DACS Docs - Technical Documentation

- a distributed access control system
[About DACS // About the Manual Pages // Key Concepts // Naming // The dacs Utility // Start-up Processing // Internals // Logging // Audit-Class Log Messages // Tracking User Activity]

- list, check, or re-index access control rules

- authentication check
[Enhancing SSH Security]

- authorization check
[Advantages // Identities // Objects // Rule Evaluation Context // An Example Application // Comparing dacscheck with dacs_acs]

- display configuration directives

- create DACS credentials and emit as a cookie

- acquire and manage DACS credentials

- Simple outgoing email agent

- DACS expression language shell and interpreter

- administer grid-based one-time passwords

- perform an HTTP/HTTPS request

- manage InfoCard accounts

- Configure a minimal DACS federation interactively

- generate encryption keys for DACS

- list jurisdictions

- manage DACS accounts

- create and administer rule links

- rule-based command scheduling
[Operation]

- administer hash-based one-time passwords
[PINs (Account Passwords) // One-Time Passwords (OTPs) // Accounts // Importing and Exporting OTP Accounts // XML Provisioning Format // KeyUriFormat Provisioning Format]

- rule-based document transformation
[Configuration]

- display version information

- access objects through the DACS virtual filestore

- an SSL/TLS client
[Server Identity Verification]

- Dynamic strings and vectors
[Byte Strings // Vectors]

- DACS access control rules
[Revoking Access and // URL Paths and Service Name Matching // Service Parameters // Constraints // ACL Files // ACL Naming // ACL Syntax // General Structure // Services // Rule Clause Processing // The Precondition Element // Expressions // ACL Rule Elements // The ACL Selection and Evaluation Algorithm]

- DACS configuration files and directives
[Locating dacs.conf and site.conf // Path Interpolation // File Format // The Default Section // The // Section Merging and Directive Evaluation // The undef() directive // Fatal errors // An example // Jurisdiction // The Effective Jurisdictional // Jurisdiction Selection by URI // Jurisdiction Selection by Jurisdiction Name // Jurisdiction Selection by Default // The Distinguishing URI // Directives // Evaluated Directives // Directive Categories // General Directives // The Auth Clause // The Roles Clause // The Transfer Clause // Advanced Techniques // Configuration Variables // Authentication and Roles]

- DACS expression language
[Expression Syntax // Comments // Basic Data Types // Variables and Namespaces // Variable Syntax // Variable Modifier Flags // Reserved Namespaces // Lists, Alists, and Arrays // Lists // Alists // Expression Grammar // Operators // Functions]

- DACS groups
[Role-Based Group Membership // Group Syntax and Semantics // DACS Metadata]

- Notice Acknowledgement Token specification
[Introduction // Purpose // Design Elements // Terminology // Notational Conventions // Summary // The Notice Acknowlegement Token // NAT Syntax // NAT Names // NAT Reserved Attributes // URI Matching // Cryptographic Elements // Encoding for Transport // Implementation Notes // NAT HTTP Header Syntax // Multiple NATs // Resource Name Mapping // NAT Creation and Merging // Case Sensitivity // Server Autonomy // Minimal Implementation // Middleware Support]

- the DACS virtual filestore
[The vfs_uri and Item Types // Virtual Filestore Details]

- DACS installation guide
[Trying DACS // Upgrading DACS // Installation Layout Overview // Installing DACS // Tip // Initial Testing // Build Options // Configure Options // Standard build and install options // Feature selection options // Third-party support options]

- DACS Java support

- DACS Quick Start Tutorial
[Step 1: Install required third-party packages // Step 2: Install and configure Apache // Step 3: Build and install DACS // Step 4: DACS-enable Apache // Step 5: Do basic DACS configuration // Step 6: Do basic Apache configuration for DACS // Step 7: Test basic DACS services // Step 8: Try DACS authentication // Step 9: DACS-wrapping a web service // Step 10: What's next? // Step 11: Clean up // Troubleshooting]

- DACS README
[DACS At a Glance // Supported Platforms // Other Platforms // Warnings // Release Information // Roadmap // Security // Add-on Features // Administration // Related Software // The DACS Java Library (DJL) // The FedAdmin Web Application // Support // Known Problems // Bugs, Suggestions, and Feedback]

- Convert an Apache identity to a DACS identity
[Web Service Arguments]

- CGI parameter parsing utility

- DACS access control service
[Module-to-ACS Protocol // Credentials // Rlinks // Rlink Details // HTTP Authentication // Authorization Caching // XML Output // Variables Available To Rules // Standard Environment Variables // Exported DACS Variables // Exported Environment Variables // About Servlets // The DACS_ACS Argument // The DACS-Status-Line header // The DACS_APPROVAL environment variable]

- DACS administration service
[Web Service Arguments // Resources and Methods]

- DACS delegated authentication service
[Web Service Arguments // Operation // Local Mode // Alien Mode]

- transfer credentials between federations
[The Identity Transfer Protocol // Overview // Protocol Operation // Implementation // Web Service Arguments // Presentation // Export // Token // Import]

- DACS authentication service
[Authentication // Names // Credentials and Cookies // Web Service Arguments // Auth Clause Directives // Initialization and the Auth Namespace // Authentication Clause Control Flow // Authenticating Using an Expression // Middleware Support // Authentication Modules // local_apache_authenticate // local_cas_authenticate // local_cert_authenticate // local_grid_authenticate // local_http_authenticate // Deprecated // local_ldap_authenticate // local_native_authenticate // local_ntlm_authenticate // local_pam_authenticate // local_passwd_authenticate // local_radius_authenticate // local_simple_authenticate // local_tgma_authenticate // local_token_authenticate // local_unix_authenticate // Roles // Roles Clause Directives // Roles Clause Control Flow // Roles Modules // local_roles // local_ldap_roles // local_unix_roles // Related Services]

- use an SSL client certificate to automatically obtain DACS credentials
[Web Service Arguments]

- display DACS configuration directives
[Web Service Arguments]

- display DACS credentials
[Web Service Arguments]

- simple error handling utility for DACS

- DACS group administration
[Web Service Arguments]

- Information Card administration
[Web Service Arguments]

- display information about DACS jurisdictions
[Web Service Arguments]

- create a managed Information Card
[Configuration // Web Service Arguments]

- WS-MetadataExchange responder for Information Cards
[Web Service Arguments]

- DACS notice presentation and acknowledgement handler
[Operation // Web Service Arguments // Middleware Support // Simple Mode // Secure Mode]

- manage private DACS passwords
[Web Service Arguments]

- CGI program that displays its environment
[Web Service Arguments]

- temporarily disable DACS credentials
[Web Service Arguments]

- DACS signout service
[Web Service Arguments]

- Secure Token Service for managed Information Cards
[Configuration // Web Service Arguments]

- manage DACS one-time password token accounts
[Web Service Arguments]

- rule-based document transformation
[Regions // Directive and Attribute Syntax // Negation // Recursion // Directives // Configuration // Web Service Arguments]

- minimal HTTP proxying
[Web Service Arguments // Operation]

- display DACS version information
[Web Service Arguments]

- access objects through the DACS virtual filestore
[Web Service Arguments]

- DACS web services
[Standard CGI Arguments for DACS Web Services]

- PAM transaction server