Repository: incubator-geode Updated Branches: refs/heads/feature/GEODE-949-2 80757d98d -> 67dc693bb
http://git-wip-us.apache.org/repos/asf/incubator-geode/blob/67dc693b/geode-core/src/test/resources/com/gemstone/gemfire/security/generator/lib/authz-multiUser-ldap.xml ---------------------------------------------------------------------- diff --git a/geode-core/src/test/resources/com/gemstone/gemfire/security/generator/lib/authz-multiUser-ldap.xml b/geode-core/src/test/resources/com/gemstone/gemfire/security/generator/lib/authz-multiUser-ldap.xml new file mode 100644 index 0000000..cc6383d --- /dev/null +++ b/geode-core/src/test/resources/com/gemstone/gemfire/security/generator/lib/authz-multiUser-ldap.xml @@ -0,0 +1,81 @@ +<?xml version="1.0" encoding="UTF-8"?> + +<!-- + ~ Licensed to the Apache Software Foundation (ASF) under one or more + ~ contributor license agreements. See the NOTICE file distributed with + ~ this work for additional information regarding copyright ownership. + ~ The ASF licenses this file to You under the Apache License, Version 2.0 + ~ (the "License"); you may not use this file except in compliance with + ~ the License. You may obtain a copy of the License at + ~ + ~ http://www.apache.org/licenses/LICENSE-2.0 + ~ + ~ Unless required by applicable law or agreed to in writing, software + ~ distributed under the License is distributed on an "AS IS" BASIS, + ~ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. + ~ See the License for the specific language governing permissions and + ~ limitations under the License. + --> + +<!DOCTYPE acl PUBLIC "-//GemStone Systems, Inc.//GemFire XML Authorization 1.0//EN" + "/Users/klund/dev/gemfire/open/geode-core/src/test/resources/com/gemstone/gemfire/security/generator/lib/templates/authz5_5.dtd" > +<acl> + + <role name="reader"> + <user>gemfire1</user> + <user>gemfire2</user> + <user>gemfire3</user> + <user>gemfire4</user> + <user>gemfire5</user> + </role> + + <role name="writer"> + <user>gemfire1</user> + <user>gemfire2</user> + <user>gemfire6</user> + <user>gemfire7</user> + <user>gemfire8</user> + </role> + + <role name="cacheOps"> + <user>gemfire1</user> + <user>gemfire2</user> + </role> + + <role name="queryRegions"> + <user>gemfire9</user> + <user>gemfire10</user> + </role> + + <permission role="cacheOps"> + <operation>QUERY</operation> + <operation>EXECUTE_CQ</operation> + <operation>STOP_CQ</operation> + <operation>CLOSE_CQ</operation> + </permission> + + <permission role="reader"> + <operation>GET</operation> + <operation>REGISTER_INTEREST</operation> + <operation>UNREGISTER_INTEREST</operation> + <operation>KEY_SET</operation> + <operation>CONTAINS_KEY</operation> + <operation>EXECUTE_FUNCTION</operation> + </permission> + + <permission role="writer"> + <operation>PUT</operation> + <operation>PUTALL</operation> + <operation>DESTROY</operation> + <operation>INVALIDATE</operation> + <operation>REGION_CLEAR</operation> + </permission> + + <permission role="queryRegions" regions="Portfolios,/Positions//,/AuthRegion"> + <operation>QUERY</operation> + <operation>EXECUTE_CQ</operation> + <operation>STOP_CQ</operation> + <operation>CLOSE_CQ</operation> + </permission> + +</acl> http://git-wip-us.apache.org/repos/asf/incubator-geode/blob/67dc693b/geode-core/src/test/resources/com/gemstone/gemfire/security/generator/lib/keys/gemfire1.keystore ---------------------------------------------------------------------- diff --git a/geode-core/src/test/resources/com/gemstone/gemfire/security/generator/lib/keys/gemfire1.keystore b/geode-core/src/test/resources/com/gemstone/gemfire/security/generator/lib/keys/gemfire1.keystore new file mode 100644 index 0000000..15270bb Binary files /dev/null and b/geode-core/src/test/resources/com/gemstone/gemfire/security/generator/lib/keys/gemfire1.keystore differ http://git-wip-us.apache.org/repos/asf/incubator-geode/blob/67dc693b/geode-core/src/test/resources/com/gemstone/gemfire/security/generator/lib/keys/gemfire10.keystore ---------------------------------------------------------------------- diff --git a/geode-core/src/test/resources/com/gemstone/gemfire/security/generator/lib/keys/gemfire10.keystore b/geode-core/src/test/resources/com/gemstone/gemfire/security/generator/lib/keys/gemfire10.keystore new file mode 100644 index 0000000..bb6f827 Binary files /dev/null and b/geode-core/src/test/resources/com/gemstone/gemfire/security/generator/lib/keys/gemfire10.keystore differ http://git-wip-us.apache.org/repos/asf/incubator-geode/blob/67dc693b/geode-core/src/test/resources/com/gemstone/gemfire/security/generator/lib/keys/gemfire11.keystore ---------------------------------------------------------------------- diff --git a/geode-core/src/test/resources/com/gemstone/gemfire/security/generator/lib/keys/gemfire11.keystore b/geode-core/src/test/resources/com/gemstone/gemfire/security/generator/lib/keys/gemfire11.keystore new file mode 100644 index 0000000..6839c74 Binary files /dev/null and b/geode-core/src/test/resources/com/gemstone/gemfire/security/generator/lib/keys/gemfire11.keystore differ http://git-wip-us.apache.org/repos/asf/incubator-geode/blob/67dc693b/geode-core/src/test/resources/com/gemstone/gemfire/security/generator/lib/keys/gemfire2.keystore ---------------------------------------------------------------------- diff --git a/geode-core/src/test/resources/com/gemstone/gemfire/security/generator/lib/keys/gemfire2.keystore b/geode-core/src/test/resources/com/gemstone/gemfire/security/generator/lib/keys/gemfire2.keystore new file mode 100644 index 0000000..fcb7ab8 Binary files /dev/null and b/geode-core/src/test/resources/com/gemstone/gemfire/security/generator/lib/keys/gemfire2.keystore differ http://git-wip-us.apache.org/repos/asf/incubator-geode/blob/67dc693b/geode-core/src/test/resources/com/gemstone/gemfire/security/generator/lib/keys/gemfire3.keystore ---------------------------------------------------------------------- diff --git a/geode-core/src/test/resources/com/gemstone/gemfire/security/generator/lib/keys/gemfire3.keystore b/geode-core/src/test/resources/com/gemstone/gemfire/security/generator/lib/keys/gemfire3.keystore new file mode 100644 index 0000000..19afc4b Binary files /dev/null and b/geode-core/src/test/resources/com/gemstone/gemfire/security/generator/lib/keys/gemfire3.keystore differ http://git-wip-us.apache.org/repos/asf/incubator-geode/blob/67dc693b/geode-core/src/test/resources/com/gemstone/gemfire/security/generator/lib/keys/gemfire4.keystore ---------------------------------------------------------------------- diff --git a/geode-core/src/test/resources/com/gemstone/gemfire/security/generator/lib/keys/gemfire4.keystore b/geode-core/src/test/resources/com/gemstone/gemfire/security/generator/lib/keys/gemfire4.keystore new file mode 100644 index 0000000..c65916a Binary files /dev/null and