摘要： 介绍了使用LDAP（轻量级目录访问协议）在Web上实现RBAC的框架。该框架使用LDAP目录服务器作为存放角色的角色服务器，Web服务器可以通过两种方式（user-pull和server-pull）从角色服务器取得用户的角色，并将之用于RBAC。该文对这两种方式的实现分别进行了介绍，并对它们进行了比较。

关键词: RBAC, LDAP, SSL, User-pull, Server-pull, Web

Abstract: This paper shows a framework for implementing RBAC in Web environment using LDAP. The framework uses LDAP directory server for role server to store role information, the Web server can pull user's roles from the role server by two ways(user-pull and server-pull), then uses them for RBAC. This paper describes the implementation of the two ways, and gives a comparison of them.

中图分类号: 

• TP393.08