简体繁体 English

如何评估XACML政策

[英]How to evaluate an XACML Policy

原文 2013-08-15 07:07:56 4 2 authorization/ access-control/ policy/ wso2is/ xacml

Does anyone know the details about how to evaluate the XACML Policy? 有谁知道有关如何评估XACML策略的详细信息？ Actually, I've written one policy like the following, but when I tried to evaluate with Trylt tool, it always failed with the "Indeterminate". 实际上，我已经编写了一个类似以下的策略，但是当我尝试使用Trylt工具进行评估时，它始终会因“不确定”而失败。 This is my first time to write an XACML policy, I am not sure what's wrong with it? 这是我第一次编写XACML策略，我不确定它到底出了什么问题？ Could you do me a favor. 你可以帮我个忙吗。 Thanks a lot! 非常感谢！

And I used Trylt tool like the following to evaluate my policy like the following: Subject ="admin" 我使用了如下的Trylt工具来评估我的策略，如下所示：Subject =“ admin”

It always failed like:(It happends as well when using the sample policy on IS) The error msg is "Indeterminate" 它总是失败，例如：（在IS上使用示例策略时也会发生）错误msg为“不确定”

My environment is: The version of IS is 4.1.0 我的环境是：IS的版本是4.1.0

2 个解决方案

When you created your policy's you enabled? 创建策略时，您启用了吗？ That error happens regularly when the IS can not associate the criteria provided in the tool Tray It with existing policies in the IS 当IS无法将工具托盘中提供的条件与IS中的现有策略相关联时，就会经常发生该错误

I recommend reading the following blog 我建议阅读以下博客

http://pushpalankajaya.blogspot.mx/2013/06/try-out-xacml-policies-with-wso2.html http://pushpalankajaya.blogspot.mx/2013/06/try-out-xacml-policies-with-wso2.html

I guess, it can be due to this [1]. 我猜可能是由于[1]。 New identity server has been release 4.5.0, i guess you could try out it. 新的身份服务器已发布4.5.0，我想您可以尝试一下。 This issue has been fixed on it [2] 此问题已解决[2]

[1] https://wso2.org/jira/browse/IDENTITY-1393 . [1] https://wso2.org/jira/browse/IDENTITY-1393 。 [2] http://xacmlinfo.org/2013/09/13/getting-start-with-wso2-identity-server-4-5-0/ [2] http://xacmlinfo.org/2013/09/13/getting-start-with-wso2-identity-server-4-5-0/