/lib/sfcb/stage/mofs/indication.mof line 34 near CIM_System:
class CIM_SoftwareInstallationCapabilities was referenced but never defined.
Failed compiling the MOF files.

How to resolve this issue,

Please help me,

Regards,
George

[Sblim-devel] "Association Of" queries in CMPI

[Thomas S. <ts...@al...>]

Thanks for the direction so far. I'm actually making reasonable
progress on understanding CMPI. 

One thing I'm still trying to figure out is how to handle
"Association Of" queries. I think I have an ok handle on the
newSelectExp() concepts, but clearly there must be another array to
look into. Ideas?

-- 
C. Thomas Stover
Sr. Software Engineer
Alert Logic, Inc.

Re: [Sblim-devel] [Libvirt-cim] About provProcs value problem for sblim-sfcb cim server

[Viktor M. <mih...@li...>]

On 02/12/2014 10:15 AM, Jincheng Miao wrote:
> Hi all,
> 
> I met a problem for sblim-sfcb cim server.
> In the configuration file, the default value of 'provProcs' is 32. While running cimtest,
> there are many failed cases with error "Provider not found or not loadable", eg:
> 
> HostedAccessPoint - 01_forward.py: FAIL
> ERROR   - No kvmrsap instance returned
> Provider not found or not loadable
> --------------------------------------------------------------------
> HostedAccessPoint - 02_reverse.py: FAIL
> ERROR   - No kvmrsap instance returned
> Provider not found or not loadable
> --------------------------------------------------------------------
> 
> After I change the value of 'provProcs' to 64, these cases pass.
> 
> The provProcs is 'Max number of provider processes', and 
> http://doc.opensuse.org/products/draft/SLES/SLES-admin_sd_draft/cha.wbem.html#sec.wbem.config.confile.9
> said 'if a new incoming request requires loading a new provider, 
> then one of the existing providers will first be automatically unloaded'
> 
> So I am wondering that why does sblim-sfcb not automatically unload the existing providers,
> and load the specified provider for case 'HostedAccessPoint - 01_forward.py'. 
> 
> Is it a real problem?
the crux lies in the usage of the libcmpiutil DEFAULT_INST_CLEANUP macro
which prevents the provider from being unloaded. sfcb doesn't unload
providers forcibly by design, so it is not bug.
In the long run, it would probably be desirable to allow the unloading
of the libvirt-cim providers. For now, the number of processes would
need to be increased.

-- 

Mit freundlichen Grüßen/Kind Regards
   Viktor Mihajlovski

IBM Deutschland Research & Development GmbH
Vorsitzender des Aufsichtsrats: Martina Köderitz
Geschäftsführung: Dirk Wittkopp
Sitz der Gesellschaft: Böblingen
Registergericht: Amtsgericht Stuttgart, HRB 243294

Re: [Sblim-devel] authoring providers

[David H. <hel...@us...>]

Here's a document that describes provider development best practices:

http://sblim.sourceforge.net/doc/ProviderArchitecture.pdf


Thomas Stover <ts...@al...> wrote on 02/11/2014 10:29:18 AM:

> Thomas Stover <ts...@al...> 
> 02/11/2014 10:29 AM
> 
> To
> 
> "sbl...@li..." <sbl...@li...>, 

> 
> cc
> 
> Subject
> 
> Re: [Sblim-devel] authoring providers
> 
> On Mon, 10 Feb 2014 18:00:29 -0600
> Chris Buccella wrote:
> 
> > Most things (at least in SBLIM) use the stub macros instead, such as 
> > CMInstanceMIStub(). You'll find it in cmpimacs.h
> > 
> > 
> > -Chris
> 
> Big help, thanks. 
> 
> -- 
> C. Thomas Stover
> Sr. Software Engineer
> Alert Logic, Inc.
> 
------------------------------------------------------------------------------
> Android apps run on BlackBerry 10
> Introducing the new BlackBerry 10.2.1 Runtime for Android apps.
> Now with support for Jelly Bean, Bluetooth, Mapview and more.
> Get your Android app in front of a whole new audience.  Start now.
> 
http://pubads.g.doubleclick.net/gampad/clk?id=124407151&iu=/4140/ostg.clktrk

> _______________________________________________
> Sblim-devel mailing list
> Sbl...@li...
> https://lists.sourceforge.net/lists/listinfo/sblim-devel
> 

Re: [Sblim-devel] authoring providers

[Thomas S. <ts...@al...>]

On Mon, 10 Feb 2014 18:00:29 -0600
Chris Buccella wrote:

> Most things (at least in SBLIM) use the stub macros instead, such as 
> CMInstanceMIStub(). You'll find it in cmpimacs.h
> 
> 
> -Chris

Big help, thanks. 

-- 
C. Thomas Stover
Sr. Software Engineer
Alert Logic, Inc.

