shawnmckinney / apache-fortress-demo

Sample web app to demo end-to-end security w/ JavaEE, Spring Security and RBAC fine-grained authorization. All connections use SSL.

© 2023 iamfortress.net

README for Apache Fortress Demo End-to-End Security Example

Security Layers in this Demo

Document Overview

This document is the starting point for the apache fortress demo web app. It provides directions to download the source package from github, and generate a java document that contains the actual installation instructions.

(NEW) Instructions for installing automatically with Ansible:

• Ansible playbooks to perform steps to install and setup Apache Fortress Demo, including OpenLDAP, Apache Tomcat, MariaDB, generating certs, keys, etc.
• README.md

Prerequisites for target environment

1. Debian or Redhat Liunx variant machine with OpenSSL installed.
2. Java >= 17
3. Apache Maven >= 3
4. Apache Tomcat >= 10
5. Firefox Web Browser
6. Successful installation (of an LDAP server) and passing integration tests in either of these two Apache Fortress Core Quickstart guides:
   • SECTION 3. Apache Fortress Core Integration Test in OPENLDAP QUICKSTART
   • SECTION 4. Apache Fortress Core Integration Test in APACHEDS QUICKSTART
   • OR -
   • Run the slapd playbook: README.md

These instructions have been recently modified to use either openldap and apacheds LDAP servers. Be sure to choose the correct instructions, either Apache Directory SSL or OpenLDAP SSL.

Instructions for installing manually:

1. wget archive (or)

2. git clone repo

3. Set java and maven home env variables.

4. Generate the java document that contains the demo installation instructions:

mvn javadoc:javadoc

6. Perform these steps:

• Managing PKI Keys
• Set Hostname Entry
• Apache Directory SSL or OpenLDAP SSL
• Apache Fortress Core SSL
• Install MySQL
• Apache Tomcat SSL
• Apache Fortress Demo