mei_rt2mei_rt2_fix_1meiyap-rt1rt2
Last change
on this file since 7727f26 was
7727f26,
checked in by Mei <mei@…>, 12 years ago
|
1) add environment variables DUMP_DB, ABAC_CN.
ABAC_CN will switch to using CNs for keyid insead of SHAs
2) add/modified couple of doc files.
|
-
Property mode set to
100755
|
File size:
1.3 KB
|
Rev | Line | |
---|
[718ad924] | 1 | |
---|
[da5afdf] | 2 | rm -rf creds_dump |
---|
| 3 | |
---|
[c469edf] | 4 | pwd=`pwd` |
---|
| 5 | |
---|
| 6 | eloc=$pwd/../../libabac |
---|
| 7 | keyloc=$pwd |
---|
[718ad924] | 8 | |
---|
| 9 | acme=`creddy --keyid --cert $keyloc/Acme_ID.pem` |
---|
| 10 | alice=`creddy --keyid --cert $keyloc/Alice_ID.pem` |
---|
| 11 | bob=`creddy --keyid --cert $keyloc/Bob_ID.pem` |
---|
| 12 | globotron=`creddy --keyid --cert $keyloc/Globotron_ID.pem` |
---|
| 13 | |
---|
[da5afdf] | 14 | glob_admin="[keyid:$globotron].role:admin" |
---|
| 15 | alice_prin="[keyid:$alice]" |
---|
| 16 | bob_prin="[keyid:$bob]" |
---|
| 17 | experiment_create="[keyid:$acme].role:experiment_create" |
---|
| 18 | |
---|
| 19 | ## dump all credentials |
---|
| 20 | $eloc/abac_prover_yap --keystore $keyloc --dump creds_dump |
---|
| 21 | |
---|
[718ad924] | 22 | #[keyid:Globotron].role:admin <-?- [keyid:Alice] yap |
---|
| 23 | #isMember(pAlice, role(pGlobotron,admin), C). |
---|
| 24 | echo " " |
---|
| 25 | echo "===good=============== Globotron.admin <- Alice yap " |
---|
[da5afdf] | 26 | $eloc/abac_prover_yap --keystore $keyloc \ |
---|
| 27 | --role "$glob_admin" --principal "$alice_prin" |
---|
[718ad924] | 28 | |
---|
| 29 | #[keyid:Globotron].role:admin <-?- [keyid:Bob] yap |
---|
| 30 | #isMember(pBob, role(pGlobotron,admin), C). |
---|
| 31 | echo " " |
---|
| 32 | echo "===bad=============== Globotron.admin <- Bob yap " |
---|
[da5afdf] | 33 | $eloc/abac_prover_yap --keystore $keyloc \ |
---|
| 34 | --role "$glob_admin" --principal "$bob_prin" |
---|
[718ad924] | 35 | |
---|
| 36 | #[keyid:Acme].role:experiment_create <-?- [keyid:Bob] yap |
---|
| 37 | #isMember(pBob, role(pAcme,experiment_create), C). |
---|
| 38 | echo " " |
---|
| 39 | echo "===good=============== Acme.experiment_create <- Bob yap " |
---|
[da5afdf] | 40 | $eloc/abac_prover_yap --keystore $keyloc \ |
---|
| 41 | --role "$experiment_create" --principal "$bob_prin" |
---|
[718ad924] | 42 | |
---|
| 43 | |
---|
Note: See
TracBrowser
for help on using the repository browser.