1 a.dunfey 1.1 // ===================================================================
  2              // Title: User_AuthenticationReqmt
  3              // $State: Exp $
  4              // $Date: 2004/11/29 18:31:43 $
  5              // $RCSfile: User_AuthenticationReqmt.mof,v $
  6              // $Revision: 1.2.2.3 $
  7              // ===================================================================
  8              //#pragma inLine ("Includes/copyright.inc")
  9              // Copyright 1998-2005 Distributed Management Task Force, Inc. (DMTF).
 10              // All rights reserved.
 11              // DMTF is a not-for-profit association of industry members dedicated
 12              // to promoting enterprise and systems management and interoperability.
 13              // DMTF specifications and documents may be reproduced for uses
 14              // consistent with this purpose by members and non-members,
 15              // provided that correct attribution is given.
 16              // As DMTF specifications may be revised from time to time,
 17              // the particular version and release date should always be noted.
 18              // 
 19              // Implementation of certain elements of this standard or proposed
 20              // standard may be subject to third party patent rights, including
 21              // provisional patent rights (herein "patent rights"). DMTF makes
 22 a.dunfey 1.1 // no representations to users of the standard as to the existence
 23              // of such rights, and is not responsible to recognize, disclose, or
 24              // identify any or all such third party patent right, owners or
 25              // claimants, nor for any incomplete or inaccurate identification or
 26              // disclosure of such rights, owners or claimants. DMTF shall have no
 27              // liability to any party, in any manner or circumstance, under any
 28              // legal theory whatsoever, for failure to recognize, disclose, or
 29              // identify any such third party patent rights, or for such party's
 30              // reliance on the standard or incorporation thereof in its product,
 31              // protocols or testing procedures. DMTF shall have no liability to
 32              // any party implementing such standard, whether such implementation
 33              // is foreseeable or not, nor to any patent owner or claimant, and shall
 34              // have no liability or responsibility for costs or losses incurred if
 35              // a standard is withdrawn or modified after publication, and shall be
 36              // indemnified and held harmless by any party implementing the
 37              // standard from any and all claims of infringement by a patent owner
 38              // for such implementations.
 39              // 
 40              // For information about patents held by third-parties which have
 41              // notified the DMTF that, in their opinion, such patent may relate to
 42              // or impact implementations of DMTF standards, visit
 43 a.dunfey 1.1 // http://www.dmtf.org/about/policies/disclosures.php.
 44              //#pragma inLine
 45              // ===================================================================
 46              // Description: The User Model extends the management concepts that
 47              //              are related to users and security.
 48              //              This file defines the concepts and classes related to
 49              //              requirements for authentication.
 50              // 
 51              //              The object classes below are listed in an order that
 52              //              avoids forward references. Required objects, defined
 53              //              by other working groups, are omitted.
 54              // ===================================================================
 55              // Change Log for v2.8 Final
 56              //  CR1218 - All deprecations promoted to Final
 57              //  CR1235 - Accepted the subclassing change for HostedAuthentication
 58              //           Requirement
 59              // 
 60              // Change Log for v2.8 Preliminary (Company Review)
 61              //  CR1107 - Deprecated:
 62              //            AuthenticationRequirement
 63              //            HostedAuthenticationRequirement
 64 a.dunfey 1.1 //            AuthenticatedForUse
 65              //            RequireCredentialFrom
 66              //            AuthenticationTarget
 67              //  CR1128 - Changed subclassing of HostedAuthenticationRequirement
 68              //          from Dependency to HostedDependency.
