Argus Configuration

From Gcube Wiki
Revision as of 12:53, 29 July 2011 by Ciro.formisano (Talk | contribs) (Created page with 'In gCube Secure Infratructure only the PAP and PDP elements of Argus are needed. The configuration steps are described in Argus Site<ref name="Argus_Site">https://twiki.cern.ch/t…')

(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
Jump to: navigation, search

In gCube Secure Infratructure only the PAP and PDP elements of Argus are needed. The configuration steps are described in Argus Site[1]. The only special configuration needed enables Role Based Access Control: it concerns the first two sections of file attribute-mappings.ini in PAP configuration folder: 

id = subject
subject.xacml-id = urn:oasis:names:tc:xacml:2.0:subject:role
subject.xacml-datatype = http://www.w3.org/2001/XMLSchema#anyURI
subject.xacml-target-element = subject
subject.xacml-match-function = urn:oasis:names:tc:xacml:1.0:function:anyURI-equal
 
id = subject-issuer
subject-issuer.xacml-id = http://authz-interop.org/xacml/subject/subject-x509-issuer
subject-issuer.xacml-datatype = http://www.w3.org/2001/XMLSchema#string
subject-issuer.xacml-target-element = subject
subject-issuer.xacml-match-function = urn:oasis:names:tc:xacml:1.0:function:string-equal

The other sections of the file are the default ones.


References

  1. ↑ https://twiki.cern.ch/twiki/bin/view/EGEE/AuthorizationFramework
Retrieved from "https://wiki.gcube-system.org/index.php?title=Argus_Configuration&oldid=12326"