| author | stefank |
| Mon, 04 Apr 2016 09:15:01 +0200 | |
| changeset 37241 | b9961c99c356 |
| parent 30038 | 632939157af2 |
| child 36967 | d041d2e80712 |
| permissions | -rw-r--r-- |
|
30038
632939157af2
8075007: Additional tests for krb5-related cipher suites with unbound server
asmotrak
parents:
diff
changeset
|
1 |
grant {
|
|
632939157af2
8075007: Additional tests for krb5-related cipher suites with unbound server
asmotrak
parents:
diff
changeset
|
2 |
permission java.util.PropertyPermission "*", "read,write"; |
|
632939157af2
8075007: Additional tests for krb5-related cipher suites with unbound server
asmotrak
parents:
diff
changeset
|
3 |
permission java.net.SocketPermission "*:*", "listen,resolve,accept,connect"; |
|
632939157af2
8075007: Additional tests for krb5-related cipher suites with unbound server
asmotrak
parents:
diff
changeset
|
4 |
permission java.io.FilePermission "*", "read,write,delete"; |
|
632939157af2
8075007: Additional tests for krb5-related cipher suites with unbound server
asmotrak
parents:
diff
changeset
|
5 |
permission java.lang.RuntimePermission "accessDeclaredMembers"; |
|
632939157af2
8075007: Additional tests for krb5-related cipher suites with unbound server
asmotrak
parents:
diff
changeset
|
6 |
permission java.lang.reflect.ReflectPermission "suppressAccessChecks"; |
|
632939157af2
8075007: Additional tests for krb5-related cipher suites with unbound server
asmotrak
parents:
diff
changeset
|
7 |
permission java.lang.RuntimePermission "accessClassInPackage.*"; |
|
632939157af2
8075007: Additional tests for krb5-related cipher suites with unbound server
asmotrak
parents:
diff
changeset
|
8 |
permission javax.security.auth.AuthPermission "doAs"; |
|
632939157af2
8075007: Additional tests for krb5-related cipher suites with unbound server
asmotrak
parents:
diff
changeset
|
9 |
permission javax.security.auth.AuthPermission "getSubject"; |
|
632939157af2
8075007: Additional tests for krb5-related cipher suites with unbound server
asmotrak
parents:
diff
changeset
|
10 |
permission javax.security.auth.AuthPermission |
|
632939157af2
8075007: Additional tests for krb5-related cipher suites with unbound server
asmotrak
parents:
diff
changeset
|
11 |
"createLoginContext.server_star"; |
|
632939157af2
8075007: Additional tests for krb5-related cipher suites with unbound server
asmotrak
parents:
diff
changeset
|
12 |
permission javax.security.auth.AuthPermission |
|
632939157af2
8075007: Additional tests for krb5-related cipher suites with unbound server
asmotrak
parents:
diff
changeset
|
13 |
"createLoginContext.server_multiple_principals"; |
|
632939157af2
8075007: Additional tests for krb5-related cipher suites with unbound server
asmotrak
parents:
diff
changeset
|
14 |
permission javax.security.auth.AuthPermission "modifyPrincipals"; |
|
632939157af2
8075007: Additional tests for krb5-related cipher suites with unbound server
asmotrak
parents:
diff
changeset
|
15 |
permission javax.security.auth.PrivateCredentialPermission "javax.security.auth.kerberos.KeyTab java.security.Principal \"krb5.keytab.data\"", "read"; |
|
632939157af2
8075007: Additional tests for krb5-related cipher suites with unbound server
asmotrak
parents:
diff
changeset
|
16 |
|
|
632939157af2
8075007: Additional tests for krb5-related cipher suites with unbound server
asmotrak
parents:
diff
changeset
|
17 |
// clients have a permission to use all service principals |
|
632939157af2
8075007: Additional tests for krb5-related cipher suites with unbound server
asmotrak
parents:
diff
changeset
|
18 |
permission javax.security.auth.kerberos.ServicePermission "*", "initiate"; |
|
632939157af2
8075007: Additional tests for krb5-related cipher suites with unbound server
asmotrak
parents:
diff
changeset
|
19 |
|
|
632939157af2
8075007: Additional tests for krb5-related cipher suites with unbound server
asmotrak
parents:
diff
changeset
|
20 |
// server has a service permission |
|
632939157af2
8075007: Additional tests for krb5-related cipher suites with unbound server
asmotrak
parents:
diff
changeset
|
21 |
// to accept only service1 and service3 principals |
|
632939157af2
8075007: Additional tests for krb5-related cipher suites with unbound server
asmotrak
parents:
diff
changeset
|
22 |
permission javax.security.auth.kerberos.ServicePermission |
|
632939157af2
8075007: Additional tests for krb5-related cipher suites with unbound server
asmotrak
parents:
diff
changeset
|
23 |
"host/service1.localhost@TEST.REALM", "accept"; |
|
632939157af2
8075007: Additional tests for krb5-related cipher suites with unbound server
asmotrak
parents:
diff
changeset
|
24 |
permission javax.security.auth.kerberos.ServicePermission |
|
632939157af2
8075007: Additional tests for krb5-related cipher suites with unbound server
asmotrak
parents:
diff
changeset
|
25 |
"host/service3.localhost@TEST.REALM", "accept"; |
|
632939157af2
8075007: Additional tests for krb5-related cipher suites with unbound server
asmotrak
parents:
diff
changeset
|
26 |
}; |