DACS DACS - The Distributed Access Control System


Distributed Access Control System (DACS)
Version Guide

Version 1.4.25
2-Jul-2010

Distributed Systems Software
dacs@dss.ca

This table summarizes the major features available in the latest release of DACS and features being considered for future releases. The DACS 1.4 releases focus on stability by adding only new features and enhancements that minimize version compatibility issues, improving documentation, and fixing bugs and design flaws. Improving the documentation with each successive release is a high priority.

Help us to make DACS better!
Your input is very important. If any of the planned features listed below - or other features - are of particular interest to you, please tell us and we will do what we can to implement them more quickly. In the table below, features designated as partial are not yet fully implemented, and those designated as planned are more-or-less listed in decreasing order of priority.

Feature Included Planned
Single sign-on X  
Unix password authentication X  
Private password authentication X  
Windows NTLM authentication X  
X.509 certificate authentication X  
LDAP (including Microsoft ADS) authentication X  
Interoperation with Apache authentication modules
(RFC 2617 Basic and Digest Access Authentication)
X  
Support for multiple concurrent identities X  
Support for RFC 2109 and RFC 2965 cookie specifications X  
Support for RFC 1867/RFC 2388 form upload, multipart/form-data, and MIME X  
Remote and command-line access to configuration information X  
Configurable event logging, access audit trail, weak password detection X  
User acknowledged, resource-associated notices (such as copyright, licensing, terms-of-use, and message-of-the-day notices) X  
Command line interface to access control (authorization) testing X  
Affiliated DACS federations (single sign-on across federations) X  
Integrated support for HTTP authentication
(RFC 2617 Basic and Digest Access Authentication)
X  
Command line interface to authentication checking X  
Apache 2.2 support X  
CAS authentication X  
Support for authentication using software-based, challenge-response method one-time passwords X  
Support for token-based one-time passwords (HOTP, TOTP)
(OATH, HOTP/RFC 4226)
X  
Generic HTTP-based authentication (e.g., for Google accounts) X  
Authentication using Pluggable Authentication Modules (PAM) X  
Stateless (cookie-less) operation X  
Secure, shareable links X  
Improved performance via cached access control decisions X  
Authentication using Information Cards (CardSpace) X  
Inactivity timeout X  
Display/obtain recent account activity X  
Support for Mac OS X v10.6 Snow Leopard X  
Support for SQLite X  
Support for JSON formatted messages partial  
Browser-based administration console partial  
Improved administration and reporting of user session tracking partial  
Java application support via JNI partial  
Improved DACS account self-administration, enrollment, and provisioning   X
Authentication using one-time, out-of-band passwords (sent via email, SMS text messaging, etc.)   X
Emergency sign on via "vouching"   X
Web-based spam/DoS/abuse resistance framework   X
Privileged identity management (e.g., joint authorization)   X
User-level mutual authentication capabilities   X
Support for risk-based and/or layered authentication   X
Improved support for multi-factor authentication   X
Native support for authentication through OpenID   X
Support for OAuth consumer/client (used by Google/YouTube/Blogger, Netflix, Etsy, delicious, Facebook, MySpace, LinkedIn, Twitter, Yahoo!, and many more)   X
Support for OAuth provider/server   X
Support for Amazon S3 Authentication   X
Native port to the Windows platform (with Apache)   X
Strong mutual authentication via asymmetric key exchange (prob. SRP, modulo IPR concerns)   X
Integration with JAAS   X

There is also a very long wish list that includes minor enhancements, interesting ideas, and major new capabilities. We are continually improving and extending the DACS programming language.

Here is the latest release schedule, with historical entries:

DACS Release Actual or Target
Release Date
dacs-1.4.26 Targeted for the week of 20-Dec-2010
dacs-1.4.25 Released 23-Jun-2010
dacs-1.4.24 Released 7-Jan-2010
dacs-1.4.23a Released 16-Oct-2009
dacs-1.4.23 Released 14-Sep-2009
dacs-1.4.22 Released 13-Jan-2009
dacs-1.4.21 Released 31-Mar-2008
dacs-1.4.20 Released 15-Aug-2007
dacs-1.4.19 Released  2-Jul-2007
dacs-1.4.18 Released  4-Apr-2007
dacs-1.4.17 Released  8-Feb-2007
dacs-1.4.16 Released  4-Dec-2006
dacs-1.4.15 Released  3-Oct-2006
dacs-1.4.14 Released  1-Aug-2006
dacs-1.4.13a Released  2-Jun-2006
dacs-1.4.13 Released  1-Jun-2006
dacs-1.4.12 Released  1-May-2006
dacs-1.4.11 Released  9-Mar-2006
dacs-1.4.10 Released 26-Jan-2006
dacs-1.4.9 Released 21-Dec-2005
dacs-1.4.8 Released 18-Nov-2005
dacs-1.4.7 Released 20-Oct-2005
dacs-1.4.6 Released 20-Sep-2005
dacs-1.4.5 Released 17-Aug-2005
dacs-1.4.4 Released 22-Jun-2005
dacs-1.4.3 Released 27-May-2005
dacs-1.4.2 Released 14-Apr-2005
dacs-1.4.1 Released 16-Mar-2005
dacs-1.4.0 Released 14-Feb-2005

The following interim releases are associated with special projects and were not made publicly available: dacs-1.4.22[a-j], dacs-1.4.23b

Please contact us if you have any questions about these releases or planned features.
Your suggestions for features and their relative priorities are welcome.

$Id: $