b/geode-core/src/test/resources/com/gemstone/gemfire/security/generator/lib/keys/gemfire4.keystore differ http://git-wip-us.apache.org/repos/asf/incubator-geode/blob/67dc693b/geode-core/src/test/resources/com/gemstone/gemfire/security/generator/lib/keys/gemfire5.keystore ---------------------------------------------------------------------- diff --git a/geode-core/src/test/resources/com/gemstone/gemfire/security/generator/lib/keys/gemfire5.keystore b/geode-core/src/test/resources/com/gemstone/gemfire/security/generator/lib/keys/gemfire5.keystore new file mode 100644 index 0000000..d738cca Binary files /dev/null and b/geode-core/src/test/resources/com/gemstone/gemfire/security/generator/lib/keys/gemfire5.keystore differ http://git-wip-us.apache.org/repos/asf/incubator-geode/blob/67dc693b/geode-core/src/test/resources/com/gemstone/gemfire/security/generator/lib/keys/gemfire6.keystore ---------------------------------------------------------------------- diff --git a/geode-core/src/test/resources/com/gemstone/gemfire/security/generator/lib/keys/gemfire6.keystore b/geode-core/src/test/resources/com/gemstone/gemfire/security/generator/lib/keys/gemfire6.keystore new file mode 100644 index 0000000..1fea2d3 Binary files /dev/null and b/geode-core/src/test/resources/com/gemstone/gemfire/security/generator/lib/keys/gemfire6.keystore differ http://git-wip-us.apache.org/repos/asf/incubator-geode/blob/67dc693b/geode-core/src/test/resources/com/gemstone/gemfire/security/generator/lib/keys/gemfire7.keystore ---------------------------------------------------------------------- diff --git a/geode-core/src/test/resources/com/gemstone/gemfire/security/generator/lib/keys/gemfire7.keystore b/geode-core/src/test/resources/com/gemstone/gemfire/security/generator/lib/keys/gemfire7.keystore new file mode 100644 index 0000000..7a3187c Binary files /dev/null and b/geode-core/src/test/resources/com/gemstone/gemfire/security/generator/lib/keys/gemfire7.keystore differ http://git-wip-us.apache.org/repos/asf/incubator-geode/blob/67dc693b/geode-core/src/test/resources/com/gemstone/gemfire/security/generator/lib/keys/gemfire8.keystore ---------------------------------------------------------------------- diff --git a/geode-core/src/test/resources/com/gemstone/gemfire/security/generator/lib/keys/gemfire8.keystore b/geode-core/src/test/resources/com/gemstone/gemfire/security/generator/lib/keys/gemfire8.keystore new file mode 100644 index 0000000..a3bb886 Binary files /dev/null and b/geode-core/src/test/resources/com/gemstone/gemfire/security/generator/lib/keys/gemfire8.keystore differ http://git-wip-us.apache.org/repos/asf/incubator-geode/blob/67dc693b/geode-core/src/test/resources/com/gemstone/gemfire/security/generator/lib/keys/gemfire9.keystore ---------------------------------------------------------------------- diff --git a/geode-core/src/test/resources/com/gemstone/gemfire/security/generator/lib/keys/gemfire9.keystore b/geode-core/src/test/resources/com/gemstone/gemfire/security/generator/lib/keys/gemfire9.keystore new file mode 100644 index 0000000..674b4e6 Binary files /dev/null and b/geode-core/src/test/resources/com/gemstone/gemfire/security/generator/lib/keys/gemfire9.keystore differ http://git-wip-us.apache.org/repos/asf/incubator-geode/blob/67dc693b/geode-core/src/test/resources/com/gemstone/gemfire/security/generator/lib/keys/ibm/gemfire1.keystore ---------------------------------------------------------------------- diff --git a/geode-core/src/test/resources/com/gemstone/gemfire/security/generator/lib/keys/ibm/gemfire1.keystore b/geode-core/src/test/resources/com/gemstone/gemfire/security/generator/lib/keys/ibm/gemfire1.keystore new file mode 100644 index 0000000..4f9120c Binary files /dev/null and b/geode-core/src/test/resources/com/gemstone/gemfire/security/generator/lib/keys/ibm/gemfire1.keystore differ http://git-wip-us.apache.org/repos/asf/incubator-geode/blob/67dc693b/geode-core/src/test/resources/com/gemstone/gemfire/security/generator/lib/keys/ibm/gemfire10.keystore ---------------------------------------------------------------------- diff --git a/geode-core/src/test/resources/com/gemstone/gemfire/security/generator/lib/keys/ibm/gemfire10.keystore b/geode-core/src/test/resources/com/gemstone/gemfire/security/generator/lib/keys/ibm/gemfire10.keystore new file mode 100644 index 0000000..0bd97d7 Binary files /dev/null and b/geode-core/src/test/resources/com/gemstone/gemfire/security/generator/lib/keys/ibm/gemfire10.keystore differ http://git-wip-us.apache.org/repos/asf/incubator-geode/blob/67dc693b/geode-core/src/test/resources/com/gemstone/gemfire/security/generator/lib/keys/ibm/gemfire11.keystore ---------------------------------------------------------------------- diff --git a/geode-core/src/test/resources/com/gemstone/gemfire/security/generator/lib/keys/ibm/gemfire11.keystore b/geode-core/src/test/resources/com/gemstone/gemfire/security/generator/lib/keys/ibm/gemfire11.keystore new file mode 100644 index 0000000..62ae3c7 Binary files /dev/null and b/geode-core/src/test/resources/com/gemstone/gemfire/security/generator/lib/keys/ibm/gemfire11.keystore differ http://git-wip-us.apache.org/repos/asf/incubator-geode/blob/67dc693b/geode-core/src/test/resources/com/gemstone/gemfire/security/generator/lib/keys/ibm/gemfire2.keystore ---------------------------------------------------------------------- diff --git a/geode-core/src/test/resources/com/gemstone/gemfire/security/generator/lib/keys/ibm/gemfire2.keystore b/geode-core/src/test/resources/com/gemstone/gemfire/security/generator/lib/keys/ibm/gemfire2.keystore new file mode 100644 index 0000000..c65bc81 Binary files /dev/null and b/geode-core/src/test/resources/com/gemstone/gemfire/security/generator/lib/keys/ibm/gemfire2.keystore differ http://git-wip-us.apache.org/repos/asf/incubator-geode/blob/67dc693b/geode-core/src/test/resources/com/gemstone/gemfire/security/generator/lib/keys/ibm/gemfire3.keystore ---------------------------------------------------------------------- diff --git a/geode-core/src/test/resources/com/gemstone/gemfire/security/generator/lib/keys/ibm/gemfire3.keystore b/geode-core/src/test/resources/com/gemstone/gemfire/security/generator/lib/keys/ibm/gemfire3.keystore new file mode 100644 index 0000000..b0796e0 Binary files /dev/null and b/geode-core/src/test/resources/com/gemstone/gemfire/security/generator/lib/keys/ibm/gemfire3.keystore differ http://git-wip-us.apache.org/repos/asf/incubator-geode/blob/67dc693b/geode-core/src/test/resources/com/gemstone/gemfire/security/generator/lib/keys/ibm/gemfire4.keystore ---------------------------------------------------------------------- diff --git a/geode-core/src/test/resources/com/gemstone/gemfire/security/generator/lib/keys/ibm/gemfire4.keystore b/geode-core/src/test/resources/com/gemstone/gemfire/security/generator/lib/keys/ibm/gemfire4.keystore