Security Modules

module CORBA {
       // Extensions to CORBA
       interface Current {
       };
};

// This information is taken from CORBAservices: Common Object 
// Services Specification, page 15-230. Revised Edition: 
// March 31, 1995. Updated: November 1997. Used with permission by OMG.

TimeBase Module

// From time service
module TimeBase {
       // interim definition of type ulonglong pending the
       // adoption of the type extension by all client ORBs.
       struct ulonglong {
              unsigned long      low;
              unsigned long      high;
       };
       typedef ulonglong         TimeT;
       typedef short             TdfT;
       struct UtcT { 
              TimeT              time;     // 8 octets
              unsigned long      inacclo;  // 4 octets
              unsigned short     inacchi;  // 2 octets
              TdfT              tdf;       // 2 octets
                                          // total 16 octets
       };
};

// This information is taken from CORBAservices: Common Object 
// Services Specification, p. 14-5. Revised Edition: 
// March 31, 1995. Updated: November 1997. Used with permission by OMG.

module Security {
        typedef sequence<octet>   Opaque;

       // Extensible families for standard data types
       struct ExtensibleFamily {
              unsigned short       family_definer;
              unsigned short       family;
        };

       //security attributes
       typedef unsigned long        SecurityAttributeType;

       // identity attributes; family = 0
       const SecurityAttributeType  AuditId = 1;
       const SecurityAttributeType  AccountingId = 2;
       const SecurityAttributeType  NonRepudiationId = 3;

       // privilege attributes; family = 1
       const SecurityAttributeType  Public = 1;
       const SecurityAttributeType  AccessId = 2;
       const SecurityAttributeType  PrimaryGroupId = 3;
       const SecurityAttributeType  GroupId = 4;
       const SecurityAttributeType  Role = 5;
       const SecurityAttributeType  AttributeSet = 6;
       const SecurityAttributeType  Clearance = 7;
       const SecurityAttributeType  Capability = 8;

       struct AttributeType {
               ExtensibleFamily       attribute_family;
               SecurityAttributeType  attribute_type;
       };

       typedef sequence <AttributeType>   AttributeTypeLists;
       struct SecAttribute {
              AttributeType   attribute_type;
              Opaque          defining_authority;
              Opaque          value;
              // The value of this attribute can be
             // interpreted only with knowledge of type
       };

       typedef sequence<SecAttribute>  AttributeList;

       // Authentication return status
       enum AuthenticationStatus {
              SecAuthSuccess,
              SecAuthFailure,
              SecAuthContinue,
              SecAuthExpired
       };

       // Authentication method
        typedef unsigned long      AuthenticationMethod;

        enum CredentialType {
              SecInvocationCredentials;
              SecOwnCredentials;
              SecNRCredentials

       // Pick up from TimeBase
       typedef TimeBase::UtcT      UtcT;
};

// This information is taken from CORBAservices: Common Object 
// Services Specification, pp. 15-193 to195. Revised Edition: 
// March 31, 1995. Updated: November 1997. Used with permission by OMG.

module SecurityLevel1 {
       interface Current : CORBA::Current {	// PIDL
             Security::AttributeList get_attributes(
               in Security::AttributeTypeList  attributes
            );
       };
};

// This information is taken from CORBAservices: Common Object 
// Services Specification, p. 15-198. Revised Edition: 
// March 31, 1995. Updated: November 1997. Used with permission by OMG.

Security Level 2 Module

module SecurityLevel2 {
       // Forward declaration of interfaces
       interface PrincipalAuthenticator;
       interface Credentials;
       interface Current;

      // Interface Principal Authenticator
       interface PrincipalAuthenticator {
            Security::AuthenticationStatus authenticate(
                   in Security::AuthenticationMethod  method,
                   in string                   security_name,
                   in Security::Opaque         auth_data,
                   in Security::AttributeList  privileges,
                   out Credentials             creds,
                   out Security::Opaque        continuation_data,
                   out Security::Opaque        auth_specific_data
             );

             Security::AuthenticationStatus
                           continue_authentication(
                     in Security::Opaque       response_data,
                     inout Credentials         creds,
                     out Security::Opaque      continuation_data,
                     out Security::Opaque      auth_specific_data
             );
        };

       // Interface Credentials
       interface Credentials {
              attribute Security::AssociationOptions
                                  invocation_options_supported;
		attribute Security::AssociationOptions
					invocation_options_required;
		Security::AttributeList get_attributes(
                   in Security::AttributeTypeList   attributes
              );
              boolean is_valid(
                     out Security::UtcT      expiry_time
              );
       };

       // Interface Current derived from SecurityLevel1::Current
       // providing additional operations on Current at this
       // security level. This is implemented by the ORB.
       interface Current : SecurityLevel1::Current { // PIDL
              void set_credentials(
                     in Security::CredentialType   cred_type,
                     in Credentials                cred
              );

              Credentials get_credentials(
                   in Security::CredentialType   cred_type
              );
              readonly attribute PrincipalAuthenticator
                        principal_authenticator;
      };
};

// This information is taken from CORBAservices: Common Object 
// Services Specification, pp. 15-198 to 200. Revised Edition: 
// March 31, 1995. Updated: November 1997. Used with permission by // OMG.

Tobj Module

//Tobj Specific definitions

        //get_auth_type () return values
        enum AuthType {
              TOBJ_NOAUTH,
              TOBJ_SYSAUTH,
              TOBJ_APPAUTH
       };

       typedef sequence<octet>    UserAuthData;

      interface PrincipalAuthenticator :
              SecurityLevel2::PrincipalAuthenticator { // PIDL
               AuthType get_auth_type();

              Security::AuthenticationStatus logon(
                     in string            user_name,
                     in string            client_name,
                     in string            system_password,
                     in string            user_password,
                     in UserAuthData      user_data
               );
               void logoff();

              void build_auth_data(
                     in string                    user_name,
                     in string                    client_name,
                     in string                    system_password,
                     in string                    user_password,
                     in UserAuthData              user_data,
                     out Security::Opaque         auth_data,
                     out Security::AttributeList  privileges
              );
        };
};