com.tivoli.pd.jutil
Class PDStatics

java.lang.Object
  com.tivoli.pd.jutil.PDStatics

public class PDStatics
extends java.lang.Object

This class contains constants used in the Java administration and authorization classes.

Modes: Local,Remote

Field Summary

static java.lang.String	AUTHENTICATION_LEVEL modifiable credential attribute name
static java.lang.String	AZN_ACL_EXT_ATTR_LOC permission-info attribute: ACL extended attributes object location
static int	AZN_C_INITIATOR_INDEX Initiator principal index into the credential.
static java.lang.String	AZN_CRED_AUTH_METHOD modifiable credential attribute name
static java.lang.String	AZN_CRED_AUTHNMECH_INFO modifiable credential attribute name
static java.lang.String	AZN_CRED_AUTHZN_ID read-only credential attribute name
static java.lang.String	AZN_CRED_BROWSER_INFO modifiable credential attribute name
static java.lang.String	AZN_CRED_GROUP_NAMES read-only credential attribute name
static java.lang.String	AZN_CRED_GROUP_REGISTRY_IDS read-only credential attribute name
static java.lang.String	AZN_CRED_GROUP_UUIDS read-only credential attribute name
static java.lang.String	AZN_CRED_IP_ADDRESS modifiable credential attribute name
static java.lang.String	AZN_CRED_IP_FAMILY modifiable credential attribute name
static java.lang.String	AZN_CRED_IP_FAMILY_AF_INET modifiable credential attribute name
static java.lang.String	AZN_CRED_IP_FAMILY_AF_INET6 modifiable credential attribute name
static java.lang.String	AZN_CRED_MECH_ID read-only credential attribute name
static java.lang.String	AZN_CRED_NETWORK_ADDRESS_BIN modifiable credential attribute name
static java.lang.String	AZN_CRED_NETWORK_ADDRESS_STR modifiable credential attribute name
static java.lang.String	AZN_CRED_PRINCIPAL_DOMAIN read-only credential attribute name
static java.lang.String	AZN_CRED_PRINCIPAL_NAME read-only credential attribute name
static java.lang.String	AZN_CRED_PRINCIPAL_UUID read-only credential attribute name
static java.lang.String	AZN_CRED_QOP_INFO modifiable credential attribute name
static java.lang.String	AZN_CRED_REGISTRY_ID read-only credential attribute name
static java.lang.String	AZN_CRED_USER_INFO modifiable credential attribute name
static java.lang.String	AZN_CRED_VERSION read-only credential attribute name
static java.lang.String	AZN_DYNADI_TARGET_URL WebSEAL/dynADI specific.
static java.lang.String	AZN_ENT_SVC_PD_POBJ Entitlements Service ID: Policy Director Protected Object Entitlements.
static java.lang.String	AZN_ENT_SVC_PD_POBJ_MATCHES Output attribute: the list of objects which match the input criteria
static java.lang.String	AZN_ENT_SVC_PD_POBJ_PATH Input attribute: the protected object directory path to be searched
static java.lang.String	AZN_ENT_SVC_PD_POBJ_REQD_OPS Input attribute: the requested set of operations for the credential
static java.lang.String	AZN_MOD_RAD_GROUP_NAMES Input attribute: the groups to be added to the credential
static java.lang.String	AZN_MOD_RAD_OP_ADD We're adding groups
static java.lang.String	AZN_MOD_RAD_OP_REMOVE We're removing groups
static java.lang.String	AZN_MOD_RAD_OPERATION Input attribute: indication if we're removing or adding groups.
static java.lang.String	AZN_MOD_SVC_RAD_2AB The default Credential Modification service
static java.lang.String	AZN_OBJECT_EXT_ATTR_LOC permission-info attribute: protected object extended attributes object location
static java.lang.String	AZN_PERMINFO_ACL_EXT_ATTRS permission-info attribute: ACL extended attributes scope
static java.lang.String	AZN_PERMINFO_ALL_ACL_EXT_ATTRS permission-info attribute: all ACL extended attributes
static java.lang.String	AZN_PERMINFO_ALL_ATTRS permission-info attribute: all attributes
static java.lang.String	AZN_PERMINFO_ALL_POBJ_EXT_ATTRS permission-info attribute: all protected object extended attributes
static java.lang.String	AZN_PERMINFO_ALL_POP_EXT_ATTRS permission-info attribute: all POP extended attributes
static java.lang.String	AZN_PERMINFO_AUDITLEVEL_ULONG permission-info attribute: audit level.
static java.lang.String	AZN_PERMINFO_DYNADI_REDIRECT_URL permission-info attribute: dynADI redirect URL.
static java.lang.String	AZN_PERMINFO_FAIL_REASON permission-info attribute: authorization fail reason return code
static java.lang.String	AZN_PERMINFO_POBJ_EXT_ATTRS permission-info attribute: protected object extended attributes scope
static java.lang.String	AZN_PERMINFO_POP_EXT_ATTRS permission-info attribute: POP extended attributes scope
static java.lang.String	AZN_PERMINFO_QOP permission-info attribute: quality of protection.
static java.lang.String	AZN_PERMINFO_QOP_ULONG permission-info attribute: quality of protection
static java.lang.String	AZN_PERMINFO_REASON_RULE_FAILED permission-info attribute: authorization rule fail reason.
static java.lang.String	AZN_PERMINFO_RULES_ADI_REQUEST permission-info attribute: authorization rules ADI request.
static java.lang.String	AZN_PERMINFO_STEPUP_LEVEL permission-info attribute: step-up authentication level
static java.lang.String	AZN_PERMINFO_WARNINGMODE_ULONG permission-info attribute: warning mode.
static java.lang.String	AZN_PERMINFO_WARNINGMODEPERMITTED_ULONG permission-info attribute: warning mode permitted.
static int	AZN_PERMISSION_ALLOWED Indicates that a user is granted a specified permission.
static int	AZN_PERMISSION_DENIED Indicates that a user is denied a specified permission.
static java.lang.String	AZN_POBJ_EXT_ATTR_LOC
static java.lang.String	AZN_POP_EXT_ATTR_LOC permission-info attribute: POP extended attributes object location
static int	AZN_VALTYPE_BUFFER The attribute is a byte array.
static int	AZN_VALTYPE_POBJ The attribute is a Security Access Manager administration service protected object.
static int	AZN_VALTYPE_STRING The attribute is a UTF8 String.
static int	AZN_VALTYPE_ULONG The attribute is an unsigned long.
static java.lang.String	DB_SEQUENCE
static int	QOP_INTEGRITY The quality of protection required between caller and the domain before access to the protected object can be granted.
static int	QOP_NONE The quality of protection required between caller and the domain before access to the protected object can be granted.
static int	QOP_PRIVACY The quality of protection required between caller and the domain before access to the protected object can be granted.
static java.util.HashSet	ReadOnlyAttributes

