Changeset 7361 for TI12-security/trunk/NDGSecurity/python/ndg_security_test/ndg/security/test

Timestamp:

25/08/10 11:03:04 (11 years ago)

Author:

pjkersha

Message:

Incomplete - task 2: XACML-Security Integration

• working caching with ndg.security.test.integration.full_system integration test. Caching works at the app, caching authz decisions but also at the PIP inside the authorisation service, caching Attribute Authority query results.
• TODO: make PEP use two stage PDP, first lightweight PDP filters out CSS and graphics requests to avoid overhead of network call to the authorisation service, second stage is callout to authorisation service as already in place.

File:

• TI12-security/trunk/NDGSecurity/python/ndg_security_test/ndg/security/test/integration/full_system/securityservices.ini (modified) (1 diff)

TI12-security/trunk/NDGSecurity/python/ndg_security_test/ndg/security/test/integration/full_system/securityservices.ini

@@ -444 +444 @@
 # on behalf of the PDP onwards to the PIP
 
+# The PIP can cache assertions retrieved from Attribute Authority calls to
+# optimise performance.  Set this flag to True/False to enable/disable caching
+# respectively.  If this setting is omitted it defaults to True
+authz.ctx_handler.pip.cacheSessions = True
+
+# Set the directory for cached information to be stored.  This options is 
+# ignored if 'cacheSessions' is set to False.  If this setting is omitted, then
+# sessions will be cached in memory only.  If the service is stopped all cached
+# information would be lost
+authz.ctx_handler.pip.sessionCacheDataDir = %(here)s/pip-session-cache
+
 # 
 # Attribute ID -> Attribute Authority mapping file.  The PIP, on receipt of a