OpenXACML Status

[Chad La Joie]

First of all, a good implementation of a PDP (or really any rules engine
that handles arbitrarily complex rules) is *not* a simple thing.  Or
perhaps I should say, it's not easy to develop one that isn't glacially
slow.

I would therefore, *strongly* encourage you to participate in the
HERAS[1] project and work on their codebase.  I used it years ago and
performance was decent as they had already been through a couple
evaluation optimization phases.  That said, there is still a lot more
that could be done both to increase performance and to improve
flexibility/extensibility.

[1] http://herasaf.org/

On 5/18/12 11:16 AM, Nick Duan wrote:
> Is there any interest from the Shiv Dev community to start/re-start the
> OpenXACML project?  I was involved in a project that used Sun's XACML engine
> and found it wasn't very convenient since Sun's XACML was developed a while
> ago prior to JDK 1.4.  In addition, it has been brought up to date with the
> XACML 3.0 standard.  I haven't found any good open source XACML engine that
> support 3.0.
> 
> So in our next project, we are planning to rewrite Sun's XACML using the
> latest OpenSAML library.  I am not sure what the effort/benefits of rewrite
> vs design from scratch.  But on the surface, it seems a good short-cut since
> many of the policy eval algorithms can be kept as they were.  If anyone has
> any good ideas or is interested in helping, I'd be happy to know.   I would
> also like to ask what would be the proper way to contribute the code back to
> the Shib community...
> 
> Thanks!
> 
> Nick  
> 
> -----Original Message-----
> From: dev-bounces at shibboleth.net [mailto:dev-bounces at shibboleth.net] On
> Behalf Of Nick Duan
> Sent: Thursday, April 05, 2012 1:02 PM
> To: 'Shib Dev'
> Subject: OpenXACML Status
> 
> Could anyone provide some info on the  status of OpenXACML?  I saw that the
> web site openxacml.org is up, but without any info.  Is this an official
> Internet2 project?
> 
> Thanks a lot!
> 
> Nick
> 
> 
> --
> To unsubscribe from this list send an email to
> dev-unsubscribe at shibboleth.net
> 
> --
> To unsubscribe from this list send an email to dev-unsubscribe at shibboleth.net