Local Interface SecurityLevel3::CredsInitiator
Local Interface SecurityLevel3::CredsInitiator
local interface CredsInitiator
The CredsInitiator object is an object that is directly a
member of a particular OwnCredentials object. It represents
the "initiator" side of the credentials.
Attribute Index
- expiry_time
- The expiry_time attribute denotes the time that these
credentials expire.
- initiator_type
- The initiator_type attribute signifies the intent of the
initiator as to the principal it presents for the
security context establishment.
- restricted_resources
- The restricted_resources attribute contains a list of
resource names, by which the credentials initiator
believes his authorizations apply.
- supporting_statements
- The supporting statements attribute contains a list of statements
supporting the principal associated with this initiator.
- supports_embodiment
- The supports_embodiment attribute is
TRUE if these credentials
can be directed by use of the CredsDirective, to give the
the accepting end of a context establishment the ability
to impersonate this initiator principal.
- supports_endorsement
- The supports_endorsement attribute is
TRUE if these credentials
can be directed by use of the CredsDirective, to endorse
the accepting end of a context establishment to act
on behalf of this initiator principal.
- supports_quoting
- The supports_quoting attribute is
TRUE if these credentials
can be directed by use of the CredsDirective, to simply
quote another principal on top of these credentials.
- the_principal
- The principal attribute contains a local view of the
Principal that the Credentials intend to represent.
Attributes
- expiry_time
-
readonly attribute TimeBase::UtcT expiry_time;
The expiry_time attribute denotes the time that these
credentials expire.
- initiator_type
-
readonly attribute InitiatorType initiator_type;
The initiator_type attribute signifies the intent of the
initiator as to the principal it presents for the
security context establishment. It should correspond
to the type of the Principal. However, it might be slightly
different, because using CSIv2 Client Authentication
technically creates a "QuotingPrincipal" however, the
initiator type will still be simple as no CSIv2 Identity
Assertion will be used in establishing the security
context.
- restricted_resources
-
readonly attribute ResourceNameList restricted_resources;
The restricted_resources attribute contains a list of
resource names, by which the credentials initiator
believes his authorizations apply.
- supporting_statements
-
readonly attribute StatementList supporting_statements;
The supporting statements attribute contains a list of statements
supporting the principal associated with this initiator.
- supports_embodiment
-
readonly attribute boolean supports_embodiment;
The supports_embodiment attribute is TRUE if these credentials
can be directed by use of the CredsDirective, to give the
the accepting end of a context establishment the ability
to impersonate this initiator principal.
- supports_endorsement
-
readonly attribute boolean supports_endorsement;
The supports_endorsement attribute is TRUE if these credentials
can be directed by use of the CredsDirective, to endorse
the accepting end of a context establishment to act
on behalf of this initiator principal.
- supports_quoting
-
readonly attribute boolean supports_quoting;
The supports_quoting attribute is TRUE if these credentials
can be directed by use of the CredsDirective, to simply
quote another principal on top of these credentials.
- the_principal
-
readonly attribute Principal the_principal;
The principal attribute contains a local view of the
Principal that the Credentials intend to represent.
Note that during context establishment, the actual establish
client principal may be represented differently, especially
with respect to environmental attributes. Some environmental
attributes are a direct result of context establishment.
Generated by the ORBacus IDL-to-HTML translator