Apache Fortress End-to-End Security Tutorial
The tutorial provides a how-to guide for applying end-to-end security enforcement across a sample Java Web environment using Java EE,...
Read articleBlog Category
configuration
Browse Symas blog posts filed under configuration.
37 posts
Back to all postsApache Fortress Role Engineering Tutorial
The goals of this tutorial are to Gain understanding of the Role Based Access Control (RBAC) standard Learn the repeatable steps of the...
Read articleApacheDS & Fortress QUICKSTART
As engineers, we are often encouraged to use the right tool for the job. Maybe that is because we tend to grow too attached to the...
Read articleOpenLDAP & Fortress QUICKSTART
Fortress and OpenLDAP go together like peanut butter and jelly. Either is good, but taken together, their flavors blend into something...
Read articleDROWN Vulnerability with Remediation
(http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0800) Network traffic encrypted using an RSA-based SSL certificate may be...
Read articleApache Fortress SAML Demo
The aim of this tutorial is to connect Apache Directory Fortress with Spring Security SAML and a common Identity Provider – SSO...
Read articleWhat Are Temporal Constraints?
DEFINED Ability to control when an entity activation occurs based on time and date criteria. Temporal constraints are typically applied...
Read articleWhat is Delegated Administration?
DEFINED The ability to control access on the security system itself. This control is exercised inside the policy administration...
Read articleWhat are Password Policies?
DEFINED A set of rules surrounding the content, quality and lifecycle of a password. WHAT ARE THEY FOR? Helps to safeguard the integrity...
Read articleThe Case for a Policy Decision Point inside the LDAP Server
WHY ON EARTH WOULD YOU DO THAT? We all understand that runtime characteristics change as processes get moved around the network. Having...
Read articleEnabling Java EE and Fortress Security inside an Apache Wicket Web App
INTRODUCTION The aim of this tutorial is to demonstrate how a simple wicket web app can be converted to use java EE and fortress security....
Read articleThe Seven Steps of Role Engineering
Role engineering takes us from a human readable policy syntax to what is loaded into an rbac engine and used by an application or system
Read article