new file mode 100644 index 0000000..9c94018 Binary files /dev/null and b/geode-core/src/test/resources/com/gemstone/gemfire/security/generator/lib/keys/ibm/gemfire4.keystore differ http://git-wip-us.apache.org/repos/asf/incubator-geode/blob/67dc693b/geode-core/src/test/resources/com/gemstone/gemfire/security/generator/lib/keys/ibm/gemfire5.keystore ---------------------------------------------------------------------- diff --git a/geode-core/src/test/resources/com/gemstone/gemfire/security/generator/lib/keys/ibm/gemfire5.keystore b/geode-core/src/test/resources/com/gemstone/gemfire/security/generator/lib/keys/ibm/gemfire5.keystore new file mode 100644 index 0000000..33f6937 Binary files /dev/null and b/geode-core/src/test/resources/com/gemstone/gemfire/security/generator/lib/keys/ibm/gemfire5.keystore differ http://git-wip-us.apache.org/repos/asf/incubator-geode/blob/67dc693b/geode-core/src/test/resources/com/gemstone/gemfire/security/generator/lib/keys/ibm/gemfire6.keystore ---------------------------------------------------------------------- diff --git a/geode-core/src/test/resources/com/gemstone/gemfire/security/generator/lib/keys/ibm/gemfire6.keystore b/geode-core/src/test/resources/com/gemstone/gemfire/security/generator/lib/keys/ibm/gemfire6.keystore new file mode 100644 index 0000000..568f674 Binary files /dev/null and b/geode-core/src/test/resources/com/gemstone/gemfire/security/generator/lib/keys/ibm/gemfire6.keystore differ http://git-wip-us.apache.org/repos/asf/incubator-geode/blob/67dc693b/geode-core/src/test/resources/com/gemstone/gemfire/security/generator/lib/keys/ibm/gemfire7.keystore ---------------------------------------------------------------------- diff --git a/geode-core/src/test/resources/com/gemstone/gemfire/security/generator/lib/keys/ibm/gemfire7.keystore b/geode-core/src/test/resources/com/gemstone/gemfire/security/generator/lib/keys/ibm/gemfire7.keystore new file mode 100644 index 0000000..80e2d80 Binary files /dev/null and b/geode-core/src/test/resources/com/gemstone/gemfire/security/generator/lib/keys/ibm/gemfire7.keystore differ http://git-wip-us.apache.org/repos/asf/incubator-geode/blob/67dc693b/geode-core/src/test/resources/com/gemstone/gemfire/security/generator/lib/keys/ibm/gemfire8.keystore ---------------------------------------------------------------------- diff --git a/geode-core/src/test/resources/com/gemstone/gemfire/security/generator/lib/keys/ibm/gemfire8.keystore b/geode-core/src/test/resources/com/gemstone/gemfire/security/generator/lib/keys/ibm/gemfire8.keystore new file mode 100644 index 0000000..a15def5 Binary files /dev/null and b/geode-core/src/test/resources/com/gemstone/gemfire/security/generator/lib/keys/ibm/gemfire8.keystore differ http://git-wip-us.apache.org/repos/asf/incubator-geode/blob/67dc693b/geode-core/src/test/resources/com/gemstone/gemfire/security/generator/lib/keys/ibm/gemfire9.keystore ---------------------------------------------------------------------- diff --git a/geode-core/src/test/resources/com/gemstone/gemfire/security/generator/lib/keys/ibm/gemfire9.keystore b/geode-core/src/test/resources/com/gemstone/gemfire/security/generator/lib/keys/ibm/gemfire9.keystore new file mode 100644 index 0000000..72087f3 Binary files /dev/null and b/geode-core/src/test/resources/com/gemstone/gemfire/security/generator/lib/keys/ibm/gemfire9.keystore differ http://git-wip-us.apache.org/repos/asf/incubator-geode/blob/67dc693b/geode-core/src/test/resources/com/gemstone/gemfire/security/generator/lib/keys/ibm/publickeyfile ---------------------------------------------------------------------- diff --git a/geode-core/src/test/resources/com/gemstone/gemfire/security/generator/lib/keys/ibm/publickeyfile b/geode-core/src/test/resources/com/gemstone/gemfire/security/generator/lib/keys/ibm/publickeyfile new file mode 100644 index 0000000..1b13872 Binary files /dev/null and b/geode-core/src/test/resources/com/gemstone/gemfire/security/generator/lib/keys/ibm/publickeyfile differ http://git-wip-us.apache.org/repos/asf/incubator-geode/blob/67dc693b/geode-core/src/test/resources/com/gemstone/gemfire/security/generator/lib/keys/publickeyfile ---------------------------------------------------------------------- diff --git a/geode-core/src/test/resources/com/gemstone/gemfire/security/generator/lib/keys/publickeyfile b/geode-core/src/test/resources/com/gemstone/gemfire/security/generator/lib/keys/publickeyfile new file mode 100644 index 0000000..9c2daa3 Binary files /dev/null and b/geode-core/src/test/resources/com/gemstone/gemfire/security/generator/lib/keys/publickeyfile differ http://git-wip-us.apache.org/repos/asf/incubator-geode/blob/67dc693b/geode-core/src/test/resources/com/gemstone/gemfire/security/templates/authz5_5.dtd ---------------------------------------------------------------------- diff --git a/geode-core/src/test/resources/com/gemstone/gemfire/security/templates/authz5_5.dtd b/geode-core/src/test/resources/com/gemstone/gemfire/security/templates/authz5_5.dtd new file mode 100644 index 0000000..81a8150 --- /dev/null +++ b/geode-core/src/test/resources/com/gemstone/gemfire/security/templates/authz5_5.dtd @@ -0,0 +1,105 @@ +<?xml version="1.0" encoding="UTF-8"?> +<!-- +Licensed to the Apache Software Foundation (ASF) under one or more +contributor license agreements. See the NOTICE file distributed with +this work for additional information regarding copyright ownership. +The ASF licenses this file to You under the Apache License, Version 2.0 +(the "License"); you may not use this file except in compliance with +the License. You may obtain a copy of the License at + + http://www.apache.org/licenses/LICENSE-2.0 + +Unless required by applicable law or agreed to in writing, software +distributed under the License is distributed on an "AS IS" BASIS, +WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. +See the License for the specific language governing permissions and +limitations under the License. +--> +<!-- + +This is the XML DTD for the GemFire sample XML based authorization callback +in templates.security.XmlAuthorization. + +All XMLs must include a DOCTYPE of the following form: + + <!DOCTYPE acl PUBLIC + "-//GemStone Systems, Inc.//GemFire XML Authorization 1.0//EN" + "http://www.gemstone.com/dtd/authz5_5.dtd";> + +The contents of a declarative XML file correspond to APIs found in the + + com.gemstone.gemfire.security.AccessControl + +package. The sample implementation may be used to specify access control +policies. + +--> + +<!-- + +The following conventions apply to all GemFire sample authorization +XML file elements unless indicated otherwise. + +- In elements that contain PCDATA, leading and trailing whitespace in + the data may be ignored. + +- In elements whose value is an "enumerated type", the value is case + sensitive. + +--> + + +<!