集中授权服务？
有没有开源的集中授权服务可用？ 有很多集中身份验证信息的解决方案（例如：CAS 和 JOSSO)，但是授权呢信息？
有一些非常好的授权框架（例如： Spring Security（以前称为 Acegi）和 Seam 安全性< /a>），但似乎我必须将它们组合到单独的层或服务中。 换句话说，我不能很容易地独立运行它们。 对于 SOA，不仅集中身份验证，而且集中授权信息（即：角色、权限、规则等）似乎非常有价值。
有什么建议么？
Are there any open source centralized authorization services available? There are lots of solutions for centralizing the authentication information (eg: CAS and JOSSO), but what about the authorization information?
There are some really good authorization frameworks (eg: Spring Security (formerly Acegi) and Seam Security), but it seems that I have to composite these into individual tiers or services. In other words, I can't run them standalone very easily. With a SOA, it seems like it would be very valuable to centralize not just the authentication but the authorization information as well (ie: roles, permissions, rules, etc.).
Any suggestions?
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（3）
您正在寻找支持 XACML 的东西吗？ 如果是这样，您可以获得的最接近开源的是 OpenSSO 项目，其中包含您所寻求的部分内容。
Are you looking for something that supports XACML? If so, the closest to open source you can get is the OpenSSO project which has portions of what you seek.
公开可用的 Kerberos 实现提供了客户端服务授权以及客户端身份验证。
阅读使用 Kerberos 5红帽Linux。
The openly available Kerberos implementations provide Client Service Authorization as well as Client Authentication.
Read about Using Kerberos 5 on Red Hat Linux.
嗯，也许您可以使用 SSO 解决方案并创建一个返回所有授权信息（角色、权限、规则等）的服务，并使每个应用程序使用此服务来获取每个经过身份验证的用户授权信息。
Hum, maybe you can use a SSO solution and create a service which returns all the authorization information (roles, permissions, rules, etc) and make each application use this service to get each authenticated user authorization information.