src/share/classes/javax/security/auth/kerberos/ServicePermission.java

Print this page

        

*** 60,70 **** * designated by the action. In the case of the TGT, granting this * permission also implies that the TGT can be obtained by an * Authentication Service exchange. * <p> * The possible actions are: ! * <p> * <pre> * initiate - allow the caller to use the credential to * initiate a security context with a service * principal. * --- 60,70 ---- * designated by the action. In the case of the TGT, granting this * permission also implies that the TGT can be obtained by an * Authentication Service exchange. * <p> * The possible actions are: ! * * <pre> * initiate - allow the caller to use the credential to * initiate a security context with a service * principal. *
*** 73,83 **** * principal. * </pre> * * For example, to specify the permission to access to the TGT to * initiate a security context the permission is constructed as follows: ! * <p> * <pre> * ServicePermission("krbtgt/EXAMPLE.COM@EXAMPLE.COM", "initiate"); * </pre> * <p> * To obtain a service ticket to initiate a context with the "host" --- 73,83 ---- * principal. * </pre> * * For example, to specify the permission to access to the TGT to * initiate a security context the permission is constructed as follows: ! * * <pre> * ServicePermission("krbtgt/EXAMPLE.COM@EXAMPLE.COM", "initiate"); * </pre> * <p> * To obtain a service ticket to initiate a context with the "host"
*** 87,97 **** * </pre> * <p> * For a Kerberized server the action is "accept". For example, the permission * necessary to access and use the secret key of the Kerberized "host" * service (telnet and the likes) would be constructed as follows: ! * <p> * <pre> * ServicePermission("host/foo.example.com@EXAMPLE.COM", "accept"); * </pre> * * @since 1.4 --- 87,97 ---- * </pre> * <p> * For a Kerberized server the action is "accept". For example, the permission * necessary to access and use the secret key of the Kerberized "host" * service (telnet and the likes) would be constructed as follows: ! * * <pre> * ServicePermission("host/foo.example.com@EXAMPLE.COM", "accept"); * </pre> * * @since 1.4