Method Summary

Methods inherited from class java.lang.Object

equals, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

AZN_MOD_SVC_RAD_2AB

public static final java.lang.String AZN_MOD_SVC_RAD_2AB

The default Credential Modification service

See Also:

Constant Field Values

AZN_MOD_RAD_GROUP_NAMES

public static final java.lang.String AZN_MOD_RAD_GROUP_NAMES

Input attribute: the groups to be added to the credential

See Also:

Constant Field Values

AZN_MOD_RAD_OPERATION

public static final java.lang.String AZN_MOD_RAD_OPERATION

Input attribute: indication if we're removing or adding groups.

See Also:

Constant Field Values

AZN_MOD_RAD_OP_ADD

public static final java.lang.String AZN_MOD_RAD_OP_ADD

We're adding groups

See Also:

Constant Field Values

AZN_MOD_RAD_OP_REMOVE

public static final java.lang.String AZN_MOD_RAD_OP_REMOVE

We're removing groups

See Also:

Constant Field Values

AZN_ENT_SVC_PD_POBJ

public static final java.lang.String AZN_ENT_SVC_PD_POBJ

Entitlements Service ID: Policy Director Protected Object Entitlements. This service takes a credential, a directory within the protected object tree and a set of operations and returns the list of protected objects in the given directory and its subdirectories for which the given aznAPI credential has permission to perform the requested set of operations. The output is returned as a multi-string valued attribute.

