Local Interface SecurityLevel3::CredsInitiator

Local Interface SecurityLevel3::CredsInitiator

local interface CredsInitiator
The CredsInitiator object is an object that is directly a member of a particular OwnCredentials object. It represents the "initiator" side of the credentials.

Attribute Index

expiry_time
The expiry_time attribute denotes the time that these credentials expire.
initiator_type
The initiator_type attribute signifies the intent of the initiator as to the principal it presents for the security context establishment.
restricted_resources
The restricted_resources attribute contains a list of resource names, by which the credentials initiator believes his authorizations apply.
supporting_statements
The supporting statements attribute contains a list of statements supporting the principal associated with this initiator.
supports_embodiment
The supports_embodiment attribute is TRUE if these credentials can be directed by use of the CredsDirective, to give the the accepting end of a context establishment the ability to impersonate this initiator principal.
supports_endorsement
The supports_endorsement attribute is TRUE if these credentials can be directed by use of the CredsDirective, to endorse the accepting end of a context establishment to act on behalf of this initiator principal.
supports_quoting
The supports_quoting attribute is TRUE if these credentials can be directed by use of the CredsDirective, to simply quote another principal on top of these credentials.
the_principal
The principal attribute contains a local view of the Principal that the Credentials intend to represent.

Attributes

expiry_time
readonly attribute TimeBase::UtcT expiry_time;

The expiry_time attribute denotes the time that these credentials expire.

initiator_type
readonly attribute InitiatorType initiator_type;

The initiator_type attribute signifies the intent of the initiator as to the principal it presents for the security context establishment. It should correspond to the type of the Principal. However, it might be slightly different, because using CSIv2 Client Authentication technically creates a "QuotingPrincipal" however, the initiator type will still be simple as no CSIv2 Identity Assertion will be used in establishing the security context.

restricted_resources
readonly attribute ResourceNameList restricted_resources;

The restricted_resources attribute contains a list of resource names, by which the credentials initiator believes his authorizations apply.

supporting_statements
readonly attribute StatementList supporting_statements;

The supporting statements attribute contains a list of statements supporting the principal associated with this initiator.

supports_embodiment
readonly attribute boolean supports_embodiment;

The supports_embodiment attribute is TRUE if these credentials can be directed by use of the CredsDirective, to give the the accepting end of a context establishment the ability to impersonate this initiator principal.

supports_endorsement
readonly attribute boolean supports_endorsement;

The supports_endorsement attribute is TRUE if these credentials can be directed by use of the CredsDirective, to endorse the accepting end of a context establishment to act on behalf of this initiator principal.

supports_quoting
readonly attribute boolean supports_quoting;

The supports_quoting attribute is TRUE if these credentials can be directed by use of the CredsDirective, to simply quote another principal on top of these credentials.

the_principal
readonly attribute Principal the_principal;

The principal attribute contains a local view of the Principal that the Credentials intend to represent. Note that during context establishment, the actual establish client principal may be represented differently, especially with respect to environmental attributes. Some environmental attributes are a direct result of context establishment.


Generated by the ORBacus IDL-to-HTML translator