1 a.dunfey 1.1 // ===================================================================
2 // Title: User_AuthenticationReqmt
3 // $State: Exp $
4 // $Date: 2004/11/29 18:31:43 $
5 // $RCSfile: User_AuthenticationReqmt.mof,v $
6 // $Revision: 1.2.2.3 $
7 // ===================================================================
8 //#pragma inLine ("Includes/copyright.inc")
9 // Copyright 1998-2005 Distributed Management Task Force, Inc. (DMTF).
10 // All rights reserved.
11 // DMTF is a not-for-profit association of industry members dedicated
12 // to promoting enterprise and systems management and interoperability.
13 // DMTF specifications and documents may be reproduced for uses
14 // consistent with this purpose by members and non-members,
15 // provided that correct attribution is given.
16 // As DMTF specifications may be revised from time to time,
17 // the particular version and release date should always be noted.
18 //
19 // Implementation of certain elements of this standard or proposed
20 // standard may be subject to third party patent rights, including
21 // provisional patent rights (herein "patent rights"). DMTF makes
22 a.dunfey 1.1 // no representations to users of the standard as to the existence
23 // of such rights, and is not responsible to recognize, disclose, or
24 // identify any or all such third party patent right, owners or
25 // claimants, nor for any incomplete or inaccurate identification or
26 // disclosure of such rights, owners or claimants. DMTF shall have no
27 // liability to any party, in any manner or circumstance, under any
28 // legal theory whatsoever, for failure to recognize, disclose, or
29 // identify any such third party patent rights, or for such party's
30 // reliance on the standard or incorporation thereof in its product,
31 // protocols or testing procedures. DMTF shall have no liability to
32 // any party implementing such standard, whether such implementation
33 // is foreseeable or not, nor to any patent owner or claimant, and shall
34 // have no liability or responsibility for costs or losses incurred if
35 // a standard is withdrawn or modified after publication, and shall be
36 // indemnified and held harmless by any party implementing the
37 // standard from any and all claims of infringement by a patent owner
38 // for such implementations.
39 //
40 // For information about patents held by third-parties which have
41 // notified the DMTF that, in their opinion, such patent may relate to
42 // or impact implementations of DMTF standards, visit
43 a.dunfey 1.1 // http://www.dmtf.org/about/policies/disclosures.php.
44 //#pragma inLine
45 // ===================================================================
46 // Description: The User Model extends the management concepts that
47 // are related to users and security.
48 // This file defines the concepts and classes related to
49 // requirements for authentication.
50 //
51 // The object classes below are listed in an order that
52 // avoids forward references. Required objects, defined
53 // by other working groups, are omitted.
54 // ===================================================================
55 // Change Log for v2.8 Final
56 // CR1218 - All deprecations promoted to Final
57 // CR1235 - Accepted the subclassing change for HostedAuthentication
58 // Requirement
59 //
60 // Change Log for v2.8 Preliminary (Company Review)
61 // CR1107 - Deprecated:
62 // AuthenticationRequirement
63 // HostedAuthenticationRequirement
64 a.dunfey 1.1 // AuthenticatedForUse
65 // RequireCredentialFrom
66 // AuthenticationTarget
67 // CR1128 - Changed subclassing of HostedAuthenticationRequirement
68 // from Dependency to HostedDependency.
