source: examples/creddy_prover_tests/README @ 2cdbe49

mei_rt2mei_rt2_fix_1
Last change on this file since 2cdbe49 was e3462b4, checked in by Mei <mei@…>, 12 years ago

1) make regression test to use just runcheck (hide runall)
2) alter the absolute path in the error message so the regression testing

would not be so user dependent when doing validation

3) add the missing null setting in abac_verifier's issuer_id line 335

  • Property mode set to 100644
File size: 2.1 KB
Line 
1
2This directory contains various ABAC scenarios that exercise
3various feature of the current RT2 implmentation using YAP prolog.
4
5The frontend query client is abac_prover_yap.
6
7Each subdirectory has a README script which includes a description
8of the scenario, and creddy calls that generate the needed credentials.
9There is a run_query script which sets up and runs couple of typical
10query using abac_prover_yap.
11
12runcheck, is the top level script that initiates the run_query scripts
13within each subdirectory with ABAC_CN mode (see below); captures the
14result and compares with the baseline result stored in allout.save.
15runcheck also makes a complete run_query run without ABAC_CN enabled as
16a round of regression testing. runcheck call .runall to cleanup all
17the byproducts of a run and also setup the credentials needed in each
18subdirectories
19
20abac_prover_yap
21
22Usage: abac_prover_yap
23        --keystore <keystore>
24        --role <keyid.role> --principal <keyid>
25        --oset <keyid.oset> --object <otype>
26    loads the keystore and runs the query role <-?- principal
27                                the query oset <-?- object
28        --dump <file>
29    extracts all credentials from the prolog db
30
31keystore is the location where the prover will search to load credentials.
32All accessible identity credentials and attribute credentials will be
33picked up one file at a time.
34
35role, oset, principal, and object are specified with principal's SHA1
36value extracted from the credentials that are loaded from keystore location
37using creddy. Example can be found in the run_queryscript.
38
39An actual example from balltime_rt2_typed,
40
41abac_prover_yap --keystore /home/mei/Deter/abac/examples/balltime_rt2_typed
42  --role [keyid:212146063d65264e8f27c31f0da592e386fc59aa].role:stadium
43                 ([string:'access'],[boolean:true],[time:20120228T130000])
44  --principal [keyid:49bdcd1278fce71d7c5cb3ee9138c22f7379e8e0]
45
46One useful environment variable,
47
48ABAC_CN, use CN instead of SHA1 value for identifying the principals. This
49is useful for debugging purpose but will not resolve conflict when CN is not
50uniquely associated with each principal's SHA1 value.
51
52env ABAC_CN=1 runall run
53
54
Note: See TracBrowser for help on using the repository browser.