Fwd: pam_xacml

[bill parducci <bill@parducci.net>]

This also may be of interest and should be added to our home page.

b

Begin forwarded message:

> From: Andreas Klenk <klenk@ri.uni-tuebingen.de>
> Date: December 1, 2008 11:48:07 PM PST
> To: bill@parducci.net
> Cc: Tobias Heide <tobias@flashbit.de>
> Subject: pam_xacml
>
> Hello Mister Parducci,
>
> I want to bring our experimental project to your attention. It is a  
> PAM module that allows XACML authorization for many existing  
> applications (SS5 Socks Server, su, Apache, ...) and does not  
> require changes to the code. XACML authorization with pam_xacml can  
> simply be enabled through the PAM configuration. PAM is available(/ 
> is enabled per default) for most Unix/Linux operating systems. The  
> pam_xacml module currently works with the sunxacml implementation  
> and Joseph Bester's PDP.
>
> The Code is open source and is available here for testing:
> http://pamxacml.sourceforge.net/
>
> Do you think that it is relevant as XACML support tool on the TC  
> homepage?
>
> The benefits of the tool would be that it helps in testing and  
> devlopping unified policies for many applications. The PAM interface  
> is really simple and has support for many programming languages (C/C+ 
> +, Java, Python, ...). pam_xacml is therefore also good for  
> prototyping XACML authorization with new applications.
>
> We appended a current publication at KIVS 2009 that describes  
> pam_xacml in more detail.
>
> Kind Regards,
> Andreas and Tobias
>
>
> -- 
> -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- 
> =-=-
> Andreas Klenk                    Tel.: +49 7071 29 70535
> Wilhelm-Schickard-Institute      Fax.: +49 7071 29 5220
> University of Tuebingen          email:klenk@informatik.uni-tuebingen.de
> Sand 13 - Room B307       \|||/  http://net.informatik.uni- 
> tuebingen.de
> D 72076 Tuebingen         (o o)
> -=-=-=-=-=-=-=-=-=-=-=-ooO-(_)-Ooo-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- 
> =-=-

2009KIVS.pdf