ApacheCon Session
Distributed Access Control using a Certificate Authority
Controlling access to an organisations networked systems is a complex problem, often made more difficult by systems being geograpically distributed. Centralised solutions offer an ease of administration but at the cost of adding a single point of failure to a critical resource. In an attempt to move away from this, the ASF has developed a solution with no central authority yet provides for secure, easily administered, extremely flexible access control. This session will describe the solution developed, covering its use of Certificate Authorities, attributes embedded in certificates, distributed administration and existing public key infrastructure.
Orientation: Technical
Level: Experienced
Categories: Case Study,New Technologies,Security