See Also:

Constant Field Values

AZN_ENT_SVC_PD_POBJ_PATH

public static final java.lang.String AZN_ENT_SVC_PD_POBJ_PATH

Input attribute: the protected object directory path to be searched

See Also:

Constant Field Values

AZN_ENT_SVC_PD_POBJ_REQD_OPS

public static final java.lang.String AZN_ENT_SVC_PD_POBJ_REQD_OPS

Input attribute: the requested set of operations for the credential

See Also:

Constant Field Values

AZN_ENT_SVC_PD_POBJ_MATCHES

public static final java.lang.String AZN_ENT_SVC_PD_POBJ_MATCHES

Output attribute: the list of objects which match the input criteria

See Also:

Constant Field Values

AZN_PERMINFO_ALL_ATTRS

public static final java.lang.String AZN_PERMINFO_ALL_ATTRS

permission-info attribute: all attributes

See Also:

Constant Field Values

AZN_PERMINFO_ALL_ACL_EXT_ATTRS

public static final java.lang.String AZN_PERMINFO_ALL_ACL_EXT_ATTRS

permission-info attribute: all ACL extended attributes

See Also:

Constant Field Values

AZN_PERMINFO_ALL_POP_EXT_ATTRS

public static final java.lang.String AZN_PERMINFO_ALL_POP_EXT_ATTRS

permission-info attribute: all POP extended attributes

See Also:

Constant Field Values

AZN_PERMINFO_ALL_POBJ_EXT_ATTRS

public static final java.lang.String AZN_PERMINFO_ALL_POBJ_EXT_ATTRS

permission-info attribute: all protected object extended attributes

See Also:

Constant Field Values

AZN_PERMINFO_ACL_EXT_ATTRS

public static final java.lang.String AZN_PERMINFO_ACL_EXT_ATTRS

permission-info attribute: ACL extended attributes scope

See Also:

Constant Field Values

AZN_PERMINFO_POP_EXT_ATTRS

public static final java.lang.String AZN_PERMINFO_POP_EXT_ATTRS

permission-info attribute: POP extended attributes scope

See Also:

Constant Field Values

AZN_PERMINFO_POBJ_EXT_ATTRS

public static final java.lang.String AZN_PERMINFO_POBJ_EXT_ATTRS

permission-info attribute: protected object extended attributes scope

See Also:

Constant Field Values

AZN_POP_EXT_ATTR_LOC

public static final java.lang.String AZN_POP_EXT_ATTR_LOC

permission-info attribute: POP extended attributes object location

See Also:

Constant Field Values

AZN_ACL_EXT_ATTR_LOC

public static final java.lang.String AZN_ACL_EXT_ATTR_LOC

permission-info attribute: ACL extended attributes object location

See Also:

Constant Field Values

AZN_OBJECT_EXT_ATTR_LOC

public static final java.lang.String AZN_OBJECT_EXT_ATTR_LOC

permission-info attribute: protected object extended attributes object location

See Also:

Constant Field Values

AZN_POBJ_EXT_ATTR_LOC

public static final java.lang.String AZN_POBJ_EXT_ATTR_LOC

See Also:

Constant Field Values

AZN_PERMINFO_QOP

public static final java.lang.String AZN_PERMINFO_QOP

permission-info attribute: quality of protection. The quality of protection required between caller and the domain before access to the protected object can be granted. The QOP value is always returned and will be one of "none", "integrity" or "privacy".

See Also:

Constant Field Values

AZN_PERMINFO_QOP_ULONG

public static final java.lang.String AZN_PERMINFO_QOP_ULONG

permission-info attribute: quality of protection

See Also:

Constant Field Values

AZN_PERMINFO_STEPUP_LEVEL

public static final java.lang.String AZN_PERMINFO_STEPUP_LEVEL

permission-info attribute: step-up authentication level

See Also:

Constant Field Values

AZN_PERMINFO_WARNINGMODE_ULONG

public static final java.lang.String AZN_PERMINFO_WARNINGMODE_ULONG

permission-info attribute: warning mode. When warning mode is enabled access is always granted. If access should not have been granted then the access is logged.

