Apache Fortress™

Access Management SDK and Web Components

Apache Fortress™ is a standards-based access management system, written in Java, that provides role-based access control, delegated administration and password policy services with LDAP.

Fortress News

Apache Fortress 2.0.0-RC1 Released posted on November 7th, 2016

The Apache Directory Project announces the fifth release of Fortress. This major revision has a couple of changes that have broken backward compatibility with 1.x:

  1. FC-183 - Use Apache IANA Number of OID - The LDAP schema uses the Apache Directory's IANA base number instead of the one from JoshuaTree. Requires updating existing fortress impls to upgrade schema using latest:

    • OpenLDAP
    • ApacheDS
    • To ensure the old copy of data works with this release, be sure to export and reimport data (using ldif format) after the schema has been updated on the LDAP server.
  2. FC-194 - Change password representation from a char[] to a String. Applies to all methods using a password in the arguments. If using the fortress-realm, ensure the tomcat instance has the latest proxy jar also.

  • Other enhancements include:
    • FC-116 : Basic ABAC capabilities
    • FC-144 : Enhanced group-to-role mappings
    • FC-181 : Multitenancy for Realm and Web

Apache Fortress 1.0.1 Released posted on July 22nd, 2016

The Apache Directory Project announces the fourth release of Fortress.

This maintenance release includes the following enhancements:

  • Fortress Core use of a non-static configurator

  • Fortress Core to use the Apache LDAP API 1.0.0-RC1

  • Fortress Rest to use Apache CXF 3.1.6 and Spring 4.3.1

  • Fortress Web to use Apache Wicket 7.3.0 and Spring 4.3.1

Apache Fortress 1.0.0 Released posted on April 15th, 2016

The Apache Directory Project announces the third release of Fortress which provides role-based access control, delegated administration and password policies using LDAP servers like ApacheDS and OpenLDAP.

Apache Fortress 1.0-RC42 Released posted on March 28th, 2016

The Apache Directory Project announces the second release of Fortress which includes the Core, Realm, Rest and Web components.

Dozens of features and bug fixes have been added since the last release. * JIRA Report for fix version is 1.0-RC41 & 1.0-RC42

This is the first time we've released other packages of Realm, Rest and Web components. A 1.0 GA release will follow in coming weeks.

Apache Fortress Core 1.0-RC40 released ! posted on April 15th, 2015

The Apache Directory Project is proud to announce the very first release of Fortress Core, the core library of the Fortress project.

The Apache Fortress project provides a full ANSI RBAC compliant management and enforcement system that builds on existing open source applications like ApacheDS, OpenLDAP and Apache Tomcat.

Apache Fortress Added as a sub-project of Apache Directory posted on October 25th, 2014

The Apache Directory Team is proud to announce the addition of the Apache Fortress project as a sub-project.

The Apache Fortress project provides a full ANSI RBAC compliant management and enforcement system that builds on existing open source applications like ApacheDS, OpenLDAP and Apache Tomcat.