Re: [xacml-dev] PDP not like a web service

[Brad Cox <bradjcox@gmail.com>]

There's also the XACML 2.0 compiler described in the paper at http://bradjcox.blogspot.com. Tested with the same OASIS conformance tests used by Sun's intepreter and passes all but 5 of the ~300 test cases. The PDP released to forge.mil under the name GOSAC-N; Government Open Source Access Control; Next Generation.

There's also an XACML 3.0 version which has been tested by automatically converting the XACML 2.0 tests to XACML 3.0 since no XACML 3.0 conformance tests are available AFAIK. This fails some of the XPATH tests because XPATH handling changed so much in XACML 3.0 that machine conversion wasn't possible.

Both are packaged with a SAML-compliant PDP that supports compilation either off-line (command line or eclipse/maven) or on-the-fly when underlying XACML XML files change. End to end decision-making speed is in the 1200 msgs/sec range when SAML signing isn't enabled.

On Tue, Feb 21, 2012 at 9:59 AM, ppzian <ppzian@gmail.com> wrote:

Hi Jose,

As David and Fatih said, you may want to try my enterprise XACML, which fully supports XACML 2.0. Currently I'm working on an open source entitlement solution which will integrate my XACML and chopsticks projects together, and it should be released by the end of May.