#C-BAS: Certificate-based AAA for SDN Experimental Facilities

##Description C-BAS is a certificate-based AAA architecture for SDN experimental facilities, which is by design both secure and flexible. We are developing C-BAS as a robust AAA infrastructure solution to identify experimenters, police their actions based on the associated roles, facilitate secure resource sharing, and provide for detailed accountability.

##Publications Interested readers should consider reviewing the following papers, which overview C-BAS architecture and implementation as well as presents a migration path for its introduction in larger scale in SDN experimental facilities.

• Umar Toseef, Adel Zaalouk, Tom Rothe, Matthew Broadbent, and Kostas Pentikousis, "C-BAS: Certificate-based AAA for SDN Experimental Facilities", Proc. EWSDN 2014, doi>10.1109/EWSDN.2014.41, Budapest, Hungary, September 2014.

• Umar Toseef and Kostas Pentikousis, "Implementation of C-BAS: Certificate-based AAA for SDN Experimental Facilities", Proc. IEEE NCCA 2015, Munich, Germany, June 2015.

##Acknowledgement This work has been partially funded by the Commission of the European Union within the framework of the FP7 projects ALIEN (www.fp7-alien.eu) and FELIX (www.ict-felix.eu).

##Wiki Please refer to wiki section for installation and usage instructions.

Prerequisites:

• It is recommended to use python virtualenv
• It is required to add a DNS entry for your.domain.com that will point into your public IPv4 (for the development purposes you may just add an entry in the /etc/hosts)
• You need to install git

This software was tested under Ubuntu 16.04LTS / 18.04.1 LTS and Python 2.7.

1. Clone the repository

git clone git@github.com:radomirklacza/C-BAS.git
cd C-BAS/

2. Install dependencies

sudo ./install_dependencies.sh

3. Install python modules (python 2.7):

pip install --upgrade pip
pip install -r requirements.txt

4. Copy default configurations:

./configure.onelab.sh 

5. Update src/plugins/geni_trust/gen-certs.py. Replace auth.onelab.eu with your.domain.com
6. Generate private key and certificate:

sh test/creds/gen-certs.sh your.domain.com

7. Start C-BAS:

sudo sh cbas.sh start

https://robomongo.org/