blob: f2a9ddd914f48b9117f86fc9b99f189ceceb2ef5 [file] [log] [blame]
Title: Section XIII - Instructions to enable RBAC Accelerator Overlay in OpenLDAP
NavPrev: section-XII.html
NavPrevText: Section XII - Instructions to regression test EnMasse Policy server
NavUp: linux.html
NavUpText: Quickstart Linux - Table of contents
NavNext: section-XIV.html
NavNextText: Section XIV - More Utilities
Notice: Licensed to the Apache Software Foundation (ASF) under one
or more contributor license agreements. See the NOTICE file
distributed with this work for additional information
regarding copyright ownership. The ASF licenses this file
to you under the Apache License, Version 2.0 (the
"License"); you may not use this file except in compliance
with the License. You may obtain a copy of the License at
.
http://www.apache.org/licenses/LICENSE-2.0
.
Unless required by applicable law or agreed to in writing,
software distributed under the License is distributed on an
"AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
KIND, either express or implied. See the License for the
specific language governing permissions and limitations
under the License.
## Section XIII - Instructions to enable RBAC Accelerator Overlay in OpenLDAP and test Java-side bindings (optional)
### Step 1
Edit file named 'build.properties' and enable RBAC accelerator by adding:
rbac.accelerator=true
### Step 2
Save and exit the text file editor
### Step 3
Reinstall OpenLDAP by running the _init-slapd_ target described in [Section III: Instructions to run the Builder to Install OpenLDAP](section-III.html), configure and load with seed data
### Step 4
Load necessary test data for unit tests:
./b.sh admin -Dparam1=ldap/setup/RbacAcceleratorTestUsers.xml
### Step 5
Now you can run the rbac accelerator unit tests:
./b.sh test-accel
### Step 6
Verify the test-accel target completed with no ant or junit errors
### Step 7
Reload necessary regression test data by running the test-full target described in [Section IV: Instructions to regression test Fortress and OpenLDAP on target machine](section-IV.html)
### Step 8
Now you can run the rbac accelerator regression tests:
./b.sh test-accel-full
### Step 9
Verify the test-full-accel target completed with no ant or junit errors
### Step 10
Check out the javadoc for learning about APIs supported within the RBAC accelerator: [Fortress Accelerator Client](link...)
Note 1: The RBAC accelerator turns OpenLDAP into an RBAC Policy Decision Point (PDP) server. All state is maintained in OpenLDAP LMDB databases including session and audit trail.
Note 2: The slapd.conf file contains the mappings for the new database backends. You can view this data using any LDAP browser.
Note 3: Bindings for C and Python are being worked on and will be released soon.
Note 4: SessionPermissions will be in future release as required by ANSI RBAC (INCITS 359) Core functionality.