Simply repeated dwd's commit 73b59106 on Ubuntu Trusty (20160104ubuntu0.14.04.1)

OF-477: For DIGEST-MD5, use domain rather than host name.

OF-1172 Add support for a wildcard DNS override

OF-1174: MUC should always respond to IQ requests.

OF-1170 Advertise all proxy addresses

OF-1173: X.509/TLS related fixes

IQ requests must always be responded to, if only with an error reply. For good
measure, IQ-Ping support was added too.

This also addresses a worrying (but harmless) mis-redirect to a success
page.

Without this change, EXTERNAL is never offered by default.

Individual domains can be redirected to a specific handling host by use
of the DNS override property, dnsutil.dnsOverride

This patch allows a wildcard "*" entry to override all domains without
a specific override, for example:

dnsutil.dnsOverride = {*,127.0.0.1:5269}

... redirects all outgoing S2S traffic to port 5269 on localhost.

Judging from most current implementations (Smack, Conversations,
Gajim), most clients will use the domain name rather than the
fully qualified host name when constructing the DIGEST-MD5
digest-uri. Although this isn't conforming to RFC2831, interop
is of more value than 'doing the right thing'.

This commit makes SASL use the domain name when the mechanism
in play is DIGEST-MD5, and will use the host name for other
mechanisms.

Instead of one address, the file transfer proxy should lists all
interfaces on which it is reachable (unless configured otherwise).

OF-1116: Apply workaround for Java 7/8 compatibility issue

The JDK 7 signature of ConcurrentHashMap#keySet() returns a Set, while JDK 8 signature
returns a KeySetView, which is a new class in JDK 8. As a result, using Java 7 to run
an Openfire instance that is compiled with Java 8 (using the -source/-target 1.7
compilation flags) causes a java.lang.NoSuchMethodError.

To work around this problem, this commit applies a workaround as presented by
Martin Buchholz in https://bugs.openjdk.java.net/browse/JDK-8151366

Revert "OF-1156: Be consistent with the contents of DefaultCache ..."

This reverts commit d93e8d83.

OF-1168 fix Oracle DDL to use varchar2 and fix alter statements

alter statements (at least in oracle 11g or earlier) do not allow the
COLUMN keyword after ADD in an ALTER statement

Add newly added jmxweb libs to the eclipse project classpath.

OF-1147 plugin management refactoring

OF-1139: User-to-provider mapping

OF-1141 Fix default configuration of PEP/PubSub

OF-1153 Optionally allow binding admin console to separate network interface

OF-1149: Improve build speed

OF-1165 fixed Stored Cross-Site Scripting vulnerability

jmxweb plugin - add support for automated and scheduled monitor repor…

OF-1162 Update postgresql JDBC driver to 9.4-1209

Note: this is the 'v4', which is Java1.6 compat

This commit introduces a new AuthProvider and UserProvider that, similar to the
HybridAuthProvider and -UserProvider can be configured to use more than one backend
store. Where the Hybrids iterate over all of their providers in an attempt to
fulfill a request, these new 'Mapped' variants will first determine what provider
is to be used for a particular user, and will then operate on only that provider.
This is useful where particular users are required to be restricted to specific
backends.

OF-1157

- Fixed: Send a presence by affiliation change

OF-1152: Ensure that raw XML is logged;

OF-1156: Be consistent with the contents of DefaultCache with the HZ cache

Going back to Java7 for Debian  OF-1115

  o delay adding socket interceptors until the pluginManager is ready
  o Correctly interpret the sent/received messages

Hazelcast clustered cache implemented by MapProxyImpl by preventing null
keys and values being added. Also document this behaviour in the Cache
interface.