-- +The "acl" element is the root element of the authorization file. +This element contains the role to user mappings and role to permissions +mapping on a per region per operation basis. +--> + +<!ELEMENT acl (role+,permission+)> + +<!-- +The "role" element contains the set of users that have the permissions of +given role. A user can be present in more than one "role" elements in +which case the union of the permissions to all those roles determines +the full set of permissions to be given to the user. +--> + +<!ELEMENT role (user*)> +<!ATTLIST role + name CDATA #REQUIRED +> + +<!-- +The "user" element is contained within the "role" element and contains +the name of a user having the permissions of that role. +--> + +<!ELEMENT user (#PCDATA)> + +<!-- +The "permission" element specifies the list of operations that are allowed +for a particular role in the given regions as provided in the optional +"regions" attribute. The value of "regions" attribute should be a comma +separated list of region names for which permissions are to be provided. +If no "regions" attribute is provided then those permissions are provided +for all the other regions (i.e. other than those that have been explicitly +specified). Permissions for cache level operations REGION_DESTROY, +REGION_CREATE, QUERY and CQ operations should be specified with no "regions" +attribute. If cache-level permission is not provided for QUERY or CQ operations +then the permission for all the region names in the query string is checked. +--> + +<!ELEMENT permission (operation*)> +<!ATTLIST permission + role CDATA #REQUIRED + regions CDATA #IMPLIED +> + + +<!-- +The operation should be one of the following strings: + GET, PUT, PUTALL, DESTROY, REGISTER_INTEREST, UNREGISTER_INTEREST, + CONTAINS_KEY, KEY_SET, QUERY, EXECUTE_CQ, STOP_CQ, CLOSE_CQ, REGION_CLEAR, + REGION_CREATE, REGION_DESTROY +--> +<!ELEMENT operation (#PCDATA)> http://git-wip-us.apache.org/repos/asf/incubator-geode/blob/67dc693b/geode-core/src/test/resources/com/gemstone/gemfire/security/templates/authz6_0.dtd ---------------------------------------------------------------------- diff --git a/geode-core/src/test/resources/com/gemstone/gemfire/security/templates/authz6_0.dtd b/geode-core/src/test/resources/com/gemstone/gemfire/security/templates/authz6_0.dtd new file mode 100755 index 0000000..06cceff --- /dev/null +++ b/geode-core/src/test/resources/com/gemstone/gemfire/security/templates/authz6_0.dtd @@ -0,0 +1,110 @@ +<?xml version="1.0" encoding="UTF-8"?> +<!-- +Licensed to the Apache Software Foundation (ASF) under one or more +contributor license agreements. See the NOTICE file distributed with +this work for additional information regarding copyright ownership. +The ASF licenses this file to You under the Apache License, Version 2.0 +(the "License"); you may not use this file except in compliance with +the License. You may obtain a copy of the License at + + http://www.apache.org/licenses/LICENSE-2.0 + +Unless required by applicable law or agreed to in writing, software +distributed under the License is distributed on an "AS IS" BASIS, +WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. +See the License for the specific language governing permissions and +limitations under the License. +--> +<!-- + +This is the XML DTD for the GemFire sample XML based authorization callback +in templates.security.XmlAuthorization. + +All XMLs must include a DOCTYPE of the following form: + + <!DOCTYPE acl PUBLIC + "-//GemStone Systems, Inc.//GemFire XML Authorization 1.0//EN" + "http://www.gemstone.com/dtd/authz5_5.dtd";> + +The contents of a declarative XML file correspond to APIs found in the + + com.gemstone.gemfire.security.AccessControl + +package. The sample implementation may be used to specify access control +policies. + +--> + +<!-- + +The following conventions apply to all GemFire sample authorization +XML file elements unless indicated otherwise. + +- In elements that contain PCDATA, leading and trailing whitespace in + the data may be ignored. + +- In elements whose value is an "enumerated type", the value is case + sensitive. + +--> + + +<!-- +The "acl" element is the root element of the authorization file. +This element contains the role to user mappings and role to permissions +mapping on a per region per operation basis. +--> + +<!ELEMENT acl (role+,permission+)> + +<!-- +The "role" element contains the set of users that have the permissions of +given role. A user can be present in more than one "role" elements in +which case the union of the permissions to all those roles determines +the full set of permissions to be given to the user. +--> + +<!ELEMENT role (user*)> +<!ATTLIST role + name CDATA #REQUIRED +> + +<!-- +The "user" element is contained within the "role" element and contains +the name of a user having the permissions of that role. +--> + +<!ELEMENT user (#PCDATA)> + +<!-- +The "permission" element specifies the list of operations that are allowed +for a particular role in the given regions as provided in the optional +"regions" attribute. The value of "regions" attribute should be a comma +separated list of region names for which permissions are to be provided. +If no "regions" attribute is provided then those permissions are provided +for all the other regions (i.e. other than those that have been explicitly +specified). Permissions for cache level operations REGION_DESTROY, +REGION_CREATE, QUERY and CQ operations should be specified with no "regions" +attribute. If cache-level permission is not provided for QUERY or CQ operations +then the permission for all the region names in the query string is checked. +--> + +<!ELEMENT permission (operation*)> +<!ATTLIST permission + role CDATA #REQUIRED + regions CDATA #IMPLIED +> + + +<!-- +The operation should be one of the following strings: + GET, PUT, PUTALL, DESTROY, REGISTER_INTEREST, UNREGISTER_INTEREST, + CONTAINS_KEY, KEY_SET, QUERY, EXECUTE_CQ, STOP_CQ, CLOSE_CQ, REGION_CLEAR, + REGION_CREATE, REGION_DESTROY +--> +<!ELEMENT operation (#PCDATA)> +<!ATTLIST operation + functionIds CDATA #IMPLIED + optimizeForWrite CDATA #IMPLIED + keySet CDATA #IMPLIED +> http://git-wip-us.apache.org/repos/asf/incubator-geode/blob/67dc693b/geode-core/src/test/resources/lib/authz-dummy.xml ---------------------------------------------------------------------- diff --git a/geode-core/src/test/resources/lib/authz-dummy.xml b/geode-core/src/test/resources/lib/authz-dummy.xml deleted file mode 100644 index 7f73808..0000000 --- a/geode-core/src/test/resources/lib/authz-dummy.xml +++ /dev/null @@ -1,126 +0,0 @@ -<?xml version="1.0" encoding="UTF-8"?> - -<!