2015-10-14 59 views
1

我是WSO2 IS的用戶, 我需要在我的WSO2 IS中添加自定義RuleCombining算法。 我使用balana的這個example,並且當我創建this WSO2 IS中的策略時,我獲得了此錯誤:不支持的權利策略。政策不能被解析,這是WSO2的日誌:wso2中的XACML自定義RuleCombining算法

ERROR {org.wso2.carbon.identity.entitlement.pap.PAPPolicyReader} - Error while parsing the policy org.wso2.balana.ParsingException: Error parsing combining algorithm in Policy 
Caused by: org.wso2.balana.UnknownIdentifierException: unknown combining algId: urn:oasis:names:tc:xacml:3.0:rule-combining-algorithm:highest-effect 
     at org.wso2.balana.combine.BaseCombiningAlgFactory.createAlgorithm(BaseCombiningAlgFactory.java:138) 
     at org.wso2.balana.AbstractPolicy.<init>(AbstractPolicy.java:237) 

編輯:

謝謝你的答案大衛,

在同一個示例頁面,我們可以讀我們可以擴展WSO2自定義功能,算法和數據類型IS,添加balana配置文件:

However, If you want to ask WSO2 Identity Server to initialize the Balana by reading configuration file. You can do it by creating a new configuration file called 「balana-config.xml」 under the /repository/conf/security directory. As an example, Say you want to add new rule combining algorithm to work with WSO2 Identity Server entitlement engine. Then you can follow same way that is configuring it with Balana. Please refer this blog post for more details. However I would like to summarize the step to follow.

但是船尾呃遵循這些步驟似乎並不奏效。

在這個問題上的任何其他幫助將不勝感激。

我正在考慮將公理化看作XACML引擎,但它似乎很難獲得用於測試或啓動目的的版本。你能給我一些關於這個問題的信息嗎?

+0

請求https://support.axiomatics.com賬戶 –

回答

0

用定製合併算法來擴展WSO2 IS是不可能的。您鏈接到的狀態:

WSO2 Identity Server does not deal with those Because most of the applications use standard set of functions, attribute and combining algorithms that is defined in the XACML specification. Therefore, by default, WSO2 Identity Server initializes the Balana instance with default standard configuration.

如果您想要使用組合算法,請改爲使用Axiomatics Policy Server

附註:爲什麼你想要一個組合算法?你應該嘗試堅持標準的組合算法。 urn:oasis:names:tc:xacml:3.0:rule-combining-algorithm:highest-effect是做什麼的?你也不能爲你的組合算法使用OASIS命名空間。

+0

謝謝你的回答David, – Miguel

+0

@Miguel我的榮幸。不要忘記接受,如果它是正確的。另外,您定製梳子的基本原理是什麼。 ALGO?你想用它做什麼? –