Does OpenSAML support profile of XACML 2.0?

[Brad Cox]

Sun wrote the XACML interpreter that everyone uses. It interprets a core
tree that JAXB builds from the XACML2 schema.

I have an alternative approach based on compilation not interpreting. The
Xacml2.0 version started from JAXB but I eventually converted it to
OpenSAML. The XACML3.0 version is still based on JAXB since OpenSAML
doesn't support XACML3.0.

PDPs based on compiled XACML are available on forge.mil under the name
GOSAC-N along with working compilers (not sure about XACML3.0; possibly
removed at the last minute). The compiler sources are NOT included;
proprietary for now. Some early details are at http://bradjcox.blogspot.com.

On Mon, Mar 5, 2012 at 1:40 PM, Yang, Gang CTR (US)
<gang.yang.ctr at mail.mil>wrote:

> Got it. Thanks! I wasn't expecting any PDP functions, but that is what I'm
> looking to do though, hopefuly with the help of OpenSAML lib. Would
> appreciate if anyone knows and can recommend an existing open source
> implementation of XACML.
>
> Gang
> ________________________________________
> From: dev-bounces at shibboleth.net [dev-bounces at shibboleth.net] on behalf
> of Chad La Joie [lajoie at itumi.biz]
> Sent: Monday, March 05, 2012 12:31 PM
> To: Shib Dev
> Subject: Re: Does OpenSAML support profile of XACML 2.0?
>
> Sorry, binding as in XML binding.  You can use OpenSAML to generate,
> or read, XACML messages.  It does not, however, have any support for
> evaluating policies.
>
> On Mon, Mar 5, 2012 at 13:22, Yang, Gang CTR (US)
> <gang.yang.ctr at mail.mil> wrote:
> > Thanks for the reply, Chad. But I'm not sure I understand what you mean
> by "binding support". Did you mean the SAML binding, as SOAP or HTTP POST
> binding? Doesn't supporting the profile of  XACML 2.0 involve extending the
> assertion to include the extra statements and extending the protocol to
> support the extra queries?
> >
> > Gang
> > ________________________________________
> > From: dev-bounces at shibboleth.net [dev-bounces at shibboleth.net] on behalf
> of Chad La Joie [lajoie at itumi.biz]
> > Sent: Monday, March 05, 2012 11:18 AM
> > To: Shib Dev
> > Subject: Re: Does OpenSAML support profile of XACML 2.0?
> >
> > It has binding support for it, yes.
> >
> > On Mon, Mar 5, 2012 at 10:40, Yang, Gang CTR (US)
> > <gang.yang.ctr at mail.mil> wrote:
> >> Does OpenSAML support the profile of XACML 2.0 with the assertion
> extension?
> >
> >
> > --
> > Chad La Joie
> > www.itumi.biz
> > trusted identities, delivered
> > --
> > To unsubscribe from this list send an email to
> dev-unsubscribe at shibboleth.net
> > --
> > To unsubscribe from this list send an email to
> dev-unsubscribe at shibboleth.net
>
>
>
> --
> Chad La Joie
> www.itumi.biz
> trusted identities, delivered
> --
> To unsubscribe from this list send an email to
> dev-unsubscribe at shibboleth.net
> --
> To unsubscribe from this list send an email to
> dev-unsubscribe at shibboleth.net
>



-- 
Cell: 703-594-1883
Blog: http://bradjcox.blogspot.com
Web: http://virtualschool.edu
Manassas VA 20111
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/dev/attachments/20120306/654f8b1a/attachment.html