See Also:

Constant Field Values

AZN_PERMINFO_WARNINGMODEPERMITTED_ULONG

public static final java.lang.String AZN_PERMINFO_WARNINGMODEPERMITTED_ULONG

permission-info attribute: warning mode permitted. Access permitted because of warning mode. The boolean indicator is used to tell the caller that access was granted because warning mode is enabled.

See Also:

Constant Field Values

AZN_PERMINFO_AUDITLEVEL_ULONG

public static final java.lang.String AZN_PERMINFO_AUDITLEVEL_ULONG

permission-info attribute: audit level. Audit information that is used for this authorization check.

See Also:

Constant Field Values

AZN_PERMINFO_RULES_ADI_REQUEST

public static final java.lang.String AZN_PERMINFO_RULES_ADI_REQUEST

permission-info attribute: authorization rules ADI request. A list of string ADI container names that the rules evaluator needs in order to evaluate the current rule. Upon receiving this attribute in the permission info from an access decision call the resource manager should collate the request containers of data, add them to the app_context parameter and call the access decision interface again.

See Also:

Constant Field Values

AZN_PERMINFO_REASON_RULE_FAILED

public static final java.lang.String AZN_PERMINFO_REASON_RULE_FAILED

permission-info attribute: authorization rule fail reason. A string indicating the reason that a rule failed. This is returned in the permission info from an access decision call when the rule failed and a reason string was set on the rule by the policy administrator. The string is user-specific and not mandatory.

See Also:

Constant Field Values

AZN_PERMINFO_DYNADI_REDIRECT_URL

public static final java.lang.String AZN_PERMINFO_DYNADI_REDIRECT_URL

permission-info attribute: dynADI redirect URL. WebSEAL/dynADI specific. The URL that WebSEAL should redirect the user brower to in the event that the dynamic ADI retrieval module needs to interact with the user before ADI can be retrieved. Refer to the WebSEAL documentation for more info.

See Also:

Constant Field Values

AZN_DYNADI_TARGET_URL

public static final java.lang.String AZN_DYNADI_TARGET_URL

WebSEAL/dynADI specific. The full target URL that the caller is requesting. This is required by dynADI in order to enable it to return the browser to the original requested URL once its interaction with the user is complete. This attribute is passed into the access decision by WebSEAL. Refer to the WebSEAL documentation for more info.

See Also:

Constant Field Values

AZN_PERMINFO_FAIL_REASON

public static final java.lang.String AZN_PERMINFO_FAIL_REASON

permission-info attribute: authorization fail reason return code

See Also:

Constant Field Values

QOP_NONE

public static final int QOP_NONE

The quality of protection required between caller and the domain before access to the protected object can be granted. In this case, no requirements have been placed.

See Also:

Constant Field Values

QOP_INTEGRITY

public static final int QOP_INTEGRITY

The quality of protection required between caller and the domain before access to the protected object can be granted. In this case, data integrity must be maintained.

See Also:

Constant Field Values

QOP_PRIVACY

public static final int QOP_PRIVACY

The quality of protection required between caller and the domain before access to the protected object can be granted. In this case, data privacy must be maintained.

See Also:

Constant Field Values

AZN_VALTYPE_BUFFER

public static final int AZN_VALTYPE_BUFFER

The attribute is a byte array.

See Also:

Constant Field Values

AZN_VALTYPE_POBJ

public static final int AZN_VALTYPE_POBJ

The attribute is a Security Access Manager administration service protected object.

See Also:

Constant Field Values

AZN_VALTYPE_STRING

public static final int AZN_VALTYPE_STRING

The attribute is a UTF8 String.

See Also:

Constant Field Values

AZN_VALTYPE_ULONG

public static final int AZN_VALTYPE_ULONG

The attribute is an unsigned long.

See Also:

Constant Field Values

AZN_PERMISSION_ALLOWED

public static final int AZN_PERMISSION_ALLOWED

Indicates that a user is granted a specified permission.

See Also:

Constant Field Values

AZN_PERMISSION_DENIED

public static final int AZN_PERMISSION_DENIED

Indicates that a user is denied a specified permission.

See Also:

Constant Field Values

AZN_C_INITIATOR_INDEX

public static final int AZN_C_INITIATOR_INDEX

Initiator principal index into the credential.

