Apache Fortress™

Access Control System written in Java

Apache Fortress uses an LDAP backend providing Java APIs and Web components for authentication, authorization, administration and review. What sets it apart from the others is rigid adherence to long-standing ANSI RBAC and IETF LDAPv3 standards.

Fortress News

Apache Fortress 3.0.0 Released posted on September 6th, 2023

The Apache Directory Project announces the release of Fortress - 3.0.0.

Included in 3.0.0:

  • Fortress Jakarta compatible
  • Fortress Web upgrade to Apache Wicket version 10
  • Fortress Rest upgrade to Apache CXF version 4
  • Use latest dependencies for Apache LDAP API, Spring v6, Log4j and more
  • Runs on Apache Tomcat 10
  • More info about Fortress v3 Jakarta Compatible

The Release notes:

Apache Fortress 2.0.8 Released posted on July 22nd, 2022

The Apache Directory Project announces the release of Fortress - 2.0.8.

The Release notes:

Apache Fortress 2.0.7 Released posted on Dec 12th, 2021

The Apache Directory Project announces the release of Fortress - 2.0.7.

The Release notes:

Apache Fortress 2.0.6 Released posted on July 15th, 2021

The Apache Directory Project announces the thirteenth release of Fortress - 2.0.6.

This release includes migration to Apache LDAP API 2.x, Apache Log4j2, and many other fixes and improvements.

The Release notes:

Apache Fortress 2.0.5 Released posted on May 26th, 2020

The Apache Directory Project announces the twelfth release of Fortress - 2.0.5.

This maintenance release contains the following bug fixes and enhancements:

Apache Fortress 2.0.4 Released posted on December 13th, 2019

The Apache Directory Project announces the eleventh release of Fortress - 2.0.4.

This maintenance release contains many bug fixes and enhancements.

Apache Fortress 2.0.3 Released posted on November 12th, 2018

The Apache Directory Project announces the tenth release of Fortress - 2.0.3.

This maintenance release contains two new Access Manager APIs, support of JSON and bug fixes.

The Release notes:

Trying Apache Fortress with ApacheDS and/or OpenLDAP Quickstarts is like having training wheels for LDAP:

Apache Fortress 2.0.2 Released posted on September 12th, 2018

The Apache Directory Project announces the ninth release of Fortress - 2.0.2.

This maintenance release contains enhanced coverage for Attribute-Based Access Control.

  • [FC-239] - Some additional methods to manage role constraints.

The Release notes:

Apache Fortress 2.0.1 Released posted on July 20th, 2018

The Apache Directory Project announces the eighth release of Fortress - 2.0.1.

New features include

  • [FC-108] - Unix RFC2307bis posixAccount (User) and posixGroup (Role) auxiliary object classes.
  • [FC-235] - Enforcement of arbitrary constraints during role activation with dynamic attributes like location, organization and account.

The Release notes have the complete list of 21 fixes and enchancements: 2.0.1 JIRA Release Notes

Apache Fortress 2.0.0 Released posted on June 26th, 2017

The Apache Directory Project announces the seventh release of Fortress - 2.0.0 GA. This major release requires Java version 8. It adds formal support of ApacheDS giving full IETF password policy coverage for both it and OpenLDAP. There are Docker images preconfigured with Apache DS & OpenLDAP for rapid deployment and testing.

Apache Fortress 2.0.0 Released posted on June 26th, 2017

The Apache Directory Project announces the seventh release of Fortress - 2.0.0 GA. This major release requires Java version 8. It adds formal support of ApacheDS giving full IETF password policy coverage for both it and OpenLDAP. There are Docker images preconfigured with Apache DS & OpenLDAP for rapid deployment and testing.

Apache Fortress 2.0.0 enhancements include:

  • Java 8 requirement
  • Usage of Apache LDAP API v1.0.0
  • FC-209 Missing object classes when create permission attribute and sets
  • FC-210 Programtically determine which methods have ARBAC checks
  • FC-211 Support ApacheDS password policies
  • FC-212 ApacheDS in Docker

The report pulled from JIRA: 2.0.0 resolved issues

Apache Fortress 2.0.0-RC2 Released posted on May 4th, 2017

The Apache Directory Project announces the sixth release of Fortress. This is a minor release, the second release candidate for a 2.0 GA and includes a move to require Java version 8. There are a number of other enhancements:

  • FC-201 jgrapht 1.0.0 requires Java 8
  • FC-202 dir-fortress-core-docker-test to use latest slapd install procs
  • FC-203 propmr modifiers

The complete list: 2.0.0-RC2 resolved issues

Apache Fortress 2.0.0-RC1 Released posted on November 7th, 2016

The Apache Directory Project announces the fifth release of Fortress. This major revision has a couple of changes that have broken backward compatibility with 1.x:

  • FC-183 Use Apache IANA Number of OID - The LDAP schema uses the Apache Directory’s IANA base number instead of the one from JoshuaTree. Requires updating existing fortress impls to upgrade schema using latest
  • FC-194 Change password representation from a char[] to a String. Applies to all methods using a password in the arguments. If using the fortress-realm, ensure the tomcat instance has the latest proxy jar also.

Some other major enhancements include:

  • FC-144 - Ability to assign groups to roles
  • FC-116 - Need the ability to get user specific attributes for fine grained access determinations
  • FC-181 - Multitenancy for Realm and Web

The complete list: 2.0.0-RC1 resolved issues

Apache Fortress 1.0.1 Released posted on July 22nd, 2016

The Apache Directory Project announces the fourth release of Fortress.

This maintenance release includes the following enhancements:

  • Fortress Core use of a non-static configurator
  • Fortress Core to use the Apache LDAP API 1.0.0-RC1
  • Fortress Rest to use Apache CXF 3.1.6 and Spring 4.3.1
  • Fortress Web to use Apache Wicket 7.3.0 and Spring 4.3.1

Apache Fortress 1.0.0 Released posted on April 15th, 2016

The Apache Directory Project announces the third release of Fortress which provides role-based access control, delegated administration and password policies using LDAP servers like ApacheDS and OpenLDAP.

Apache Fortress 1.0-RC42 Released posted on March 28th, 2016

The Apache Directory Project announces the second release of Fortress which includes the Core, Realm, Rest and Web components.

Dozens of features and bug fixes have been added since the last release. * JIRA Report for fix version 1.0-RC42

This is the first time we’ve released other packages of Realm, Rest and Web components. A 1.0 GA release will follow in coming weeks.

Apache Fortress Core 1.0-RC40 released ! posted on April 15th, 2015

The Apache Directory Project is proud to announce the very first release of Fortress Core, the core library of the Fortress project.

Apache Fortress Added as a sub-project of Apache Directory posted on October 25th, 2014

The Apache Directory Team is proud to announce the addition of the Apache Fortress project as a sub-project.

Apache Fortress provides an RBAC management and enforcement system that builds on existing open source applications like ApacheDS, OpenLDAP and Apache Tomcat.