Apache Fortress™

Access Management SDK and Web Components

A standards-based access management system, written in Java, supports ANSI INCITS 359 RBAC and more.

Fortress News

Apache Fortress 2.0.1 Released posted on July 20th, 2018

The Apache Directory Project announces the eighth release of Fortress - 2.0.1.

This is an important release with many security patches applied via updates to maven dependencies in upstream projects.

New features include

  • [FC-108] - Unix RFC2307bis posixAccount (User) and posixGroup (Role) auxiliary object classes.
  • [FC-235] - Enforcement of arbitrary constraints during role activation with dynamic attributes like location, organization and account.

The Release notes have the complete list of 21 fixes and enchancements:

Trying Apache Fortress with ApacheDS and/or OpenLDAP Quickstarts is like having training wheels for LDAP:

Apache Fortress 2.0.0 Released posted on June 26th, 2017

The Apache Directory Project announces the seventh release of Fortress - 2.0.0 GA. This major release requires Java version 8. It adds formal support of ApacheDS giving full IETF password policy coverage for both it and OpenLDAP. There are Docker images preconfigured with Apache DS & OpenLDAP for rapid deployment and testing.

Apache Fortress 2.0.0 enhancements include:

  • Java 8 requirement
  • Usage of Apache LDAP API v1.0.0
  • FC-209 Missing object classes when create permission attribute and sets
  • FC-210 Programtically determine which methods have ARBAC checks
  • FC-211 Support ApacheDS password policies
  • FC-212 ApacheDS in Docker

The report pulled from JIRA: 2.0.0 resolved issues

Apache Fortress 2.0.0-RC2 Released posted on May 4th, 2017

The Apache Directory Project announces the sixth release of Fortress. This is a minor release, the second release candidate for a 2.0 GA and includes a move to require Java version 8. There are a number of other enhancements:

  • FC-201 jgrapht 1.0.0 requires Java 8
  • FC-202 dir-fortress-core-docker-test to use latest slapd install procs
  • FC-203 propmr modifiers

The complete list: 2.0.0-RC2 resolved issues

Apache Fortress 2.0.0-RC1 Released posted on November 7th, 2016

The Apache Directory Project announces the fifth release of Fortress. This major revision has a couple of changes that have broken backward compatibility with 1.x:

  • FC-183 Use Apache IANA Number of OID - The LDAP schema uses the Apache Directory's IANA base number instead of the one from JoshuaTree. Requires updating existing fortress impls to upgrade schema using latest
  • FC-194 Change password representation from a char[] to a String. Applies to all methods using a password in the arguments. If using the fortress-realm, ensure the tomcat instance has the latest proxy jar also.

Some other major enhancements include:

  • FC-144 - Ability to assign groups to roles
  • FC-116 - Need the ability to get user specific attributes for fine grained access determinations
  • FC-181 - Multitenancy for Realm and Web

The complete list: 2.0.0-RC1 resolved issues

Apache Fortress 1.0.1 Released posted on July 22nd, 2016

The Apache Directory Project announces the fourth release of Fortress.

This maintenance release includes the following enhancements:

  • Fortress Core use of a non-static configurator
  • Fortress Core to use the Apache LDAP API 1.0.0-RC1
  • Fortress Rest to use Apache CXF 3.1.6 and Spring 4.3.1
  • Fortress Web to use Apache Wicket 7.3.0 and Spring 4.3.1

Apache Fortress 1.0.0 Released posted on April 15th, 2016

The Apache Directory Project announces the third release of Fortress which provides role-based access control, delegated administration and password policies using LDAP servers like ApacheDS and OpenLDAP.

Apache Fortress 1.0-RC42 Released posted on March 28th, 2016

The Apache Directory Project announces the second release of Fortress which includes the Core, Realm, Rest and Web components.

Dozens of features and bug fixes have been added since the last release. * JIRA Report for fix version 1.0-RC42

This is the first time we've released other packages of Realm, Rest and Web components. A 1.0 GA release will follow in coming weeks.

Apache Fortress Core 1.0-RC40 released ! posted on April 15th, 2015

The Apache Directory Project is proud to announce the very first release of Fortress Core, the core library of the Fortress project.

Apache Fortress Added as a sub-project of Apache Directory posted on October 25th, 2014

The Apache Directory Team is proud to announce the addition of the Apache Fortress project as a sub-project.

Apache Fortress provides an RBAC management and enforcement system that builds on existing open source applications like ApacheDS, OpenLDAP and Apache Tomcat.