ARGUS-EES v.0.0.10

Release Notes

This is the initial release of the Execution Environment Service (EES).

The role of the EES is to ensure that an appropriate site-specific execution environment is procured based on the site-agnostic obligations and attributes it receives as input in the form of SAML2-XACML2 requests. It runs as a standalone service, responding to requests from a Policy Enforcement Point (PEP) which have been augmented with information from a Policy Decision Point (PDP).

From the outside, the EES can be viewed as an obligation transformer; for example it can be used to transform a site-agnostic obligation for a local account mapping to a site-specific obligation for on-demand virtual machine deployment.

To integrate the EES with an existing Argus installation, a separate component called the EES Obligation Handler should be configured in the PEP daemon. For more details regarding integration in Argus, please see the documentation for this component. The EES itself ships with a pre-configured transformer plug-in which extracts PDP data from the SAML2-XACML2 environment attributes. This plug-in is not required when PDP data is not transmitted to the EES.

The EES Obligation Handler is tested with the Argus 1.3 PEPd and performs a network call-out to the EES service.

List of RFCs

Documentation

 

• Functional Description (Preamble, Section 2)
• Service Reference Card (Preamble)
• Man pages/Online Help (Preamble)
• Software Design Description (Section 3)
• API Documentation (Section 4,5)
• System Administrator Guide

Artefacts

Binary
ees-pepd-oh-0.0.4-1.sl5.noarch
ees-0.0.10-2.sl5.x86_64
saml2-xacml2-c-lib-1.0.1-1.sl5.x86_64