Does OpenSAML support profile of XACML 2.0?

[Yang, Gang CTR (US)]

That's how I felt, too, when I went to Sun's website. Couple of others just in case someone else is also looking for this info:

JBossXACML (PicketBox XACML): https://community.jboss.org/wiki/PicketBoxXACMLJBossXACML
Enterprise Java XACML: http://code.google.com/p/enterprise-java-xacml/ - from Google?

Gang
________________________________________
From: dev-bounces at shibboleth.net [dev-bounces at shibboleth.net] on behalf of Chad La Joie [lajoie at itumi.biz]
Sent: Monday, March 05, 2012 2:56 PM
To: Shib Dev
Subject: Re: Does OpenSAML support profile of XACML 2.0?

It's also broken, not XACML compliant, and hasn't been maintained in many years.

On Mon, Mar 5, 2012 at 14:08, Nick Duan <nduan at verizon.net> wrote:
> Sun's XACML is the most popular one. It should be easy to google it out.  It
> is not based on OpenSAML APIs, though.
>
> Nick
>
> -----Original Message-----
> From: dev-bounces at shibboleth.net [mailto:dev-bounces at shibboleth.net] On
> Behalf Of Yang, Gang CTR (US)
> Sent: Monday, March 05, 2012 1:41 PM
> To: Shib Dev
> Subject: RE: Does OpenSAML support profile of XACML 2.0?
>
> Got it. Thanks! I wasn't expecting any PDP functions, but that is what I'm
> looking to do though, hopefuly with the help of OpenSAML lib. Would
> appreciate if anyone knows and can recommend an existing open source
> implementation of XACML.
>
> Gang
> ________________________________________
> From: dev-bounces at shibboleth.net [dev-bounces at shibboleth.net] on behalf of
> Chad La Joie [lajoie at itumi.biz]
> Sent: Monday, March 05, 2012 12:31 PM
> To: Shib Dev
> Subject: Re: Does OpenSAML support profile of XACML 2.0?
>
> Sorry, binding as in XML binding.  You can use OpenSAML to generate,
> or read, XACML messages.  It does not, however, have any support for
> evaluating policies.
>
> On Mon, Mar 5, 2012 at 13:22, Yang, Gang CTR (US)
> <gang.yang.ctr at mail.mil> wrote:
>> Thanks for the reply, Chad. But I'm not sure I understand what you mean by
> "binding support". Did you mean the SAML binding, as SOAP or HTTP POST
> binding? Doesn't supporting the profile of  XACML 2.0 involve extending the
> assertion to include the extra statements and extending the protocol to
> support the extra queries?
>>
>> Gang
>> ________________________________________
>> From: dev-bounces at shibboleth.net [dev-bounces at shibboleth.net] on behalf of
> Chad La Joie [lajoie at itumi.biz]
>> Sent: Monday, March 05, 2012 11:18 AM
>> To: Shib Dev
>> Subject: Re: Does OpenSAML support profile of XACML 2.0?
>>
>> It has binding support for it, yes.
>>
>> On Mon, Mar 5, 2012 at 10:40, Yang, Gang CTR (US)
>> <gang.yang.ctr at mail.mil> wrote:
>>> Does OpenSAML support the profile of XACML 2.0 with the assertion
> extension?
>>
>>
>> --
>> Chad La Joie
>> www.itumi.biz
>> trusted identities, delivered
>> --
>> To unsubscribe from this list send an email to
> dev-unsubscribe at shibboleth.net
>> --
>> To unsubscribe from this list send an email to
> dev-unsubscribe at shibboleth.net
>
>
>
> --
> Chad La Joie
> www.itumi.biz
> trusted identities, delivered
> --
> To unsubscribe from this list send an email to
> dev-unsubscribe at shibboleth.net
> --
> To unsubscribe from this list send an email to
> dev-unsubscribe at shibboleth.net
>
> --
> To unsubscribe from this list send an email to dev-unsubscribe at shibboleth.net



--
Chad La Joie
www.itumi.biz
trusted identities, delivered
--
To unsubscribe from this list send an email to dev-unsubscribe at shibboleth.net