cleaner: Fix null pointer exception in 'hsms attached to pool' command

Addresses a null pointer exception in the cleaner.

Ticket: http://rt.dcache.org/Ticket/Display.html?id=7769
Target: trunk
Request: 2.6
Request: 2.2
Require-notes: yes
Require-book: no
Acked-by: Paul Millar <paul.millar@desy.de>
Patch: http://rb.dcache.org/r/5493/
gplazma2-jaas: add principal mutator plugin

JAAS plug in can be configured to use any jaas login module. As a
result we may get principas which can't be handles by gplazma. New
MutatorPlugin allows to convert some principals to supported equivalents.

in gplazma.conf:
auth jaas
...
map optional mutator gplazma.mutator.accept=org.apache.activemq.jaas.UserPrincipal gplazma.mutator.produce=username
map sufficient nsswitch
...

The supported output types:
   dn
   name
   username
   kerberos
   fqan

Ticket: #7763
Acked-by: Paul Millar
Target: trunk, 2.6, 2.2
Require-book: yes
Require-notes: yes
Signed-off-by: Tigran Mkrtchyan <tigran.mkrtchyan@desy.de>
Merge pull request #10 from gbehrmann/fix/2.6/rb5493

cleaner: Fix null pointer exception in 'hsms attached to pool' command
system-test: downgrade missing trust from an error to a warning

Currently, the system-test module checks whether the environment is
properly configured to run secure clients against the system-test.
If this test fails then the system-test build fails.

There are (at least) a couple of reasons why failing the build is
wrong:

  1.  there are situations where building the system-test should not
      dependend on being able to successfully test dCache via
      system-test (e.g., "mvn release")

  2.  the user may use a client that is configured to use the
      trust-store provided within system-test.  Therefore, missing
      trust in the default locations isn't always a problem.

This patch downgrades the test failing from an error to a warning.  The
patch also rewords the message to try to avoid some confusion
experienced by users.

Patch: https://rb.dcache.org/r/5533/
Acked-by; Tigran Mkrtchyan
Target: master

Signed-off-by: Tigran Mkrtchyan <tigran.mkrtchyan@desy.de>
[maven-release-plugin] prepare for next development iteration
[maven-release-plugin] prepare release 2.6.0
[maven-release-plugin] prepare for next development iteration
axis: fix NPE when the class providing a SOAP service has void method

The LoggingRPCProvider wraps the standard Axis method-based dispatch and
adds better logging of what's happening.

If the method being invoked (corresponding to some SOAP method) is
declared void or the method returns a null value then the
LoggingRPCProvider suffers an NPE.

This patch fixes this problem.  It also distinguishes between a void
method and a method returning null.

Note #1. None of the SRM operations trigger this problem as all such
methods return something (a class following a *Response naming scheme)

Note #2. Axis allows a method to have multiple OUT values by passing
value-handle objects as arguments to methods.  A future version of
LoggingRPCProvider should detect such methods and log such multi-OUT
values.

Target: master
Request: 2.6
Patch: http://rb.dcache.org/r/5538/
Acked-by: Gerd Behrmann
SRM: log client disconnecting at debug level

It is possible for the client to "give up" on a connection during the
SSL/GSI handshake exchange.  For example, this can happen if the client
doesn't trust the server's certificate.

When this happens, an EOFException is logged; for example:

30 Apr 2013 19:31:59 (SRM-zitpcx6184) [] java.io.EOFException

This message is both unintelligible and unnecessary, as dCache is
behaving correctly under the circumstances.

This patch updates the message to be meaningful, including the client's
IP address and port number in the diagnostic context. It also reduces
the log-level to debug.

Target: master
Request: 2.6
Committed: master@5e2edae4cdd6a10d2bdb499071edac4fc06bc74e
Patch: http://rb.dcache.org/r/5534/
Acked-by: Gerd Bahrmann
SRM: don't talk to SpaceManager when disabled

A recent patch (committed master@2ba5c9 and 2.2@d069ff) fixed an NPE.
The submitter mentioned concerns that this would "break something",
which turned out to be correct.  After the patch, SRM verbose ls
(and space-related operations) no longer function correctly if
space-manager is disabled.  This is because SRM verbose-ls always
sends a request to space-manager and, after the patch, space-manager
gives an error-response when running but configured to be disabled.