Re: [Sblim-devel] authoring providers

[Chris B. <buc...@li...>]

Most things (at least in SBLIM) use the stub macros instead, such as 
CMInstanceMIStub(). You'll find it in cmpimacs.h


-Chris

On 02/10/2014 06:38 PM, Thomas Stover wrote:
> On Mon, 10 Feb 2014 17:08:19 -0600
> David Heller wrote:
>
>> The CMPI Technical Standard 2.0 document you mention really is
>> the definitive API reference.
> Thanks for the response. One thing I'm trying to reconcile from that
> document versus what I'm seeing is the MI function signatures. Version
> 1 of the doc says that MI factories are expected to take the form
>
> <mi_name>_Create<mi-type*>MI() or Generic_Create<mi-type*>MI()
>
> and version 2 says:
>
> <mi_name>_Create_<mi-type*>MI() or Generic_Create_<mi-type*>MI()
>
> *where mi-type is Instance, Association, Property, Method, or Indication
>
> This also jives with what I see in sfcb's source file support.c in the
> functions getFixedEntryPoint() and getGenericEntryPoint(). However, I
> have yet to find such a function in any of the sources for a number of
> provider modules I have been looking at.
>
> Maybe the registration process is specifying alternative names for
> entry points? These function tables have to get initialized somehow.
> Anyway, time to call it a day.
>

Re: [Sblim-devel] authoring providers

[Thomas S. <ts...@al...>]

On Mon, 10 Feb 2014 17:08:19 -0600
David Heller wrote:

> The CMPI Technical Standard 2.0 document you mention really is
> the definitive API reference.

Thanks for the response. One thing I'm trying to reconcile from that
document versus what I'm seeing is the MI function signatures. Version
1 of the doc says that MI factories are expected to take the form

<mi_name>_Create<mi-type*>MI() or Generic_Create<mi-type*>MI()

and version 2 says:

<mi_name>_Create_<mi-type*>MI() or Generic_Create_<mi-type*>MI()

*where mi-type is Instance, Association, Property, Method, or Indication

This also jives with what I see in sfcb's source file support.c in the
functions getFixedEntryPoint() and getGenericEntryPoint(). However, I
have yet to find such a function in any of the sources for a number of
provider modules I have been looking at. 

Maybe the registration process is specifying alternative names for
entry points? These function tables have to get initialized somehow.
Anyway, time to call it a day.

-- 
C. Thomas Stover
Sr. Software Engineer
Alert Logic, Inc.

Re: [Sblim-devel] authoring providers

[David H. <hel...@us...>]

Hi Thomas,

I think there is a good amount of information out there.  I see a number 
of CIM Provider development guides from various independent software 
vendors, some presentations from developers conferences, etc.  The CMPI 
Technical Standard 2.0 document you mention really is the definitive API 
reference.

I think the best way to get started is to use of of the SFCB test 
providers as a template.  Look at the C code and the corresponding MOF 
files.  If you want an example of a more fully developed CMPI project, I 
recommend looking at the cmpi-router project that was contributed a few 
years ago.  It utilizes the CMPI convenience macros, uses a standard 
Provider / Resource Layer architecture and implements the standard 
SBLIM_TRACE facility.  It's one of the best-organized provider packages 
I've seen.

Of course, other folks on the mailing list may have better suggestions for 
reference material, to answer your query.

David E. Heller
IBM Linux Technology Center
hel...@us...




Thomas Stover <ts...@al...> 
02/10/2014 02:24 PM

To
"Sbl...@li..." <Sbl...@li...>, 
cc

Subject
[Sblim-devel] authoring providers






I'm interested in any links, books, tutorials, etc that might exist for
one wanting to implement a provider with CMPI. Thus far I have the
TOG's pdf:

Systems Management:
Common Manageability Programming Interface (CMPI)
Issue 2.0

and have been looking at the source for providers in sblim and
pegasus. Needless to say there is some information to be desired. Any
tips towards cluing me in would be most appreciated. 

-- 
C. Thomas Stover
Sr. Software Engineer
Alert Logic, Inc.
------------------------------------------------------------------------------
Androi apps run on BlackBerry 10
Introducing the new BlackBerry 10.2.1 Runtime for Android apps.
Now with support for Jelly Bean, Bluetooth, Mapview and more.
Get your Android app in front of a whole new audience.  Start now.
http://pubads.g.doubleclick.net/gampad/clk?id=124407151&iu=/4140/ostg.clktrk

_______________________________________________
Sblim-devel mailing list
Sbl...@li...
https://lists.sourceforge.net/lists/listinfo/sblim-devel

[Sblim-devel] authoring providers

[Thomas S. <ts...@al...>]

I'm interested in any links, books, tutorials, etc that might exist for
one wanting to implement a provider with CMPI. Thus far I have the
TOG's pdf:

Systems Management:
Common Manageability Programming Interface (CMPI)
Issue 2.0

and have been looking at the source for providers in sblim and
pegasus. Needless to say there is some information to be desired. Any
tips towards cluing me in would be most appreciated. 

-- 
C. Thomas Stover
Sr. Software Engineer
Alert Logic, Inc.