See Also:

Constant Field Values

AZN_CRED_AUTHZN_ID

public static final java.lang.String AZN_CRED_AUTHZN_ID

read-only credential attribute name

See Also:

Constant Field Values

AZN_CRED_GROUP_REGISTRY_IDS

public static final java.lang.String AZN_CRED_GROUP_REGISTRY_IDS

read-only credential attribute name

See Also:

Constant Field Values

AZN_CRED_GROUP_UUIDS

public static final java.lang.String AZN_CRED_GROUP_UUIDS

read-only credential attribute name

See Also:

Constant Field Values

AZN_CRED_GROUP_NAMES

public static final java.lang.String AZN_CRED_GROUP_NAMES

read-only credential attribute name

See Also:

Constant Field Values

AZN_CRED_MECH_ID

public static final java.lang.String AZN_CRED_MECH_ID

read-only credential attribute name

See Also:

Constant Field Values

AZN_CRED_PRINCIPAL_DOMAIN

public static final java.lang.String AZN_CRED_PRINCIPAL_DOMAIN

read-only credential attribute name

See Also:

Constant Field Values

AZN_CRED_PRINCIPAL_NAME

public static final java.lang.String AZN_CRED_PRINCIPAL_NAME

read-only credential attribute name

See Also:

Constant Field Values

AZN_CRED_PRINCIPAL_UUID

public static final java.lang.String AZN_CRED_PRINCIPAL_UUID

read-only credential attribute name

See Also:

Constant Field Values

AZN_CRED_REGISTRY_ID

public static final java.lang.String AZN_CRED_REGISTRY_ID

read-only credential attribute name

See Also:

Constant Field Values

AZN_CRED_VERSION

public static final java.lang.String AZN_CRED_VERSION

read-only credential attribute name

See Also:

Constant Field Values

AUTHENTICATION_LEVEL

public static final java.lang.String AUTHENTICATION_LEVEL

modifiable credential attribute name

See Also:

Constant Field Values

AZN_CRED_AUTH_METHOD

public static final java.lang.String AZN_CRED_AUTH_METHOD

modifiable credential attribute name

See Also:

Constant Field Values

AZN_CRED_AUTHNMECH_INFO

public static final java.lang.String AZN_CRED_AUTHNMECH_INFO

modifiable credential attribute name

See Also:

Constant Field Values

AZN_CRED_BROWSER_INFO

public static final java.lang.String AZN_CRED_BROWSER_INFO

modifiable credential attribute name

See Also:

Constant Field Values

AZN_CRED_IP_ADDRESS

public static final java.lang.String AZN_CRED_IP_ADDRESS

modifiable credential attribute name

See Also:

Constant Field Values

AZN_CRED_QOP_INFO

public static final java.lang.String AZN_CRED_QOP_INFO

modifiable credential attribute name

See Also:

Constant Field Values

AZN_CRED_USER_INFO

public static final java.lang.String AZN_CRED_USER_INFO

modifiable credential attribute name

See Also:

Constant Field Values

AZN_CRED_NETWORK_ADDRESS_STR

public static final java.lang.String AZN_CRED_NETWORK_ADDRESS_STR

modifiable credential attribute name

See Also:

Constant Field Values

AZN_CRED_NETWORK_ADDRESS_BIN

public static final java.lang.String AZN_CRED_NETWORK_ADDRESS_BIN

modifiable credential attribute name

See Also:

Constant Field Values

AZN_CRED_IP_FAMILY

public static final java.lang.String AZN_CRED_IP_FAMILY

modifiable credential attribute name

See Also:

Constant Field Values

AZN_CRED_IP_FAMILY_AF_INET

public static final java.lang.String AZN_CRED_IP_FAMILY_AF_INET

modifiable credential attribute name

See Also:

Constant Field Values

AZN_CRED_IP_FAMILY_AF_INET6

public static final java.lang.String AZN_CRED_IP_FAMILY_AF_INET6

modifiable credential attribute name

See Also:

Constant Field Values

ReadOnlyAttributes

public static java.util.HashSet ReadOnlyAttributes

DB_SEQUENCE

public static final java.lang.String DB_SEQUENCE

See Also:

Constant Field Values