This patch alters the SRM so that if configuration shows that
space-manager is disabled then no communication with space-manager
is attempted.  SRM verbose ls will list all files are in no
space-reservations and the space-related operations will fail with
a friendly error message.

A side-effect of this patch is that the 'spacemanager' service is
no longer needed when space-manager is disabled.

Target: master
Request: 2.6
Request: 2.2
Patch: http://rb.dcache.org/r/5526/
Acked-by: Gerd Behrmann
gplazma2-xacml: fix regression on network address sort

module:  gplazma2-xacml

svn trunk@18137 altered NetworkUtils to use an immutable list for local addresses.  The XACML plugin needs to sort these according to external/internal.  This sort was failing and causing failure to load the plugin (undiscovered until now).

Patch copies the immutable list and then sorts.

Target: 2.6
Patch: http://rb.dcache.org/r/5539
Require-notes: no
Require-book: no
Acked-by: Paul
ftp: Log CertPath in case CertPath validation fails

Addresses the issue that if authentication fails with a certificate
chain validation error, the error message contains absolutely no
information about the certificate that triggered the failure.

Requires https://github.com/gbehrmann/JGlobus/tree/feature/certpathvalidationexception_includes_certpath

Target: trunk
Request: 2.6
Request: 2.5
Request: 2.2-sha2
Require-notes: yes
Require-book: no
Acked-by: Paul Millar <paul.millar@desy.de>
Patch: http://rb.dcache.org/r/5543/
(cherry picked from commit ae2c685b6e98bacd2db15aa3ec18ca1e4bbb9e45)
Merge pull request #15 from paulmillar/fix/2.6/JettyGSIConnector_client_disconnects

SRM: log client disconnecting at debug level
Merge pull request #14 from paulmillar/fix/2.6/AxisLoggingRPC

axis: fix NPE when the class providing a SOAP service has void method
Merge pull request #16 from paulmillar/fix/2.6/srm_with_spacemanager_disabled

SRM: don't talk to SpaceManager when disabled
Merge pull request #19 from alrossi/fix/2.6/fix_xacml_sort

gplazma2-xacml: fix regression on network address sort
Merge pull request #23 from gbehrmann/fix/2.6/certpathvalidationexception

ftp: Log CertPath in case CertPath validation fails
ftp: Log stack trace on authentication failure

A recent patch removed logging of stack trace during GSI/Kerberos
authentication failure. Although it is correct not to log a stack
trace for such a failure (it is not a bug), having a stack trace
while debugging JGlobus 2 is convenient. This patch adds logging
of the stack trace at trace level.

Target: trunk
Request: 2.6
Require-notes: no
Require-book: no
Acked-by: Tigran Mkrtchyan <tigran.mkrtchyan@desy.de>
Patch: http://rb.dcache.org/r/5547/
(cherry picked from commit 1a8276673b18fa49f544037b23e76a0d1de61af0)
wevdav,xrootd,nfs: Fix blocking reverse DNS lookup

Addresses an issue in these doors that could cause the door to
become unresponsive.

Our monitoring services periodically poll our doors to get a list
of active transfers. The door did a reverse DNS lookup on the client
IP and this lookup could block the door.

Target: trunk
Request: 2.6
Request: 2.5
Request: 2.2
Require-notes: yes
Require-book: no
Acked-by: Tigran Mkrtchyan <tigran.mkrtchyan@desy.de>
Patch: http://rb.dcache.org/r/5546/
(cherry picked from commit cf364eecc3a2b69e321ad41246c238900fbdf902)
Merge pull request #28 from gbehrmann/fix/2.6/rb5546

wevdav,xrootd,nfs: Fix blocking reverse DNS lookup