 69              // 
 70              // Change Log for v2.8 Preliminary - None
 71              // 
 72              // Change Log for v2.7 - None
 73              // ===================================================================
 74              
 75              #pragma Locale ("en_US")
 76              
 77              
 78              // ==================================================================
 79              // AuthenticationRequirement
 80              // ==================================================================
 81                 [Deprecated { "CIM_AuthenticationCondition",
 82                     "CIM_AuthenticationRule", "CIM_SecuritySensitivity" },
 83                     Version ( "2.8.0" ), Description (
 84                     "CIM_AuthenticationRequirement provides, through its "
 85 a.dunfey 1.1        "associations, the authentication requirements for access to "
 86                     "system resources. For a particular set of target resources, "
 87                     "the AuthenticationService may require that credentials be "
 88                     "issued by a specific CredentialManagementService. The "
 89                     "AuthenticationRequirement class is weak to the system (e.g., "
 90                     "ComputerSystem or Administrative Domain) for which the "
 91                     "requirements apply. \n"
 92                     "\n"
 93                     "Note that this class was defined before the Policy Model "
 94                     "existed, and is deprecated in lieu of authentication policy - "
 95                     "specifically, the AuthenticationCondition and "
 96                     "AuthenticationRule classes. In the updated design, "
 97                     "AuthenticationCondition describes the specific combinations of "
 98                     "credentials (or alternative credentials) that are required in "
 99                     "order to authenticate an Identity. This allows a more explicit "
100                     "and flexible description of authentication requirements. Also, "
101                     "the definition of 'security classification' as a property of "
102                     "this class was problematic - since it could not be assigned to "
103                     "an element in a straight forward fashion. To correct this "
104                     "issue, the SecuritySensitivity class (and its association, "
105                     "ElementSecuritySensitivity) are defined.")]
106 a.dunfey 1.1 class CIM_AuthenticationRequirement : CIM_LogicalElement {
107              
108                    [Deprecated { "CIM_AuthenticationRule.SystemCreationClassName" },
109                     Key, Propagated ( "CIM_System.CreationClassName" ), 
110                     Description (
111                        "Hosting systemcreation class name."), 
112                     MaxLen ( 256 )]
113                 string SystemCreationClassName;
114              
115                    [Deprecated { "CIM_AuthenticationRule.SystemName" }, Key,
116                     Propagated ( "CIM_System.Name" ), Description (
117                        "Hosting system name."), 
118                     MaxLen ( 256 )]
119                 string SystemName;
120              
121                    [Deprecated { "CIM_AuthenticationRule.CreationClassName" }, Key, 
122                     Description (
123                        "CreationClassName indicates the name of the class or the "
124                        "subclass used in the creation of an instance. When used "
125                        "with the other key properties of this class, this property "
126                        "allows all instances of this class and its subclasses to be "
127 a.dunfey 1.1           "uniquely identified."), 
128                     MaxLen ( 256 )]
129                 string CreationClassName;
130              
131                    [Deprecated { "CIM_AuthenticationRule.PolicyRuleName" }, Key,
132                     Override ( "Name" ), Description (
133                        "The Name property defines the unique label, in the context "
134                        "of the hosting system, by which the "
135                        "AuthenticationRequirement is known."), 
136                     MaxLen ( 256 )]
137                 string Name;
138              
139                    [Deprecated { "CIM_SecuritySensitivity.SecurityLevel" }, 
140                     Description (
141                        "The SecurityClassification property specifies a named level "
142                        "of security associated with the AuthenticationRequirement, "
143                        "e.g., 'Confidential', 'Top Secret', etc.")]
144                 string SecurityClassification;
145              };
146              
147              
148 a.dunfey 1.1 // ==================================================================
149              // HostedAuthenticationRequirement
150              // ==================================================================
151                 [Association, Deprecated { "CIM_PolicyRuleInSystem" },
152                     Version ( "2.8.0" ), Description (
153                     "CIM_HostedAuthenticationRequirement is an association used to "
154                     "provide the namespace scoping of AuthenticationRequirement. "
155                     "The hosted requirements may or may not apply to resources on "
156                     "the hosting system. Since the AuthenticationRequirement class "
157                     "is deprecated in lieu of explicit policy rules, this class is "
158                     "similarly deprecated to its 'policy' equivalent.")]
159              class CIM_HostedAuthenticationRequirement : CIM_HostedDependency {
160              
161                    [Deprecated { "CIM_PolicyRuleInSystem.Antecedent" },
162                        Override ( "Antecedent" ), Min ( 1 ), Max ( 1 ), 
163                     Description (
164                        "The hosting system.")]
165                 CIM_System REF Antecedent;
166              
167                    [Deprecated { "CIM_PolicyRuleInSystem.Dependent" },
168                        Override ( "Dependent" ), Weak, Description (
169 a.dunfey 1.1           "The hosted AuthenticationRequirement.")]
