source: doc/INSTALL @ 7f04233

mei_rt2
Last change on this file since 7f04233 was 2e9455f, checked in by Mei <mei@…>, 12 years ago

1) added namespace
2) tweak ?This,
3) allowing linking role/oset as constraining conditions
4) adding access_tests regression testing that uses GENI's access policy
5) added couple multi contexts regression tests
6) add compression/uncompression calls to abac_encode_string/abac_decode_string
(libstrongwan only allows 512 char for attribute rule storage)
7) add attribute_now option to creddy that takes a whole char string for attribute
rule

  • Property mode set to 100644
File size: 3.0 KB
RevLine 
[c0bdce8]1For Java installation instructions, see doc/java_install.
2
[9806e76]3Prior to building libabac
4   you may need to install flex, bison, and GNU readline library
5   you must install YAP and libstrongswan
[e205b49]6   Please check doc/dependencies for other software dependencies
[9806e76]7
[4f40c3e]8Download yap-6.2.2 from www.dcc.fc.up.pt
9   http://www.dcc.fc.up.pt/~vsc/Yap/yap-6.2.2.tar.gz
10
[20eaefe]11   $patch -p0 -t -i yap6_2_2_patch_1
[4f40c3e]12   (Patching for FreeBSD or 64bits machines, patch file can be
13   found in libABAC's doc directory)
[9806e76]14
[46df1bc]15   $./configure --enable-dynamic-loading --enable-use-malloc=yes
16   $make
17   $make library
18   $sudo make install_library
[2e9455f]19   $sudo make install
[02888af]20
[46df1bc]21   (Note: If you ever run into the OOOPS message when installing Yap,
22   manually clear out all traces of Yap from your /usr/local especially
23   /usr/local/share)
[671c065]24
[d7abe40]25
[137b55f]26Download strongswan-4.6.4 from strongswan.org:
[46df1bc]27   http://download.strongswan.org/strongswan-4.6.4.tar.bz2
28
29   FreeBSD users: add --enable-kernel-pfkey --enable-kernel-pfroute
30       --disable-kernel-netlink --disable-tools --disable-scripts
31       --disable-pluto --with-group=wheel to strongswan ./configure
32
33   Linux users: add --disable-gmp --enable-openssl to strongswan
34       ./configure to avoid long credential creation times. The entropy
35       sources libstrongswan uses by default gather entropy slowly on
36       Linux.  These flags allow it to gather entropy from the same
37       sources as openssl, which is noticeably faster. The internal
38       strongswan libraries and plugins are installed in
39       /usr/local/lib/ipsec by default unless
40       --with-ipseclibdir and --with-plugindir are set otherwise.
41
[2e9455f]42   Mac OS X users: (Victor) add
43       --enable-kernel-pfkey --enable-kernel-pfroute
44       --disable-kernel-netlink --disable-tools --disable-scripts                            --disable-pluto --with-group=wheel
45       and also prepend with following if applicable,
46       env CPPFLAGS="-I/opt/local/include" LDFLAGS="-L/opt/local/lib"
47
[4f40c3e]48   $tar xjvf strongswan-4.6.4.tar.bz2
49   $cd strongswan-4.6.4
50   $# see note above about configure flags
51   $./configure --enable-monolithic
52   $cd src/libstrongswan
53   $make && sudo make install
[46df1bc]54   
55   Be sure to make note of the directory into which you've untarred
56   strongswan-4.6.4.tar.bz2. You will use this in the next step.
[02888af]57
[2e9455f]58
[02888af]59BUILDING LIBABAC
60
[46df1bc]61   FreeBSD users will need to install flex-2.5.35 or greater from
[2e9455f]62       ports and add
63       --with-extra-includes=/usr/local/include
64       --with-flex=/usr/local/bin/flex, adjust as needed
65       on ./configure line in addition to --with-strongswan=...
66
67   MAC OS X (victor) users needs to add these flags
68       CFLAGS="-I/opt/local/include" CXXFLAGS="-I/opt/local/include"
69       CPPFLAGS="-I/opt/local/include" LDFLAGS="-L/opt/local/lib"
70       and --with-flex=/usr/bin/flex, adjust as needed
[46df1bc]71
[4f40c3e]72   $STRONGSWAN_SRC_DIR=path/to/strongswan-4.6.4
73   $STRONGSWAN_LIB_DIR=/usr/local/lib/ipsec
[2e9455f]74   $./autogen.sh
[4f40c3e]75   $./configure --with-strongswan=$STRONGSWAN_SRC_DIR
[46df1bc]76                 --with-strongswan-ld-path=$STRONSWAN_LIB_DIR
[4f40c3e]77   $make
78   $sudo make install
[b84753b]79
[43478b1]80
Note: See TracBrowser for help on using the repository browser.