Valuetype Trust::LocalTrustInServerDecider

Valuetype Trust::LocalTrustInServerDecider

valuetype LocalTrustInServerDecider
This valuetype is created by clients and used locally. It represents a trust decider that determine if the server trusted to receive further client authentication information (i.e. username password) and authorization information. It takes the server principal that has been authenticated at the transport level by the security service.

Operation Index

is_trusted
This operation determines the trust in the server principal.

Operations

is_trusted
boolean is_trusted(in SecurityLevel3::Principal server_principal,
                   in SecurityLevel3::StatementList supporting_statements,
                   in boolean confidentiality,
                   in boolean integrity,
                   in SecurityLevel3::CredsDirective creds_directive);

This operation determines the trust in the server principal. This principal is the transport principal of the server that was possibly authenticated by the clients security service. This operation is called by the security service.

Parameters:
server_principal - This field is the principal that represents the server. It may be authenticated. Check the attributes.
supporting_statements - This field will contain any Identity Statements that support the Security Services deduction of the principal.
confidentiality - This field is true if the transport talking to the server is confidential. Check the principal's attributes for any indication of the cipher and its strength.
integrity - This field is true if the transport talking with the server has integrity protection. Check the prnicipal's attributes for any indication of the cipher and its strength.
creds_directive - This is the creds directive, i.e. invoke, endorse, or embody, that the credentials will use once trust has been established. If this is a first time invocation for the SL3 Credentials, a minimal transport without endorsement, or embodiment capabilities (n/a for TLS) is established first for the purposes of determining trust.
Returns:
True if this object determines that the target is trusted to receive such things as authorization tokens, client authenticators, and receive invocations from this client.

Generated by the ORBacus IDL-to-HTML translator