New Release Announcement

We are pleased to announce the availability of a new reference implementation of GAA-API (Generic Authorization and Access control Application Programming Interface, GAA-API v0.7). This code is provided as an academic contribution for joint exchange. It is experimental and is provided ``as is''.

Applications invoke GAA-API functions to check authorization against an authorization model. The API functions obtain policies from local files, distributed authorization servers, and from credentials provided by the user. The functions combine local and distributed authorization information under a single API based on the requirements of the application and applicable policies, and request credentials if necessary.

A module is provided to support a simple policy language called, Extended Access Control Lists (EACL) that is designed to describe user-level authorization policy. The GAA-API provides a general-purpose execution environment in which EACLs are evaluated. EACL is one of the possible policy languages supported by the GAA-API. The underlying architecture of the GAA-API allows different policy languages to co-exist in one execution environment.

Code Distribution

• GAA-API's Code & Documentation

• Apache Server's Integration with GAA-API

• IPSec's Integration with GAA-API

• SSH's Integration with GAA-API will be soon available!

GAA-API Latest Code [GZIP] gaa-api.tar.gz (July 28, 2003)

Latest Changes on GAA-API [TXT] CHANGES (Dec 14, 2001)

Apache Server Integration with GAA-API

GAA-Apache2 (Based On: httpd-2.0.47)

Latest GAA-Apache2 Package[GZIP]: gaa-httpd-2.0.47.tar.gz (Aug 15, 2003)

Detailed User Manual [PDF]: GAA-Apache-Manual.pdf (Sep 1, 2003)

All Changes For GAA-Apache2

GAA-Apache2 performance Evaluation

A Brief Manual For GAA-Apache2 [Doc]: Brief-Manual.doc (Sep 25, 2002)

Apache Server's Official Site: www.apache.org

GAA-Apache1 (Based On: apache-1.3.23)

Original Apache Release (version 1.3.23)

Source Code [GZIP]: apache_1.3.23.tar.gz

MD5 Signature: apache_1.3.23.tar.gz.md5

Latest GAA-Apache1 Package [GZIP]: gaa-apache-latest.tar.gz (June 26, 2002)

Major Changes to Apache Code

• Main Body of GAA's Access Control Process mod_access.c ($APACHE_SRC/modules/standard/)

• Callback Functions For Host Condition libgaa_host.c ($APACHE_SRC/gaa-api/gaa_callbacks/gaa_simple/):

• Callback Functions For Time Condition libgaa_time.c ($APACHE_SRC/gaa-api/gaa_callbacks/gaa_simple/):

• Callback Functions For Method Condition libgaa_method.c ($APACHE_SRC/gaa-api/gaa_callbacks/gaa_simple/):

• Auxiliary Library For Conditions Evaluation cond_eval.c cond_eval.h ($APACHE_SRC/gaa-api/gaa_callbacks/gaa_simple/):

* Based On Linux's IPSec implementation: FreeS/WAN-1.91

FreeS/WAN's Official Site: www.freeswan.org

Original FreeS/WAN Release (version 1.91) Source Code [GZIP]: freeswan-1.97.tar.gz

Latest GAA-FreeS/WAN Package [GZIP]: gaa-freeswan-latest.tar.gz (June 26, 2002)

Manual: How to Use GAA-API & IPSec Integration (June 17, 2002)

Latest Freeswan Configuration File [Plain Text]: ipsec.conf ipsec.secrets.left ipsec.secrets.right

GAA-API Hompage | Documentation & Papers | Software Distribution | FAQ