source: doc/INSTALL @ 2e9455f

mei_rt2
Last change on this file since 2e9455f was 2e9455f, checked in by Mei <mei@…>, 12 years ago

1) added namespace
2) tweak ?This,
3) allowing linking role/oset as constraining conditions
4) adding access_tests regression testing that uses GENI's access policy
5) added couple multi contexts regression tests
6) add compression/uncompression calls to abac_encode_string/abac_decode_string
(libstrongwan only allows 512 char for attribute rule storage)
7) add attribute_now option to creddy that takes a whole char string for attribute
rule

  • Property mode set to 100644
File size: 3.0 KB
Line 
1For Java installation instructions, see doc/java_install.
2
3Prior to building libabac
4   you may need to install flex, bison, and GNU readline library
5   you must install YAP and libstrongswan
6   Please check doc/dependencies for other software dependencies
7
8Download yap-6.2.2 from www.dcc.fc.up.pt
9   http://www.dcc.fc.up.pt/~vsc/Yap/yap-6.2.2.tar.gz
10
11   $patch -p0 -t -i yap6_2_2_patch_1
12   (Patching for FreeBSD or 64bits machines, patch file can be
13   found in libABAC's doc directory)
14
15   $./configure --enable-dynamic-loading --enable-use-malloc=yes
16   $make
17   $make library
18   $sudo make install_library
19   $sudo make install
20
21   (Note: If you ever run into the OOOPS message when installing Yap,
22   manually clear out all traces of Yap from your /usr/local especially
23   /usr/local/share)
24
25
26Download strongswan-4.6.4 from strongswan.org:
27   http://download.strongswan.org/strongswan-4.6.4.tar.bz2
28
29   FreeBSD users: add --enable-kernel-pfkey --enable-kernel-pfroute
30       --disable-kernel-netlink --disable-tools --disable-scripts
31       --disable-pluto --with-group=wheel to strongswan ./configure
32
33   Linux users: add --disable-gmp --enable-openssl to strongswan
34       ./configure to avoid long credential creation times. The entropy
35       sources libstrongswan uses by default gather entropy slowly on
36       Linux.  These flags allow it to gather entropy from the same
37       sources as openssl, which is noticeably faster. The internal
38       strongswan libraries and plugins are installed in
39       /usr/local/lib/ipsec by default unless
40       --with-ipseclibdir and --with-plugindir are set otherwise.
41
42   Mac OS X users: (Victor) add
43       --enable-kernel-pfkey --enable-kernel-pfroute
44       --disable-kernel-netlink --disable-tools --disable-scripts                            --disable-pluto --with-group=wheel
45       and also prepend with following if applicable,
46       env CPPFLAGS="-I/opt/local/include" LDFLAGS="-L/opt/local/lib"
47
48   $tar xjvf strongswan-4.6.4.tar.bz2
49   $cd strongswan-4.6.4
50   $# see note above about configure flags
51   $./configure --enable-monolithic
52   $cd src/libstrongswan
53   $make && sudo make install
54   
55   Be sure to make note of the directory into which you've untarred
56   strongswan-4.6.4.tar.bz2. You will use this in the next step.
57
58
59BUILDING LIBABAC
60
61   FreeBSD users will need to install flex-2.5.35 or greater from
62       ports and add
63       --with-extra-includes=/usr/local/include
64       --with-flex=/usr/local/bin/flex, adjust as needed
65       on ./configure line in addition to --with-strongswan=...
66
67   MAC OS X (victor) users needs to add these flags
68       CFLAGS="-I/opt/local/include" CXXFLAGS="-I/opt/local/include"
69       CPPFLAGS="-I/opt/local/include" LDFLAGS="-L/opt/local/lib"
70       and --with-flex=/usr/bin/flex, adjust as needed
71
72   $STRONGSWAN_SRC_DIR=path/to/strongswan-4.6.4
73   $STRONGSWAN_LIB_DIR=/usr/local/lib/ipsec
74   $./autogen.sh
75   $./configure --with-strongswan=$STRONGSWAN_SRC_DIR
76                 --with-strongswan-ld-path=$STRONSWAN_LIB_DIR
77   $make
78   $sudo make install
79
80
Note: See TracBrowser for help on using the repository browser.