1 karl  1.1 // ===================================================================
  2           // Title:       User-Security General Credentials 2.7
  3           // Filename:    User27_Credential.mof
  4           // Version:     2.7.0
  5           // Status:      Preliminary
  6           // Date:        07/07/2002
  7           // ===================================================================
  8           // Copyright 2000-2002 Distributed Management Task Force, Inc. (DMTF).
  9           // All rights reserved.  
 10           // DMTF is a not-for-profit association of industry members dedicated 
 11           // to promoting enterprise and systems management and interoperability. 
 12           // DMTF specifications and documents may be reproduced for uses
 13           // consistent with this purpose by members and non-members, 
 14           // provided that correct attribution is given. 
 15           // As DMTF specifications may be revised from time to time, 
 16           // the particular version and release date should always be noted.
 17           //
 18           // Implementation of certain elements of this standard or proposed 
 19           // standard may be subject to third party patent rights, including 
 20           // provisional patent rights (herein "patent rights"). DMTF makes 
 21           // no representations to users of the standard as to the existence 
 22 karl  1.1 // of such rights, and is not responsible to recognize, disclose, or
 23           // identify any or all such third party patent right, owners or 
 24           // claimants, nor for any incomplete or inaccurate identification or 
 25           // disclosure of such rights, owners or claimants. DMTF shall have no 
 26           // liability to any party, in any manner or circumstance, under any 
 27           // legal theory whatsoever, for failure to recognize, disclose, or 
 28           // identify any such third party patent rights, or for such party's
 29           // reliance on the standard or incorporation thereof in its product, 
 30           // protocols or testing procedures. DMTF shall have no liability to 
 31           // any party implementing such standard, whether such implementation 
 32           // is foreseeable or not, nor to any patent owner or claimant, and shall 
 33           // have no liability or responsibility for costs or losses incurred if 
 34           // a standard is withdrawn or modified after publication, and shall be
 35           // indemnified and held harmless by any party implementing the 
 36           // standard from any and all claims of infringement by a patent owner 
 37           // for such implementations.
 38           //
 39           // For information about patents held by third-parties which have 
 40           // notified the DMTF that, in their opinion, such patent may relate to 
 41           // or impact implementations of DMTF standards, visit 
 42           // http://www.dmtf.org/about/policies/disclosures.php.
 43 karl  1.1 // ===================================================================
 44           // Description: The User Model extends the management concepts that
 45           //              are related to users and security.
 46           //              This file defines the generic concepts of a 
 47           //              credential.
 48           //
 49           //              The object classes below are listed in an order that
 50           //              avoids forward references. Required objects, defined 
 51           //              by other working groups, are omitted.
 52           // ===================================================================
 53           // Change Log for v2.7
 54           // CR784 - Promote 2 properties, Issued and Expired, from
 55           //         CIM_KerberosTicket to CIM_Credential
 56           // ===================================================================
 57           
 58           #pragma Locale ("en_US")
 59           
 60           
 61           // ================================================================== 
 62           // Credential
 63           // ==================================================================
 64 karl  1.1 [Abstract, Version ("2.7.0"), Description (
 65              "Subclasses of CIM_Credential define materials, "
 66              "information, or other data which are used to prove the "
 67              "identity of a CIM_UsersAccess to a particular "
 68              "CIM_SecurityService.  Generally, there may be some shared "
 69              "information, or credential material which is used to "
 70              "identify and authenticate ones self in the process of "
 71              "gaining access to, or permission to use, an Account. "
 72              "Such credential material may be used to authenticate a "
 73              "users access identity  initially, as done by a "
 74              "CIM_AuthenticationService (see later), and additionally on "
 75              "an ongoing basis during the course of a connection or "
 76              "other security association, as proof that each received "
 77              "message or communication came from the owning user access of "
 78              "that credential material.") ]
 79           class CIM_Credential : CIM_ManagedElement {
 80           
 81              [Experimental, Description (
 82                 "The date and time when the credential was issued. Use a value "
 83                 "of all 0s if this information is not applicable.") ]
 84              datetime Issued; 
 85 karl  1.1 
 86              [Experimental, Description (
 87                 "The date and time when the credential expires (and is "
 88                 "not appropriate for use for authentication/"
 89                 "authorization). Use a value of all 9s if this information "
 90                 "is not applicable. Note that this property does not define "
 91                 "how the expiration is set - but that there IS an expiration. "
 92                 "The property may be set to either a specific date/time or "
 93                 "an interval (calculated from the Issued datetime). For "
 94                 "example, for Certificate Authority-signed public key, the "
 95                 "expiration is determined by the CA. Another example is a "
 96                 "voice mail password that expires 60 days after it is "
 97                 "set/issued.") ]
 98              datetime Expires;
 99           };
100           
101           
102           // ===================================================================
103           // ManagedCredential
104           // ===================================================================
105           [Association, Version ("2.6.0"), Description (
106 karl  1.1    "This relationship associates a CredentialManagementService "
107              "with the Credential it manages.") ]
108           class CIM_ManagedCredential : CIM_Dependency {
109           
110              [Override ("Antecedent"), Min (1), Max (1),
111                 Description ("The credential management service.") ] 
112              CIM_CredentialManagementService REF Antecedent;
113           
114              [Override ("Dependent"),
115                 Description ("The managed credential.") ]
116              CIM_Credential REF Dependent;
117           };
118           
119           
120           // ===================================================================
121           // end of file
122           // ===================================================================