Apache Fortress™

Access Management SDK and Web Components

Apache Fortress™ is a standards-based access management system, written in Java, that provides role-based access control, delegated administration and password policy services with LDAP.

Fortress News

Apache Fortress 2.0.0-RC2 Released posted on May 4th, 2017

The Apache Directory Project announces the sixth release of Fortress. This is a minor release, the second release candidate for a 2.0 GA and includes a move to require Java version 8. There are a number of other enhancements:

  • FC-201 jgrapht 1.0.0 requires Java 8
  • FC-202 dir-fortress-core-docker-test to use latest slapd install procs
  • FC-203 propmr modifiers
  • FC-204 AccessMgrRestImpl.getUser not setting contextId on request
  • FC-205 | FC-197 implement PropertyMgrRestImpl
  • FC-207 Fix handling of truststore

The complete list: 2.0.0-RC2 resolved issues

Apache Fortress 2.0.0-RC1 Released posted on November 7th, 2016

The Apache Directory Project announces the fifth release of Fortress. This major revision has a couple of changes that have broken backward compatibility with 1.x:

  • FC-183 Use Apache IANA Number of OID - The LDAP schema uses the Apache Directory's IANA base number instead of the one from JoshuaTree. Requires updating existing fortress impls to upgrade schema using latest
  • FC-194 Change password representation from a char[] to a String. Applies to all methods using a password in the arguments. If using the fortress-realm, ensure the tomcat instance has the latest proxy jar also.

Some other major enhancements include:

  • FC-144 - Ability to assign groups to roles
  • FC-116 - Need the ability to get user specific attributes for fine grained access determinations
  • FC-181 - Multitenancy for Realm and Web

The complete list: 2.0.0-RC1 resolved issues

Apache Fortress 1.0.1 Released posted on July 22nd, 2016

The Apache Directory Project announces the fourth release of Fortress.

This maintenance release includes the following enhancements:

  • Fortress Core use of a non-static configurator

  • Fortress Core to use the Apache LDAP API 1.0.0-RC1

  • Fortress Rest to use Apache CXF 3.1.6 and Spring 4.3.1

  • Fortress Web to use Apache Wicket 7.3.0 and Spring 4.3.1

Apache Fortress 1.0.0 Released posted on April 15th, 2016

The Apache Directory Project announces the third release of Fortress which provides role-based access control, delegated administration and password policies using LDAP servers like ApacheDS and OpenLDAP.

Apache Fortress 1.0-RC42 Released posted on March 28th, 2016

The Apache Directory Project announces the second release of Fortress which includes the Core, Realm, Rest and Web components.

Dozens of features and bug fixes have been added since the last release. * JIRA Report for fix version is 1.0-RC41 & 1.0-RC42

This is the first time we've released other packages of Realm, Rest and Web components. A 1.0 GA release will follow in coming weeks.

Apache Fortress Core 1.0-RC40 released ! posted on April 15th, 2015

The Apache Directory Project is proud to announce the very first release of Fortress Core, the core library of the Fortress project.

The Apache Fortress project provides a full ANSI RBAC compliant management and enforcement system that builds on existing open source applications like ApacheDS, OpenLDAP and Apache Tomcat.

Apache Fortress Added as a sub-project of Apache Directory posted on October 25th, 2014

The Apache Directory Team is proud to announce the addition of the Apache Fortress project as a sub-project.

The Apache Fortress project provides a full ANSI RBAC compliant management and enforcement system that builds on existing open source applications like ApacheDS, OpenLDAP and Apache Tomcat.