-- -Licensed to the Apache Software Foundation (ASF) under one -or more contributor license agreements. See the NOTICE file -distributed with this work for additional information -regarding copyright ownership. The ASF licenses this file -to you under the Apache License, Version 2.0 (the -"License"); you may not use this file except in compliance -with the License. You may obtain a copy of the License at - - http://www.apache.org/licenses/LICENSE-2.0 - -Unless required by applicable law or agreed to in writing, -software distributed under the License is distributed on an -"AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY -KIND, either express or implied. See the License for the -specific language governing permissions and limitations -under the License. ---> - -<!DOCTYPE acl PUBLIC "-//GemStone Systems, Inc.//GemFire XML Authorization 1.0//EN" - "authz6_0.dtd" > -<acl> - - <role name="reader"> - <user>reader0</user> - <user>reader1</user> - <user>reader2</user> - <user>root</user> - <user>admin</user> - <user>administrator</user> - </role> - - <role name="writer"> - <user>writer0</user> - <user>writer1</user> - <user>writer2</user> - <user>root</user> - <user>admin</user> - <user>administrator</user> - </role> - - <role name="cacheOps"> - <user>root</user> - <user>admin</user> - <user>administrator</user> - </role> - - <role name="queryRegions"> - <user>reader3</user> - <user>reader4</user> - </role> - - <role name="registerInterest"> - <user>reader5</user> - <user>reader6</user> - </role> - - <role name="unregisterInterest"> - <user>reader5</user> - <user>reader7</user> - </role> - - <role name="onRegionFunctionExecutor"> - <user>reader8</user> - </role> - - <role name="onServerFunctionExecutor"> - <user>reader9</user> - </role> - - <permission role="cacheOps"> - <operation>QUERY</operation> - <operation>EXECUTE_CQ</operation> - <operation>STOP_CQ</operation> - <operation>CLOSE_CQ</operation> - <operation>REGION_CREATE</operation> - <operation>REGION_DESTROY</operation> - </permission> - - <permission role="reader"> - <operation>GET</operation> - <operation>REGISTER_INTEREST</operation> - <operation>UNREGISTER_INTEREST</operation> - <operation>KEY_SET</operation> - <operation>CONTAINS_KEY</operation> - <operation>EXECUTE_FUNCTION</operation> - </permission> - - <permission role="writer"> - <operation>PUT</operation> - <operation>PUTALL</operation> - <operation>DESTROY</operation> - <operation>INVALIDATE</operation> - <operation>REGION_CLEAR</operation> - </permission> - - <permission role="queryRegions" regions="//Portfolios,/Positions/,AuthRegion"> - <operation>QUERY</operation> - <operation>EXECUTE_CQ</operation> - <operation>STOP_CQ</operation> - <operation>CLOSE_CQ</operation> - </permission> - - <permission role="onRegionFunctionExecutor" regions="secureRegion,Positions"> - <operation>PUT</operation> - <operation functionIds="SecureFunction,OptimizationFunction" optimizeForWrite="false" keySet="KEY-0,KEY-1">EXECUTE_FUNCTION</operation> - </permission> - - <permission role="onServerFunctionExecutor" > - <operation>PUT</operation> - <operation functionIds="SecureFunction,OptimizationFunction">EXECUTE_FUNCTION</operation> - </permission> - - <permission role="registerInterest"> - <operation>REGISTER_INTEREST</operation> - <operation>GET</operation> - </permission> - - <permission role="unregisterInterest"> - <operation>UNREGISTER_INTEREST</operation> - <operation>GET</operation> - </permission> - -</acl> http://git-wip-us.apache.org/repos/asf/incubator-geode/blob/67dc693b/geode-core/src/test/resources/lib/authz-ldap.xml ---------------------------------------------------------------------- diff --git a/geode-core/src/test/resources/lib/authz-ldap.xml b/geode-core/src/test/resources/lib/authz-ldap.xml deleted file mode 100644 index e63c23b..0000000 --- a/geode-core/src/test/resources/lib/authz-ldap.xml +++ /dev/null @@ -1,85 +0,0 @@ -<?xml version="1.0" encoding="UTF-8"?> - -<!-- -Licensed to the Apache Software Foundation (ASF) under one -or more contributor license agreements. See the NOTICE file -distributed with this work for additional information -regarding copyright ownership. The ASF licenses this file -to you under the Apache License, Version 2.0 (the -"License"); you may not use this file except in compliance -with the License. You may obtain a copy of the License at - - http://www.apache.org/licenses/LICENSE-2.0 - -Unless required by applicable law or agreed to in writing, -software distributed under the License is distributed on an -"AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY -KIND, either express or implied. See the License for the -specific language governing permissions and limitations -under the License. ---> - -<!DOCTYPE acl PUBLIC "-//GemStone Systems, Inc.//GemFire XML Authorization 1.0//EN" - "authz5_5.dtd" > -<acl> - - <role name="reader"> - <user>gemfire1</user> - <user>gemfire2</user> - <user>gemfire3</user> - <user>gemfire4</user> - <user>gemfire5</user> - </role> - - <role name="writer"> - <user>gemfire1</user> - <user>gemfire2</user> - <user>gemfire6</user> - <user>gemfire7</user> - <user>gemfire8</user> - </role> - - <role name="cacheOps"> - <user>gemfire1</user> - <user>gemfire2</user> - </role> - - <role name="queryRegions"> - <user>gemfire9</user> - <user>gemfire10</user> - </role> - - <permission role="cacheOps"> - <operation>QUERY</operation> - <operation>EXECUTE_CQ</operation> - <operation>STOP_CQ</operation> - <operation>CLOSE_CQ</operation> - <operation>REGION_CREATE</operation> - <operation>REGION_DESTROY</operation> - </permission> - - <permission role="reader"> - <operation>GET</operation> - <operation>REGISTER_INTEREST</operation> - <operation>UNREGISTER_INTEREST</operation> - <operation>KEY_SET</operation> - <operation>CONTAINS_KEY</operation> - <operation>EXECUTE_FUNCTION</operation> - </permission> - - <permission role="writer"> - <operation>PUT</operation> - <operation>PUTALL</operation> - <operation>DESTROY</operation> - <operation>INVALIDATE</operation> - <operation>REGION_CLEAR</operation> - </permission> - - <permission role="queryRegions" regions="Portfolios,/Positions//,/AuthRegion"> - <operation>QUERY</operation> - <operation>EXECUTE_CQ</operation> - <operation>STOP_CQ</operation> - <operation>CLOSE_CQ</operation> - </permission> - -</acl> http://git-wip-us.apache.org/repos/asf/incubator-geode/blob/67dc693b/geode-core/src/test/resources/lib/authz-multiUser-dummy.xml ---------------------------------------------------------------------- diff --git a/geode-core/src/test/resources/lib/authz-multiUser-dummy.xml b/geode-core/src/test/resources/lib/authz-multiUser-dummy.xml deleted file mode 100644 index 0f3bbab..0000000 --- a/geode-core/src/test/resources/lib/authz-multiUser-dummy.xml +++ /dev/null @@ -1,106 +0,0 @@ -<?xml version="1.0" encoding="UTF-8"?> - -<!