Changes between Version 10 and Version 11 of Doc/gLite/TemplateCustomization/Services

Timestamp:

Mar 9, 2011, 3:11:07 PM (13 years ago)

Author:

/O=GRID-FR/C=FR/O=CNRS/OU=IPHC/CN=Jerome Pansanel

Comment:

Argus documentation

Doc/gLite/TemplateCustomization/Services

@@ -692 +692 @@
  * Variables related to [wiki:Doc/gLite/TemplateCustomization#FTSClient FTS client].
  
+== ARGUS ==
+
+__Base template__ : `machine-types/argus`.
+
+Argus is a system meant to render consistent authorization decisions for distributed services. It is composed of three components:
+ * the Policy Administration Point (PAP) component is in charge of authoring and managing authoring policies. It provides also the managed policies to other authorization service components.
+ * the Policy Decision Point (PDP) components receives authorization requests from the PEP and evalutes these requests against authorization policies retrieved from the PAP. 
+ * the Policy Enforcement Point (PEP) checks the consistency of an authorization request and send the request to the PDP for evaluation.
+
+Argus requires specific configuration variables in the case where the three components are not running on the same host:
+ * `PAP_HOST`: host name of PAP server.
+ * `PDP_HOST`: host name of PDP server.
+ * `PEP_HOST`: host name of PEP server.
+
+Each component can be customized:
+ * `ARGUS_LOCATION`: base location of ARGUS services. Default: /opt/argus.
+ * `PAP_PORT`: PAP standalone service port. Default: 8150.
+ * `PAP_HOME`: home directory for the PAP service. Default: /opt/argus/pap.
+ * `PDP_PORT`: PDP standalone service port. Default: 8152.
+ * `PAP_HOME`: home directory for the PDP service. Default: /opt/argus/pdp.
+ * `PEP_PORT`: PEP service port. Default: 8154.
+ * `PEP_HOME`: home directory for the PEP service. Default: /opt/argus/pepd.