Changes between Version 14 and Version 15 of FeddABAC

Timestamp:

Apr 9, 2012 3:01:10 PM (13 years ago)

Author:

faber

Comment:

--

FeddABAC

@@ -102 +102 @@
     The key for signing attributes.  It should be a pem file with an RSA key in it.  This can be omitted if {{{--cert}}} specifies a combination file.
   {{{--dir=}}}''dir''::
-    The output directory for the authorizer.
+    The output directory for the authorizer.   (This must be an absolute pathname).
+
   {{{--make_dir}}}::
     If given, make the output directory.
@@ -125 +126 @@
     The key for signing attributes.  It should be a pem file with an RSA key in it.  This can be omitted if {{{--cert}}} specifies a combination file.
   {{{--dir=}}}''dir''::
-    The output directory for the authorizer.
+    The output directory for the authorizer.   (This must be an absolute pathname).
   {{{--type=}}}''type''::
     The type of access controller used by the [FeddConfig#AccessOptions access_type] configuration directive.  Used to parse the various formats of the old accessDB.
@@ -145 +146 @@
 If {{{--file}}} is not given, the [FeddDatabases#AccessComponentAccessDB accessDB] to convert must follow.
 
+=== import_abac_creds.py ===
+
+The import_abac_creds.py program adds ABAC credential held in X.509 certificates directly to an ABAC authorizer used by fedd.  This authorizer is created by either [wiki:FeddABAC#fedd_to_abac.py fedd_to_abac.py] or [wiki:FeddABAC#access_to_abac.py access_to_abac.py].  The command takes an argument of the form:
+
+  {{{--dir=}}}''dir''::
+    The output directory for the authorizer.  (This must be an absolute pathname).
+
+The remaining parameters are a list of files containing the certificates to add.  These can be identity or attribute certificates.  To add an attribute certificate signed by issuer.pem and contained in attr.der to an authroizer in {{{/usr/local/etc/fedd/abac}}} the command is:
+
+{{{
+$ import_abac_creds.py --dir /usr/local/etc/fedd/abac issuer.pem attr.der
+}}}
+
+You can confirm the addition of the certificates using [wiki:FeddABAC#dump_abac_authorizer.py dump_abac_authorizer.py].
+
 == User Credentials ==