mei_rt2mei_rt2_fix_1
Last change
on this file since a0c1772 was
a0c1772,
checked in by Ted Faber <faber@…>, 12 years ago
|
Prettyed this up a little
|
-
Property mode set to
100644
|
File size:
1.3 KB
|
Rev | Line | |
---|
[2efdff5] | 1 | |
---|
| 2 | ABAC 2.1.0 |
---|
| 3 | ---------- |
---|
[a0c1772] | 4 | - The API visible to programmers is much richer and should make |
---|
| 5 | development simpler. As part of this the libcreddy/libabac |
---|
| 6 | distinction has disappeared. All libcreddy functions are now |
---|
| 7 | available through libabac. |
---|
| 8 | - updated to use strongswan 4.6.4. Strongswan 4.4.0 had become very |
---|
| 9 | outdated. |
---|
| 10 | - Added more examples and documentation. |
---|
| 11 | - add a new '--subject-link' option to creddy --attribute to hold the |
---|
| 12 | linking role |
---|
| 13 | - add --dbdump option to abac_prover_yap to retrieve all prolog clauses |
---|
| 14 | stored in the db |
---|
| 15 | |
---|
| 16 | |
---|
| 17 | WARNING |
---|
| 18 | - There are occasional spurious error messages originated |
---|
| 19 | from Strongswan during access of the attribute credentials. Those |
---|
| 20 | messages are due to libstrongswan mishandling certain values of |
---|
| 21 | authorizedKeyIdentifier in a non-destructive way. While we are |
---|
| 22 | working with the strongswan developers to remove these messages, they |
---|
| 23 | should not affect ABAC in any way. |
---|
| 24 | |
---|
| 25 | Here are sample messages: |
---|
[2efdff5] | 26 | |
---|
| 27 | L6 - keyIdentifier: length of ASN.1 object invalid or too large |
---|
| 28 | L6 - authorityCertSerialNumber: length of ASN.1 object invalid or too large |
---|
| 29 | |
---|
| 30 | Do report to us if your ABAC is not behaving as |
---|
| 31 | expected and messages like above seem to be a factor.. |
---|
| 32 | |
---|
| 33 | ABAC 2.0.0 |
---|
| 34 | ---------- |
---|
| 35 | - libabac now can handle RT2 attribute rules |
---|
| 36 | with dynamic and static constraints |
---|
[549656e] | 37 | |
---|
Note: See
TracBrowser
for help on using the repository browser.