|
||||||||
PREV NEXT | FRAMES NO FRAMES |
See:
Description
Provides the Java classes and methods necessary for performing authorization and administration functions in IBM Tivoli Access Manager (formerly known as Tivoli Policy Director).
The Java administration and authorization classes and methods are implemented completely in the Java language. The Java methods do not use the existing C APIs to perform their function.
The Java authorization methods are defined in the following Java classes.
PDLoginModule
class handles the authentication of an Access Manager
user using the Java Authentication and Authorization Service (JAAS) and creates a PDPrincipal object containing
the Access Manager user's credentials when authentication is successful.
PDPrincipal
class implements the
Principal
interface and contains the credentials of an authenticated
Access Manager user.
PDPermission
class represents an authorization permission for accessing
a resource object in the secure domain.
PDStatics
class defines the constants used by the authorization methods.
The Java administration classes and methods communicate directly with the policy server and currently provide only a subset of the functions available through the ivadmin_ C APIs and the pdadmin command line interface (CLI). The Java administration methods are defined in the following classes.
PDAdmin
class is used to perform initialization and shut down operations
associated with using the Access Manager administration classes and methods.
PDContext
class encapsulates the communication session between the
application and the Access Manager policy server.
PDUser
class represents a user in the Access Manager policy server.PDGroup
class represents a group in the Access Manager policy server.PDPolicy
class represents the policy information that is associated
with a particular Access Manager user or, in the case of the global policy, that is associated with all users.
PDAcl
class represents an access control list, or ACL, which consists
of a list of ACL entries.
PDAclEntry
class represents an entry in an access control list (ACL). PDAclEntryAnyOther
class represents the any-other ACL entry.PDAclEntryGroup
class represents a group ACL entry.PDAclEntryUnAuth
class represents the unauthenticated ACL entry.PDAclEntryUser
class represents a user ACL entry.PDProtObject
class represents a protected object. A protected
object represents a resource to be protected and has an access control list (ACL) attached to it.
PDProtObjectSpace
class allows the manipulation of object
spaces within the Access Manager policy server. An object space is a logical grouping of protected objects
representing a set of related resources to be protected.
PDRgyGroupName
class represents the name of an Access Manager
group in the underlying user registry.
PDRgyUserName
class represents the name of an Access Manager
user in the underlying user registry.
PDRgyName
class represents the name of an Access Manager
object in the underlying user registry. This object is either an Access Manager user or an Access Manager group.
PDException
class creates an exception to reflect that an error or
other unexpected condition occurred.
PDMessage
class represents a single Access Manager message and includes
the message code, severity, and the localized message text.
PDMessages
class represents a list of Access Manager messages.The following classes provide common functions used in both the Java authorization and administration classes.
PDAttrs
class represents a list of Access Manager attributes.
PDAttrValue
class represents the value of an Access Manager attribute.
PDAttrValues
class represents a collection of values for a particular
Access Manager attribute.
The SvrSslCfg
class is used to configure a Java application to use the
Java authorization and administration classes. The SvrSslCfg class provides services similar
to those provided to C applications by the svrsslcfg command line interface (CLI).
Additional information on authorization and administration functions in IBM Tivoli Access Manager is provided in these documents, available on the product CD and on the support Web site.
|
||||||||
PREV NEXT | FRAMES NO FRAMES |