69 //
70 // Change Log for v2.8 Preliminary - None
71 //
72 // Change Log for v2.7 - None
73 // ===================================================================
74
75 #pragma Locale ("en_US")
76
77
78 // ==================================================================
79 // AuthenticationRequirement
80 // ==================================================================
81 [Deprecated { "CIM_AuthenticationCondition",
82 "CIM_AuthenticationRule", "CIM_SecuritySensitivity" },
83 Version ( "2.8.0" ), Description (
84 "CIM_AuthenticationRequirement provides, through its "
85 a.dunfey 1.1 "associations, the authentication requirements for access to "
86 "system resources. For a particular set of target resources, "
87 "the AuthenticationService may require that credentials be "
88 "issued by a specific CredentialManagementService. The "
89 "AuthenticationRequirement class is weak to the system (e.g., "
90 "ComputerSystem or Administrative Domain) for which the "
91 "requirements apply. \n"
92 "\n"
93 "Note that this class was defined before the Policy Model "
94 "existed, and is deprecated in lieu of authentication policy - "
95 "specifically, the AuthenticationCondition and "
96 "AuthenticationRule classes. In the updated design, "
97 "AuthenticationCondition describes the specific combinations of "
98 "credentials (or alternative credentials) that are required in "
99 "order to authenticate an Identity. This allows a more explicit "
100 "and flexible description of authentication requirements. Also, "
101 "the definition of 'security classification' as a property of "
102 "this class was problematic - since it could not be assigned to "
103 "an element in a straight forward fashion. To correct this "
104 "issue, the SecuritySensitivity class (and its association, "
105 "ElementSecuritySensitivity) are defined.")]
106 a.dunfey 1.1 class CIM_AuthenticationRequirement : CIM_LogicalElement {
107
108 [Deprecated { "CIM_AuthenticationRule.SystemCreationClassName" },
109 Key, Propagated ( "CIM_System.CreationClassName" ),
110 Description (
111 "Hosting systemcreation class name."),
112 MaxLen ( 256 )]
113 string SystemCreationClassName;
114
115 [Deprecated { "CIM_AuthenticationRule.SystemName" }, Key,
116 Propagated ( "CIM_System.Name" ), Description (
117 "Hosting system name."),
118 MaxLen ( 256 )]
119 string SystemName;
120
121 [Deprecated { "CIM_AuthenticationRule.CreationClassName" }, Key,
122 Description (
123 "CreationClassName indicates the name of the class or the "
124 "subclass used in the creation of an instance. When used "
125 "with the other key properties of this class, this property "
126 "allows all instances of this class and its subclasses to be "
127 a.dunfey 1.1 "uniquely identified."),
128 MaxLen ( 256 )]
129 string CreationClassName;
130
131 [Deprecated { "CIM_AuthenticationRule.PolicyRuleName" }, Key,
132 Override ( "Name" ), Description (
133 "The Name property defines the unique label, in the context "
134 "of the hosting system, by which the "
135 "AuthenticationRequirement is known."),
136 MaxLen ( 256 )]
137 string Name;
138
139 [Deprecated { "CIM_SecuritySensitivity.SecurityLevel" },
140 Description (
141 "The SecurityClassification property specifies a named level "
142 "of security associated with the AuthenticationRequirement, "
143 "e.g., 'Confidential', 'Top Secret', etc.")]
144 string SecurityClassification;
145 };
146
147
148 a.dunfey 1.1 // ==================================================================
149 // HostedAuthenticationRequirement
150 // ==================================================================
151 [Association, Deprecated { "CIM_PolicyRuleInSystem" },
152 Version ( "2.8.0" ), Description (
153 "CIM_HostedAuthenticationRequirement is an association used to "
154 "provide the namespace scoping of AuthenticationRequirement. "
155 "The hosted requirements may or may not apply to resources on "
156 "the hosting system. Since the AuthenticationRequirement class "
157 "is deprecated in lieu of explicit policy rules, this class is "
158 "similarly deprecated to its 'policy' equivalent.")]
159 class CIM_HostedAuthenticationRequirement : CIM_HostedDependency {
160
161 [Deprecated { "CIM_PolicyRuleInSystem.Antecedent" },
162 Override ( "Antecedent" ), Min ( 1 ), Max ( 1 ),
163 Description (
164 "The hosting system.")]
165 CIM_System REF Antecedent;
166
167 [Deprecated { "CIM_PolicyRuleInSystem.Dependent" },
168 Override ( "Dependent" ), Weak, Description (
169 a.dunfey 1.1 "The hosted AuthenticationRequirement.")]
