[jboss-user] [Security & JAAS/JBoss] - Re: Is XACML PDP Thread Safe?

[anil.saldhana@jboss.com]

http://www.jboss.org/jbosssecurity/downloads/JBoss%20XACML/?action=a&windowstate=maximized

Pick the JBossXACML v2.0.3.SP2 in about 10 minutes.

Fred, thanks for your questions.  That got me thinking a bit.  

I made the pdp.evaluate method thread safe by moving the lock there.  I am going to remove the lock from the SOAPSAMLXACMLServlet as the pdp eval is thread safe.

Consulted some concurrency experts and they also feel that when the number of locks is small, the Lock construct is the most efficient for synchronization.

Also, pick up the JBoss Identity Bindings 1.0.0.alpha3-SNAPSHOT from the 
http://snapshots.jboss.org/maven2/org/jboss/identity/jboss-identity-bindings/1.0.0.alpha3-SNAPSHOT/

So, two things for your performance tests - pick JBossXACML v2.0.3.SP2 and updated snapshot for JBoss Identity bindings.  Tell me how good the thread safety is in your load test results.

Regarding improving the performance, currently we are validating the request while parsing. We can improve by providing an option to disable the validation while parsing.

View the original post : http://www.jboss.org/index.html?module=bb&op=viewtopic&p=4238286#4238286

Reply to the post : http://www.jboss.org/index.html?module=bb&op=posting&mode=reply&p=4238286