-- -Licensed to the Apache Software Foundation (ASF) under one -or more contributor license agreements. See the NOTICE file -distributed with this work for additional information -regarding copyright ownership. The ASF licenses this file -to you under the Apache License, Version 2.0 (the -"License"); you may not use this file except in compliance -with the License. You may obtain a copy of the License at - - http://www.apache.org/licenses/LICENSE-2.0 - -Unless required by applicable law or agreed to in writing, -software distributed under the License is distributed on an -"AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY -KIND, either express or implied. See the License for the -specific language governing permissions and limitations -under the License. ---> - -<!DOCTYPE acl PUBLIC "-//GemStone Systems, Inc.//GemFire XML Authorization 1.0//EN" - "authz6_0.dtd" > -<acl> - - <role name="reader"> - <user>user1</user> - <user>user2</user> - <user>root</user> - <user>admin</user> - <user>administrator</user> - </role> - - <role name="writer"> - <user>user3</user> - <user>user4</user> - <user>root</user> - <user>admin</user> - <user>administrator</user> - </role> - - <role name="cacheOps"> - <user>user1</user> - <user>user2</user> - <user>root</user> - <user>admin</user> - <user>administrator</user> - </role> - - <role name="queryRegions"> - <user>user5</user> - <user>user6</user> - </role> - - <role name="registerInterest"> - <user>user7</user> - <user>user8</user> - </role> - - <role name="unregisterInterest"> - <user>user5</user> - <user>user7</user> - </role> - - <permission role="cacheOps"> - <operation>QUERY</operation> - <operation>EXECUTE_CQ</operation> - <operation>STOP_CQ</operation> - <operation>CLOSE_CQ</operation> - </permission> - - <permission role="reader"> - <operation>GET</operation> - <operation>REGISTER_INTEREST</operation> - <operation>UNREGISTER_INTEREST</operation> - <operation>KEY_SET</operation> - <operation>CONTAINS_KEY</operation> - <operation>EXECUTE_FUNCTION</operation> - </permission> - - <permission role="writer"> - <operation>PUT</operation> - <operation>PUTALL</operation> - <operation>DESTROY</operation> - <operation>INVALIDATE</operation> - <operation>REGION_CLEAR</operation> - </permission> - - <permission role="queryRegions" regions="//Portfolios,/Positions/,AuthRegion"> - <operation>QUERY</operation> - <operation>EXECUTE_CQ</operation> - <operation>STOP_CQ</operation> - <operation>CLOSE_CQ</operation> - </permission> - - <permission role="registerInterest"> - <operation>REGISTER_INTEREST</operation> - <operation>GET</operation> - </permission> - - <permission role="unregisterInterest"> - <operation>UNREGISTER_INTEREST</operation> - <operation>GET</operation> - </permission> - -</acl> http://git-wip-us.apache.org/repos/asf/incubator-geode/blob/67dc693b/geode-core/src/test/resources/lib/authz-multiUser-ldap.xml ---------------------------------------------------------------------- diff --git a/geode-core/src/test/resources/lib/authz-multiUser-ldap.xml b/geode-core/src/test/resources/lib/authz-multiUser-ldap.xml deleted file mode 100644 index a8e5392..0000000 --- a/geode-core/src/test/resources/lib/authz-multiUser-ldap.xml +++ /dev/null @@ -1,83 +0,0 @@ -<?xml version="1.0" encoding="UTF-8"?> - -<!-- -Licensed to the Apache Software Foundation (ASF) under one -or more contributor license agreements. See the NOTICE file -distributed with this work for additional information -regarding copyright ownership. The ASF licenses this file -to you under the Apache License, Version 2.0 (the -"License"); you may not use this file except in compliance -with the License. You may obtain a copy of the License at - - http://www.apache.org/licenses/LICENSE-2.0 - -Unless required by applicable law or agreed to in writing, -software distributed under the License is distributed on an -"AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY -KIND, either express or implied. See the License for the -specific language governing permissions and limitations -under the License. ---> - -<!DOCTYPE acl PUBLIC "-//GemStone Systems, Inc.//GemFire XML Authorization 1.0//EN" - "authz5_5.dtd" > -<acl> - - <role name="reader"> - <user>gemfire1</user> - <user>gemfire2</user> - <user>gemfire3</user> - <user>gemfire4</user> - <user>gemfire5</user> - </role> - - <role name="writer"> - <user>gemfire1</user> - <user>gemfire2</user> - <user>gemfire6</user> - <user>gemfire7</user> - <user>gemfire8</user> - </role> - - <role name="cacheOps"> - <user>gemfire1</user> - <user>gemfire2</user> - </role> - - <role name="queryRegions"> - <user>gemfire9</user> - <user>gemfire10</user> - </role> - - <permission role="cacheOps"> - <operation>QUERY</operation> - <operation>EXECUTE_CQ</operation> - <operation>STOP_CQ</operation> - <operation>CLOSE_CQ</operation> - </permission> - - <permission role="reader"> - <operation>GET</operation> - <operation>REGISTER_INTEREST</operation> - <operation>UNREGISTER_INTEREST</operation> - <operation>KEY_SET</operation> - <operation>CONTAINS_KEY</operation> - <operation>EXECUTE_FUNCTION</operation> - </permission> - - <permission role="writer"> - <operation>PUT</operation> - <operation>PUTALL</operation> - <operation>DESTROY</operation> - <operation>INVALIDATE</operation> - <operation>REGION_CLEAR</operation> - </permission> - - <permission role="queryRegions" regions="Portfolios,/Positions//,/AuthRegion"> - <operation>QUERY</operation> - <operation>EXECUTE_CQ</operation> - <operation>STOP_CQ</operation> - <operation>CLOSE_CQ</operation> - </permission> - -</acl> http://git-wip-us.apache.org/repos/asf/incubator-geode/blob/67dc693b/geode-core/src/test/resources/lib/keys/gemfire1.keystore ---------------------------------------------------------------------- diff --git a/geode-core/src/test/resources/lib/keys/gemfire1.keystore b/geode-core/src/test/resources/lib/keys/gemfire1.keystore deleted file mode 100644 index 15270bb..0000000 Binary files a/geode-core/src/test/resources/lib/keys/gemfire1.keystore and /dev/null differ http://git-wip-us.apache.org/repos/asf/incubator-geode/blob/67dc693b/geode-core/src/test/resources/lib/keys/gemfire10.keystore ---------------------------------------------------------------------- diff --git a/geode-core/src/test/resources/lib/keys/gemfire10.keystore b/geode-core/src/test/resources/lib/keys/gemfire10.keystore deleted file mode 100644 index bb6f827..0000000 Binary files a/geode-core/src/test/resources/lib/keys/gemfire10.keystore and /dev/null differ http://git-wip-us.apache.org/repos/asf/incubator-geode/blob/67dc693b/geode-core/src/test/resources/lib/keys/gemfire11.keystore ---------------------------------------------------------------------- diff --git a/geode-core/src/test/resources/lib/keys/gemfire11.keystore b/geode-core/src/test/resources/lib/keys/gemfire11.keystore deleted file mode 100644 index 6839c74..0000000 Binary files a/geode-core/src/test/resources/lib/keys/gemfire11.keystore and /dev/null differ http://git-wip-us.apache.org/repos/asf/incubator-geode/blob/67dc693b/geode-core/src/test/resources/lib/keys/gemfire2.keystore ---------------------------------------------------------------------- diff --git a/geode-core/src/test/resources/lib/keys/gemfire2.keystore b/geode-core/src/test/resources/lib/keys/gemfire2.keystore deleted file mode 100644 index fcb7ab8..0000000 Binary files a/geode-core/src/test/resources/lib/keys/gemfire2.keystore and /dev/null differ http://git-wip-us.apache.org/repos/asf/incubator-geode/blob/67dc693b/geode-core/src/test/resources/lib/keys/gemfire3.keystore ---------------------------------------------------------------------- diff --git a/geode-core/src/test/resources/lib/keys/gemfire3.keystore b/geode-core/src/test/resources/lib/keys/gemfire3.keystore deleted file mode 100644 index 19afc4b..0000000 Binary files a/geode-core/src/test/resources/lib/keys/gemfire3.keystore and /dev/null differ http://git-wip-us.apache.org/repos/asf/incubator-geode/blob/67dc693b/geode-core/src/test/resources/lib/keys/gemfire4.keystore ---------------------------------------------------------------------- diff --git a/geode-core/src/test/resources/lib/keys/gemfire4.keystore b/geode-core/src/test/resources/lib/keys/gemfire4.keystore deleted file mode 100644 index c65916a..0000000 Binary files a/geode-core/src/test/resources/lib/keys/gemfire4.keystore and /dev/null differ http://git-wip-us.apache.org/repos/asf/incubator-geode/blob/67dc693b/geode-core/src/test/resources/lib/keys/gemfire5.keystore ---------------------------------------------------------------------- diff --git a/geode-core/src/test/resources/lib/keys/gemfire5.keystore b/geode-core/src/test/resources/lib/keys/gemfire5.keystore deleted file mode 100644 index d738cca..0000000 Binary files a/geode-core/src/test/resources/lib/keys/gemfire5.keystore and /dev/null differ http://git-wip-us.apache.org/repos/asf/incubator-geode/blob/67dc693b/geode-core/src/test/resources/lib/keys/gemfire6.keystore ---------------------------------------------------------------------- diff --git a/geode-core/src/test/resources/lib/keys/gemfire6.keystore b/geode-core/src/test/resources/lib/keys/gemfire6.keystore deleted file mode 100644 index 1fea2d3..0000000 Binary files a/geode-core/src/test/resources/lib/keys/gemfire6.keystore and /dev/null differ http://git-wip-us.apache.org/repos/asf/incubator-geode/blob/67dc693b/geode-core/src/test/resources/lib/keys/gemfire7.keystore ---------------------------------------------------------------------- diff --git a/geode-core/src/test/resources/lib/keys/gemfire7.keystore b/geode-core/src/test/resources/lib/keys/gemfire7.keystore deleted file mode 100644 index 7a3187c..0000000 Binary files a/geode-core/src/test/resources/lib/keys/gemfire7.keystore and /dev/null differ http://git-wip-us.apache.org/repos/asf/incubator-geode/blob/67dc693b/geode-core/src/test/resources/lib/keys/gemfire8.keystore ---------------------------------------------------------------------- diff --git a/geode-core/src/test/resources/lib/keys/gemfire8.keystore b/geode-core/src/test/resources/lib/keys/gemfire8.keystore deleted file mode 100644 index a3bb886..0000000 Binary files a/geode-core/src/test/resources/lib/keys/gemfire8.keystore and /dev/null differ http://git-wip-us.apache.org/repos/asf/incubator-geode/blob/67dc693b/geode-core/src/test/resources/lib/keys/gemfire9.keystore ---------------------------------------------------------------------- diff --git a/geode-core/src/test/resources/lib/keys/gemfire9.keystore b/geode-core/src/test/resources/lib/keys/gemfire9.keystore deleted file mode 100644 index 674b4e6..0000000 Binary files a/geode-core/src/test/resources/lib/keys/gemfire9.keystore and /dev/null differ http://git-wip-us.apache.org/repos/asf/incubator-geode/blob/67dc693b/geode-core/src/test/resources/lib/keys/ibm/gemfire1.keystore ---------------------------------------------------------------------- diff --git a/geode-core/src/test/resources/lib/keys/ibm/gemfire1.keystore b/geode-core/src/test/resources/lib/keys/ibm/gemfire1.keystore deleted file mode 100644 index 4f9120c..0000000 Binary files a/geode-core/src/test/resources/lib/keys/ibm/gemfire1.keystore and /dev/null differ http://git-wip-us.apache.org/repos/asf/incubator-geode/blob/67dc693b/geode-core/src/test/resources/lib/keys/ibm/gemfire10.keystore ---------------------------------------------------------------------- diff --git a/geode-core/src/test/resources/lib/keys/ibm/gemfire10.keystore b/geode-core/src/test/resources/lib/keys/ibm/gemfire10.keystore deleted file mode 100644 index 0bd97d7..0000000 Binary files a/geode-core/src/test/resources/lib/keys/ibm/gemfire10.keystore and /dev/null differ http://git-wip-us.apache.org/repos/asf/incubator-geode/blob/67dc693b/geode-core/src/test/resources/lib/keys/ibm/gemfire11.keystore ---------------------------------------------------------------------- diff --git a/geode-core/src/test/resources/lib/keys/ibm/gemfire11.keystore b/geode-core/src/test/resources/lib/keys/ibm/gemfire11.keystore deleted file mode 100644 index 62ae3c7..0000000 Binary files a/geode-core/src/test/resources/lib/keys/ibm/gemfire11.keystore and /dev/null differ http://git-wip-us.apache.org/repos/asf/incubator-geode/blob/67dc693b/geode-core/src/test/resources/lib/keys/ibm/gemfire2.keystore ---------------------------------------------------------------------- diff --git a/geode-core/src/test/resources/lib/keys/ibm/gemfire2.keystore b/geode-core/src/test/resources/lib/keys/ibm/gemfire2.keystore deleted file mode 100644 index c65bc81..0000000 Binary files a/geode-core/src/test/resources/lib/keys/ibm/gemfire2.keystore and /dev/null differ http://git-wip-us.apache.org/repos/asf/incubator-geode/blob/67dc693b/geode-core/src/test/resources/lib/keys/ibm/gemfire3.keystore ---------------------------------------------------------------------- diff --git a/geode-core/src/test/resources/lib/keys/ibm/gemfire3.keystore b/geode-core/src/test/resources/lib/keys/ibm/gemfire3.keystore deleted file mode 100644 index b0796e0..0000000 Binary files a/geode-core/src/test/resources/lib/keys/ibm/gemfire3.keystore and /dev/null differ http://git-wip-us.apache.org/repos/asf/incubator-geode/blob/67dc693b/geode-core/src/test/resources/lib/keys/ibm/gemfire4.keystore ---------------------------------------------------------------------- diff --git a/geode-core/src/test/resources/lib/keys/ibm/gemfire4.keystore b/geode-core/src/test/resources/lib/keys/ibm/gemfire4.keystore deleted file mode 100644 index 9c94018..0000000 Binary files a/geode-core/src/test/resources/lib/keys/ibm/gemfire4.keystore and /dev/null differ http://git-wip-us.apache.org/repos/asf/incubator-geode/blob/67dc693b/geode-core/src/test/resources/lib/keys/ibm/gemfire5.keystore ---------------------------------------------------------------------- diff --git a/geode-core/src/test/resources/lib/keys/ibm/gemfire5.keystore