170 CIM_AuthenticationRequirement REF Dependent;
171 };
172
173
174 // ==================================================================
175 // AuthenticateForUse
176 // ==================================================================
177 [Association, Deprecated { "No value" }, Version ( "2.8.0" ),
178 Description (
179 "CIM_AuthenticateForUse is an association used to provide an "
180 "AuthenticationService with the AuthenticationRequirement it "
181 "needs to do its job. This association is unnecessary and "
182 "therefore deprecated, since it is implied that an Identity "
183 "MUST be authenticated (its CurrentlyAuthenticatedBoolean set "
184 "to TRUE) in order to have any Privileges.")]
185 class CIM_AuthenticateForUse : CIM_Dependency {
186
187 [Deprecated { "No value" }, Override ( "Antecedent" ),
188 Description (
189 "AuthenticationRequirementfor use.")]
190 a.dunfey 1.1 CIM_AuthenticationRequirement REF Antecedent;
191
192 [Deprecated { "No value" }, Override ( "Dependent" ),
193 Description (
194 "AuthenticationServicethat uses the requirements.")]
195 CIM_AuthenticationService REF Dependent;
196 };
197
198
199 // ==================================================================
200 // RequireCredentialsFrom
201 // ==================================================================
202 [Association, Deprecated { "CIM_AuthenticationCondition",
203 "CIM_AuthenticationRule" }, Version ( "2.8.0" ), Description (
204 "CIM_RequireCredentialsFrom is an association used to require "
205 "that credentials are issued by particular CredentialManagement "
206 "Services in order to authenticate a user. This association is "
207 "deprecated in lieu of explicit declaration of the "
208 "AuthenticationConditions in an AuthenticationRule. Instances "
209 "of AuthenticationCondition describe the specific combinations "
210 "of credentials (or alternative credentials) that are required "
211 a.dunfey 1.1 "to authenticate an Identity. This allows a more explicit and "
212 "flexible description of authentication requirements.")]
213 class CIM_RequireCredentialsFrom : CIM_Dependency {
214
215 [Deprecated { "CIM_AuthenticationCondition" },
216 Override ( "Antecedent" ), Description (
217 "CredentialManagementService from which credentials are "
218 "accepted for the associated AuthenticationRequirement.")]
219 CIM_CredentialManagementService REF Antecedent;
220
221 [Deprecated { "CIM_AuthenticationRule" },
222 Override ( "Dependent" ), Description (
223 "AuthenticationRequirement that limits acceptable "
224 "credentials.")]
225 CIM_AuthenticationRequirement REF Dependent;
226 };
227
228
229 // ==================================================================
230 // AuthenticationTarget
231 // ==================================================================
232 a.dunfey 1.1 [Association, Deprecated { "CIM_PolicySetAppliesToElement" },
233 Version ( "2.8.0" ), Description (
234 "CIM_AuthenticationTarget is an association used to apply "
235 "authentication requirements for access to specific resources. "
236 "For example, a shared secret may be sufficient for access to "
237 "unclassified resources, but for confidential resources, a "
238 "stronger authentication may be required. Since the "
239 "AuthenticationRequirement class is deprecated in lieu of "
240 "explicit policy rules, this association is similarly "
241 "deprecated to its 'policy' equivalent.")]
242 class CIM_AuthenticationTarget : CIM_Dependency {
243
244 [Deprecated { "CIM_PolicySetAppliesToElement.PolicySet" },
245 Override ( "Antecedent" ), Description (
246 "AuthenticationRequirement that applies to specific "
247 "resources.")]
248 CIM_AuthenticationRequirement REF Antecedent;
249
250 [Deprecated { "CIM_PolicySetAppliesToElement.ManagedElement" },
251 Override ( "Dependent" ), Description (
252 "Target resources that may be in a Collection or an "
253 a.dunfey 1.1 "individual ManagedElement. These resources are protected by "
254 "the AuthenticationRequirement.")]
255 CIM_ManagedElement REF Dependent;
256 };
257
258
259 // ===================================================================
260 // end of file
261 // ===================================================================
|