mei_rt2mei_rt2_fix_1meiyap-rt1rt2
Last change
on this file since 7727f26 was
7727f26,
checked in by Mei <mei@…>, 12 years ago
|
1) add environment variables DUMP_DB, ABAC_CN.
ABAC_CN will switch to using CNs for keyid insead of SHAs
2) add/modified couple of doc files.
|
-
Property mode set to
100755
|
File size:
1.2 KB
|
Line | |
---|
1 | |
---|
2 | rm -rf creds_dump |
---|
3 | |
---|
4 | pwd=`pwd` |
---|
5 | |
---|
6 | eloc=$pwd/../../libabac |
---|
7 | keyloc=$pwd |
---|
8 | |
---|
9 | isi=`creddy --keyid --cert ISI_ID.pem` |
---|
10 | usc=`creddy --keyid --cert USC_ID.pem` |
---|
11 | maryann=`creddy --keyid --cert Maryann_ID.pem` |
---|
12 | john=`creddy --keyid --cert John_ID.pem` |
---|
13 | |
---|
14 | usc_employee="[keyid:$usc].role:employee" |
---|
15 | usc_eval_maryann="[keyid:$usc].role:evaluatorOf([keyid:$maryann])" |
---|
16 | isi_manager_maryann="[keyid:$isi].role:managerOf([keyid:$maryann])" |
---|
17 | john_prin="[keyid:$john]" |
---|
18 | |
---|
19 | ## dump all credentials |
---|
20 | $eloc/abac_prover_yap --keystore $keyloc --dump creds_dump |
---|
21 | |
---|
22 | #[keyid:USC].role:evaluatorOf([keyid:Maryann]) <-?- [keyid:John] yap |
---|
23 | echo " " |
---|
24 | echo "===good============ USC.evaluatorOf(Maryann) <- John yap " |
---|
25 | $eloc/abac_prover_yap --keystore $keyloc --role "$usc_eval_maryann" --principal "$john_prin" |
---|
26 | |
---|
27 | #[keyid:ISI].role:managerOf([keyid:Maryann]) <-?- [keyid:John] yap |
---|
28 | echo " " |
---|
29 | echo "===good============ ISI.managerOf(Maryann) <- John yap " |
---|
30 | $eloc/abac_prover_yap --keystore $keyloc --role "$isi_manager_maryann" --principal "$john_prin" |
---|
31 | |
---|
32 | |
---|
33 | #[keyid:USC].role:employee <- [keyid:John] yap " |
---|
34 | #USC.employee <-?- John yap |
---|
35 | echo " " |
---|
36 | echo "===good============ USC.employee <-?- John yap " |
---|
37 | $eloc/abac_prover_yap --keystore $keyloc --role "$usc_employee" --principal "$john_prin" |
---|
38 | |
---|
39 | |
---|
Note: See
TracBrowser
for help on using the repository browser.