|
|||||||||
PREV NEXT | FRAMES NO FRAMES |
See:
Description
Provides the Java classes and methods necessary for performing authorization and administration functions in IBM Tivoli Access Manager (formerly known as Tivoli Policy Director).
The Java administration and authorization classes and methods are implemented completely in the Java language. The Java methods do not use the existing C APIs to perform their function.
The Java authorization methods are defined in the following Java classes.
PDLoginModule
class handles the
authentication of a Tivoli Access Manager
user using the Java Authentication and Authorization Service (JAAS) and
creates a PDPrincipal object containing
the Tivoli Access Manager user's credentials when authentication is successful.
PDPrincipal
class implements the
Principal
interface and contains the
credentials of an authenticated Tivoli Access Manager user.
PDPermission
class represents an
authorization permission for accessing a resource object in the secure domain.
PDStatics
class defines the
constants used by the authorization methods.
The Java administration classes and methods communicate directly with the policy server and provide the same functions available through the ivadmin_ C APIs and the pdadmin command line interface (CLI). The Java administration methods are defined in the following classes.
PDAdmin
class is used to perform
initialization and shut down operations associated with using the
Tivoli Access Manager administration classes and methods.
PDContext
class encapsulates the
communication session between the
application and the Tivoli Access Manager policy server.
PDDomain
class represents a
data domain within the Tivoli Access Manager installation. Users and
processes must be authenticated to a domain in order to access data within it.
PDUser
class represents a user in
the Tivoli Access Manager policy server.PDGroup
class represents a group
in the Tivoli Access Manager policy server.PDPolicy
class represents the
policy information that is associated
with a particular Tivoli Access Manager user or, in the case of the global
policy, that is associated with all users.
PDAcl
class represents an access
control list, or ACL, which consists of a list of ACL entries.
PDAclEntry
class represents an
entry in an access control list (ACL). PDAclEntryAnyOther
class represents the any-other ACL entry.PDAclEntryGroup
class
represents a group ACL entry.PDAclEntryUnAuth
class
represents the unauthenticated ACL entry.PDAclEntryUser
class
represents a user ACL entry.PDPop
class represents a protected
object policy (POP) which can be attached to a protected object.
PDAction
class represents a given permission.
PDActionGroup
class represents a
collection of PDAction objects.
PDAuthzRule
class represents a Tivoli Access Manager authorization rule. The evaluation of an authorization
rule helps to determine access authorization to a protected object.
PDProtObject
class
represents a protected object. A protected object represents a resource
to be protected. A protected object might have an access control
list (ACL) attached to it. It also might have a protected object
policy (POP) or an authorization rule attached to it, as well.
PDProtObjectSpace
class
allows the manipulation of object
spaces within the Tivoli Access Manager policy server. An object space is a
logical grouping of protected objects
representing a set of related resources to be protected.
PDRgyGroupName
class
represents the name of a Tivoli Access Manager
group in the underlying user registry.
PDRgyUserName
class
represents the name of a Tivoli Access Manager
user in the underlying user registry.
PDRgyName
class represents the
name of a Tivoli Access Manager
object in the underlying user registry. This object is either a Tivoli Access
Manager user or a Tivoli Access Manager group.
PDAppSvrSpecLocal
and
PDAppSvrSpecRemote
classes are
used to specify configuration information for Tivoli Access Manager Java
application servers.
PDAppSvrConfig
class is
used to create, delete, and change the configuration for a
Tivoli Access Manager Java application server.
PDSvrInfo
class is used to specify a Tivoli Access Manager policy or authorization server
and is used when creating or changing the configuration of a Java application
server.
PDAppSvrInfo
class is used to retrieve and view a Tivoli Access Manager Java application
server's configuration information.
PDServer
class represents a Tivoli Access
Manager policy server, authorization server, or other application server.
PDSSOResource
class represents a
Tivoli Access Manager single sign-on (SSO) resource.
PDSSOResourceGroup
class
represents a Tivoli Access Manager single sign-on (SSO) resource group.
PDSSOCred
class represents a
Tivoli Access Manager single sign-on (SSO) resource credential.
CredID
class represents the
credential identification information in each member of the list returned by
the PDSSOCred.listSSOCreds
method.
CredInfo
class represents the
credential information in each member of the list returned by the
PDSSOCred.listAndShowSSOCreds
method.
PDException
class creates an
exception to reflect that an error or other unexpected condition occurred.
PDMessage
class represents a
single Tivoli Access Manager message and includes
the message code, severity, and the localized message text.
PDMessages
class represents a
list of Tivoli Access Manager messages.The following classes provide common functions used in both the Java authorization and administration classes.
PDAttrs
class represents a list of
Tivoli Access Manager attributes.
PDAttrValue
class represents the
value of a Tivoli Access Manager attribute.
PDAttrValues
class represents a
collection of values for a particular Tivoli Access Manager attribute that is
unordered and does not allow duplicates.
PDAttrValueList
class
represents a collection of values for a particular Tivoli Access Manager
attribute that is ordered and allows duplicates.
PDAdmSvcPobj
class
represents a protected object backed by an authorization administration
service.
The com.tivoli.pd.jcfg.SvrSslCfg configuration program is used to configure a Java application to use the Java authorization and administration classes. The SvrSslCfg program provides services similar to those provided to C applications by the svrsslcfg command line interface (CLI). Only use the SvrSslCfg program for configuring a Java application. The SvrSslCfg Java configuration program is documented in the IBM Tivoli Access Manager Authorization Java Classes Developer's Reference.
Additional information on authorization and administration functions in IBM Tivoli Access Manager is provided in these documents, available on the customer support Web site.
|
|||||||||
PREV NEXT | FRAMES NO FRAMES |