1 | #!/usr/bin/env sh |
---|
2 | # |
---|
3 | # The example makes use of 2 principals, Acme and Coyote. |
---|
4 | # |
---|
5 | # This example shows a very simple delegation of roles by Acme. Acme's |
---|
6 | # buy_rockets role includes all of Acme's preferred customers. The example |
---|
7 | # creates the principals and 2 credentials. Credential 1 encodes the policy |
---|
8 | # that all of Acme's preferred customers can buy rockets from Acme and |
---|
9 | # Credential 2 defines the Coyote as an Acme preferred customer. |
---|
10 | |
---|
11 | # The ./run_query script issues queries to show that the Coyote is both a preferred |
---|
12 | # customer and can buy rockets. Two invalid queries are also made, checking if |
---|
13 | # Acme is the Coyote's friend, which it isn't and whether a query about |
---|
14 | # something other than a principal works (it doesn't). |
---|
15 | |
---|
16 | # acme_rockets_rt0 |
---|
17 | |
---|
18 | #Acme.buy_rockets <- Acme.preferred_customer |
---|
19 | #Acme.preferred_customer <- Coyote |
---|
20 | |
---|
21 | rm -rf *.pem *.xml |
---|
22 | . ${TESTDIR}/test_util.sh |
---|
23 | if [ -z "${TESTDIR}" ] ; then |
---|
24 | TESTDIR=../.. |
---|
25 | fi |
---|
26 | |
---|
27 | $eloc/creddy --generate --cn Acme |
---|
28 | |
---|
29 | $eloc/creddy --generate --cn Coyote |
---|
30 | |
---|
31 | $eloc/creddy --attribute \ |
---|
32 | --issuer Acme_ID.pem --key Acme_private.pem --role buy_rockets \ |
---|
33 | --subject-cert Acme_ID.pem --subject-role preferred_customer \ |
---|
34 | --out Acme_buy_rockets__Acme_preferred_customer_attr.xml |
---|
35 | |
---|
36 | $eloc/creddy --attribute \ |
---|
37 | --issuer Acme_ID.pem --key Acme_private.pem --role preferred_customer \ |
---|
38 | --subject-cert Coyote_ID.pem \ |
---|
39 | --out Acme_preferred_customer__Coyote_attr.xml |
---|