Server
- The structure of the XACML policies changed to eliminate the restriction to have only one role enabled at the time for an user.
- Added more performance measurements to be retrieved remotely by Nagios
- AVG_RATE_NEW_CONN Ask the average rate of connection requests received for AM authorization
- AVG_RATE_REQ_PROC Ask the average rate of authorization requests processed successfully
- AVG_RATE_REQ_NOT_PROC Ask the average rate of authorization requests processed unsuccessfully
- PEAK_RATE_NEW_CONN Ask the peak rate of connection requests received for AM authorization
- PEAK_RATE_REQ_PROC Ask the peak rate of authorization requests processed successfully
- PEAK_RATE_REQ_NOT_PROC Ask the peak rate of authorization requests processed unsuccessfully
- Bug fix: the result of a LDAP search is compared case insensitive with the search base DN
- Added an authorization logger module to log to files all the authorization requests with their responses
Client C++ API
The environment section from the XACML request has been removed because the date and time information is not used by the server, but the XML decoding of date/time affects the server performance.
Tools
The AccessManagerServerRemoteController tool updated to be used as a Nagios plugin.