mei_rt2mei_rt2_fix_1meiyap-rt1rt2
Last change
on this file since 7727f26 was
7727f26,
checked in by Mei <mei@…>, 12 years ago
|
1) add environment variables DUMP_DB, ABAC_CN.
ABAC_CN will switch to using CNs for keyid insead of SHAs
2) add/modified couple of doc files.
|
-
Property mode set to
100755
|
File size:
1.2 KB
|
Rev | Line | |
---|
[718ad924] | 1 | |
---|
[da5afdf] | 2 | rm -rf creds_dump |
---|
| 3 | |
---|
[c469edf] | 4 | pwd=`pwd` |
---|
| 5 | |
---|
| 6 | eloc=$pwd/../../libabac |
---|
| 7 | keyloc=$pwd |
---|
[718ad924] | 8 | |
---|
| 9 | isi=`creddy --keyid --cert ISI_ID.pem` |
---|
| 10 | usc=`creddy --keyid --cert USC_ID.pem` |
---|
| 11 | maryann=`creddy --keyid --cert Maryann_ID.pem` |
---|
| 12 | john=`creddy --keyid --cert John_ID.pem` |
---|
| 13 | |
---|
[da5afdf] | 14 | usc_employee="[keyid:$usc].role:employee" |
---|
| 15 | usc_eval_maryann="[keyid:$usc].role:evaluatorOf([keyid:$maryann])" |
---|
| 16 | isi_manager_maryann="[keyid:$isi].role:managerOf([keyid:$maryann])" |
---|
| 17 | john_prin="[keyid:$john]" |
---|
| 18 | |
---|
| 19 | ## dump all credentials |
---|
| 20 | $eloc/abac_prover_yap --keystore $keyloc --dump creds_dump |
---|
[718ad924] | 21 | |
---|
[da5afdf] | 22 | #[keyid:USC].role:evaluatorOf([keyid:Maryann]) <-?- [keyid:John] yap |
---|
[36b100a] | 23 | echo " " |
---|
[718ad924] | 24 | echo "===good============ USC.evaluatorOf(Maryann) <- John yap " |
---|
[da5afdf] | 25 | $eloc/abac_prover_yap --keystore $keyloc --role "$usc_eval_maryann" --principal "$john_prin" |
---|
| 26 | |
---|
| 27 | #[keyid:ISI].role:managerOf([keyid:Maryann]) <-?- [keyid:John] yap |
---|
[36b100a] | 28 | echo " " |
---|
[2c01913] | 29 | echo "===good============ ISI.managerOf(Maryann) <- John yap " |
---|
[da5afdf] | 30 | $eloc/abac_prover_yap --keystore $keyloc --role "$isi_manager_maryann" --principal "$john_prin" |
---|
| 31 | |
---|
[718ad924] | 32 | |
---|
[da5afdf] | 33 | #[keyid:USC].role:employee <- [keyid:John] yap " |
---|
[718ad924] | 34 | #USC.employee <-?- John yap |
---|
[36b100a] | 35 | echo " " |
---|
[da5afdf] | 36 | echo "===good============ USC.employee <-?- John yap " |
---|
| 37 | $eloc/abac_prover_yap --keystore $keyloc --role "$usc_employee" --principal "$john_prin" |
---|
[718ad924] | 38 | |
---|
| 39 | |
---|
Note: See
TracBrowser
for help on using the repository browser.