Commander is a web application that interface with Fortress and OpenLDAP.

What technologies are in use?

Commander was built using established Open Source technologies including Apache Wicket (Web UI framework), Spring Framework (glue), Maven (dependencies) and runs inside any reasonably compliant Java Servlets container. Access control decisions are enforced using Sentry which itself uses declarative Java EE Security and Spring Security policy hooks that are wired to connect back to the Fortress RBAC component. Fine-grained access control decisions are enforced using Fortress ARBAC delegated access management. Commander server-side is a Java Web program artifact and is wholly dependent on Fortress but also needs a V3 compliant LDAP server like OpenLDAP. For more information on installing and setting up OpenLDAP check out Fortress Quickstart

What can Commander do?

Contained within this application are Web pages to perform ANSI RBAC administration along with IETF password policies and viewing the security audit trail and history of changes.

What are the conditions of use?

This software development package is open source, thus free to use and distribute via the BSD 3-Clause License. It was developed and tested on open systems like Ubuntu and Centos and was helped along by the following open source products:

  1. The OpenLDAP Project
  2. The Apache Software Foundation
  3. UnboundID
  4. The Eigenbase Project
  5. Ehcache