Janus

Delivered-To: mailing list directory-cvs@incubator.apache.org Received: (qmail 39162 invoked by uid 99); 3 Jul 2004 04:07:03 -0000 X-ASF-Spam-Status: No, hits=0.5 required=10.0 tests=ALL_TRUSTED,NO_REAL_NAME X-Spam-Check-By: apache.org Received: from [209.237.227.194] (HELO minotaur.apache.org) (209.237.227.194) by apache.org (qpsmtpd/0.27.1) with SMTP; Fri, 02 Jul 2004 21:07:03 -0700 Received: (qmail 87950 invoked by uid 65534); 3 Jul 2004 04:06:44 -0000 Date: 3 Jul 2004 04:06:44 -0000 Message-ID: <20040703040644.87945.qmail@minotaur.apache.org> From: vtence@apache.org To: directory-cvs@incubator.apache.org Subject: svn commit: rev 22496 - incubator/directory/janus/trunk/xdocs X-Virus-Checked: Checked X-Spam-Rating: minotaur-2.apache.org 1.6.2 0/1000/N Author: vtence Date: Fri Jul 2 21:06:43 2004 New Revision: 22496 Added: incubator/directory/janus/trunk/xdocs/navigation.xml incubator/directory/janus/trunk/xdocs/news.xml incubator/directory/janus/trunk/xdocs/security.xml Log: Janus web site up! Added: incubator/directory/janus/trunk/xdocs/navigation.xml ============================================================================== --- (empty file) +++ incubator/directory/janus/trunk/xdocs/navigation.xml Fri Jul 2 21:06:43 2004 @@ -0,0 +1,28 @@ + + + + Janus + + + + + + + + + + + + + + + + + + + + + + + + Added: incubator/directory/janus/trunk/xdocs/news.xml ============================================================================== --- (empty file) +++ incubator/directory/janus/trunk/xdocs/news.xml Fri Jul 2 21:06:43 2004 @@ -0,0 +1,53 @@ + + + + Vincent Tence + News and Status + + + + +

+ + + +

+ We're currently focusing on bringing the documentation up-to-date. This includes reworking the web site, + updating Jira and producing draft documentation on the Wiki. +

+ + + +

+ Work has begun in the Janus sandbox to rewrite the authorization stuff. + Directions can be found on the Wiki. +

+ +

+ + + +

+ The authentication apis have been temporarly frozen. They look stable enough for now. A username-password + implementation is available along with an XML configuration mechanism. +

+ + + +

+ The whole authorization mechanism is being rewritten in Janus sandbox with a rule-based approach. + We believe this will give us great flexibility to implement a broad range of security policy requirements. +

+ + + +

+ The accounting part is our lowest priority at the moment. We don't expect to tackle this one until + authentication and authorization parts are usable. +

+ +

+ + Added: incubator/directory/janus/trunk/xdocs/security.xml ============================================================================== --- (empty file) +++ incubator/directory/janus/trunk/xdocs/security.xml Fri Jul 2 21:06:43 2004 @@ -0,0 +1,58 @@ + + + + Vincent Tence + Security + + + +

+ Security refers to ways of protecting sensitive resources from unauthorized access. + This is usually done with a combination of authentication - to prove an individual's identity -, + and authorization - to grant or deny an operation on a resource. + Most security measures also involves some form of cryptography: secure digests to preserve data integrity, + data encryption mechanisms to protect data access from individuals without proper authorization + and digital signatures to prove authenticity of some sort. +

+ + +

+ Authentication is the process of validating an individual's identity. It's about finding out + if an individual is who he/she claims to be. + + This is done by presenting some proof of identity, which usually can take the form of username/password, + digital signature, etc. The idea is that each individual can be recognized by unique information that + differentiates him or her from other individuals. +

+ + + +

+ Authorization is about, once a user has been authenticated, determining if + hs/she is authorized to do something. A successful authorization results in the user + being granted the permission to perform an operation on a resource. A failed authorization will + result in the denial of the same permission. +

+ + + +

+ Accounting is the concern of collecting resource access/consumption data for the purposes of auditing. +

+ +

+ + \ No newline at end of file