170                 CIM_AuthenticationRequirement REF Dependent;
171              };
172              
173              
174              // ==================================================================
175              // AuthenticateForUse
176              // ==================================================================
177                 [Association, Deprecated { "No value" }, Version ( "2.8.0" ), 
178                  Description (
179                     "CIM_AuthenticateForUse is an association used to provide an "
180                     "AuthenticationService with the AuthenticationRequirement it "
181                     "needs to do its job. This association is unnecessary and "
182                     "therefore deprecated, since it is implied that an Identity "
183                     "MUST be authenticated (its CurrentlyAuthenticatedBoolean set "
184                     "to TRUE) in order to have any Privileges.")]
185              class CIM_AuthenticateForUse : CIM_Dependency {
186              
187                    [Deprecated { "No value" }, Override ( "Antecedent" ), 
188                     Description (
189                        "AuthenticationRequirementfor use.")]
190 a.dunfey 1.1    CIM_AuthenticationRequirement REF Antecedent;
191              
192                    [Deprecated { "No value" }, Override ( "Dependent" ), 
193                     Description (
194                        "AuthenticationServicethat uses the requirements.")]
195                 CIM_AuthenticationService REF Dependent;
196              };
197              
198              
199              // ==================================================================
200              // RequireCredentialsFrom
201              // ==================================================================
202                 [Association, Deprecated { "CIM_AuthenticationCondition",
203                     "CIM_AuthenticationRule" }, Version ( "2.8.0" ), Description (
204                     "CIM_RequireCredentialsFrom is an association used to require "
205                     "that credentials are issued by particular CredentialManagement "
206                     "Services in order to authenticate a user. This association is "
207                     "deprecated in lieu of explicit declaration of the "
208                     "AuthenticationConditions in an AuthenticationRule. Instances "
209                     "of AuthenticationCondition describe the specific combinations "
210                     "of credentials (or alternative credentials) that are required "
211 a.dunfey 1.1        "to authenticate an Identity. This allows a more explicit and "
212                     "flexible description of authentication requirements.")]
213              class CIM_RequireCredentialsFrom : CIM_Dependency {
214              
215                    [Deprecated { "CIM_AuthenticationCondition" },
216                        Override ( "Antecedent" ), Description (
217                        "CredentialManagementService from which credentials are "
218                        "accepted for the associated AuthenticationRequirement.")]
219                 CIM_CredentialManagementService REF Antecedent;
220              
221                    [Deprecated { "CIM_AuthenticationRule" },
222                     Override ( "Dependent" ), Description (
223                        "AuthenticationRequirement that limits acceptable "
224                        "credentials.")]
225                 CIM_AuthenticationRequirement REF Dependent;
226              };
227              
228              
229              // ==================================================================
230              // AuthenticationTarget
231              // ==================================================================
232 a.dunfey 1.1    [Association, Deprecated { "CIM_PolicySetAppliesToElement" },
233                  Version ( "2.8.0" ), Description (
234                     "CIM_AuthenticationTarget is an association used to apply "
235                     "authentication requirements for access to specific resources. "
236                     "For example, a shared secret may be sufficient for access to "
237                     "unclassified resources, but for confidential resources, a "
238                     "stronger authentication may be required. Since the "
239                     "AuthenticationRequirement class is deprecated in lieu of "
240                     "explicit policy rules, this association is similarly "
241                     "deprecated to its 'policy' equivalent.")]
242              class CIM_AuthenticationTarget : CIM_Dependency {
243              
244                    [Deprecated { "CIM_PolicySetAppliesToElement.PolicySet" },
245                     Override ( "Antecedent" ), Description (
246                        "AuthenticationRequirement that applies to specific "
247                        "resources.")]
248                 CIM_AuthenticationRequirement REF Antecedent;
249              
250                    [Deprecated { "CIM_PolicySetAppliesToElement.ManagedElement" },
251                     Override ( "Dependent" ), Description (
252                        "Target resources that may be in a Collection or an "
253 a.dunfey 1.1           "individual ManagedElement. These resources are protected by "
254                        "the AuthenticationRequirement.")]
255                 CIM_ManagedElement REF Dependent;
256              };
257              
258              
259              // ===================================================================
260              // end of file
261              // ===================================================================