b/geode-core/src/test/resources/lib/keys/ibm/gemfire5.keystore deleted file mode 100644 index 33f6937..0000000 Binary files a/geode-core/src/test/resources/lib/keys/ibm/gemfire5.keystore and /dev/null differ http://git-wip-us.apache.org/repos/asf/incubator-geode/blob/67dc693b/geode-core/src/test/resources/lib/keys/ibm/gemfire6.keystore ---------------------------------------------------------------------- diff --git a/geode-core/src/test/resources/lib/keys/ibm/gemfire6.keystore b/geode-core/src/test/resources/lib/keys/ibm/gemfire6.keystore deleted file mode 100644 index 568f674..0000000 Binary files a/geode-core/src/test/resources/lib/keys/ibm/gemfire6.keystore and /dev/null differ http://git-wip-us.apache.org/repos/asf/incubator-geode/blob/67dc693b/geode-core/src/test/resources/lib/keys/ibm/gemfire7.keystore ---------------------------------------------------------------------- diff --git a/geode-core/src/test/resources/lib/keys/ibm/gemfire7.keystore b/geode-core/src/test/resources/lib/keys/ibm/gemfire7.keystore deleted file mode 100644 index 80e2d80..0000000 Binary files a/geode-core/src/test/resources/lib/keys/ibm/gemfire7.keystore and /dev/null differ http://git-wip-us.apache.org/repos/asf/incubator-geode/blob/67dc693b/geode-core/src/test/resources/lib/keys/ibm/gemfire8.keystore ---------------------------------------------------------------------- diff --git a/geode-core/src/test/resources/lib/keys/ibm/gemfire8.keystore b/geode-core/src/test/resources/lib/keys/ibm/gemfire8.keystore deleted file mode 100644 index a15def5..0000000 Binary files a/geode-core/src/test/resources/lib/keys/ibm/gemfire8.keystore and /dev/null differ http://git-wip-us.apache.org/repos/asf/incubator-geode/blob/67dc693b/geode-core/src/test/resources/lib/keys/ibm/gemfire9.keystore ---------------------------------------------------------------------- diff --git a/geode-core/src/test/resources/lib/keys/ibm/gemfire9.keystore b/geode-core/src/test/resources/lib/keys/ibm/gemfire9.keystore deleted file mode 100644 index 72087f3..0000000 Binary files a/geode-core/src/test/resources/lib/keys/ibm/gemfire9.keystore and /dev/null differ http://git-wip-us.apache.org/repos/asf/incubator-geode/blob/67dc693b/geode-core/src/test/resources/lib/keys/ibm/publickeyfile ---------------------------------------------------------------------- diff --git a/geode-core/src/test/resources/lib/keys/ibm/publickeyfile b/geode-core/src/test/resources/lib/keys/ibm/publickeyfile deleted file mode 100644 index 1b13872..0000000 Binary files a/geode-core/src/test/resources/lib/keys/ibm/publickeyfile and /dev/null differ http://git-wip-us.apache.org/repos/asf/incubator-geode/blob/67dc693b/geode-core/src/test/resources/lib/keys/publickeyfile ---------------------------------------------------------------------- diff --git a/geode-core/src/test/resources/lib/keys/publickeyfile b/geode-core/src/test/resources/lib/keys/publickeyfile deleted file mode 100644 index 9c2daa3..0000000 Binary files a/geode-core/src/test/resources/lib/keys/publickeyfile and /dev/null differ http://git-wip-us.apache.org/repos/asf/incubator-geode/blob/67dc693b/geode-core/src/test/resources/templates/security/authz5_5.dtd ---------------------------------------------------------------------- diff --git a/geode-core/src/test/resources/templates/security/authz5_5.dtd b/geode-core/src/test/resources/templates/security/authz5_5.dtd deleted file mode 100644 index 81a8150..0000000 --- a/geode-core/src/test/resources/templates/security/authz5_5.dtd +++ /dev/null @@ -1,105 +0,0 @@ -<?xml version="1.0" encoding="UTF-8"?> -<!-- -Licensed to the Apache Software Foundation (ASF) under one or more -contributor license agreements. See the NOTICE file distributed with -this work for additional information regarding copyright ownership. -The ASF licenses this file to You under the Apache License, Version 2.0 -(the "License"); you may not use this file except in compliance with -the License. You may obtain a copy of the License at - - http://www.apache.org/licenses/LICENSE-2.0 - -Unless required by applicable law or agreed to in writing, software -distributed under the License is distributed on an "AS IS" BASIS, -WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. -See the License for the specific language governing permissions and -limitations under the License. ---> -<!-- - -This is the XML DTD for the GemFire sample XML based authorization callback -in templates.security.XmlAuthorization. - -All XMLs must include a DOCTYPE of the following form: - - <!DOCTYPE acl PUBLIC - "-//GemStone Systems, Inc.//GemFire XML Authorization 1.0//EN" - "http://www.gemstone.com/dtd/authz5_5.dtd";> - -The contents of a declarative XML file correspond to APIs found in the - - com.gemstone.gemfire.security.AccessControl - -package. The sample implementation may be used to specify access control -policies. - ---> - -<!-- - -The following conventions apply to all GemFire sample authorization -XML file elements unless indicated otherwise. - -- In elements that contain PCDATA, leading and trailing whitespace in - the data may be ignored. - -- In elements whose value is an "enumerated type", the value is case - sensitive. - ---> - - -<!-- -The "acl" element is the root element of the authorization file. -This element contains the role to user mappings and role to permissions -mapping on a per region per operation basis. ---> - -<!ELEMENT acl (role+,permission+)> - -<!-- -The "role" element contains the set of users that have the permissions of -given role. A user can be present in more than one "role" elements in -which case the union of the permissions to all those roles determines -the full set of permissions to be given to the user. ---> - -<!ELEMENT role (user*)> -<!ATTLIST role - name CDATA #REQUIRED -> - -<!-- -The "user" element is contained within the "role" element and contains -the name of a user having the permissions of that role. ---> - -<!ELEMENT user (#PCDATA)> - -<!-- -The "permission" element specifies the list of operations that are allowed -for a particular role in the given regions as provided in the optional -"regions" attribute. The value of "regions" attribute should be a comma -separated list of region names for which permissions are to be provided. -If no "regions" attribute is provided then those permissions are provided -for all the other regions (i.e. other than those that have been explicitly -specified). Permissions for cache level operations REGION_DESTROY, -REGION_CREATE, QUERY and CQ operations should be specified with no "regions" -attribute. If cache-level permission is not provided for QUERY or CQ operations -then the permission for all the region names in the query string is checked. ---> - -<!ELEMENT permission (operation*)> -<!ATTLIST permission - role CDATA #REQUIRED - regions CDATA #IMPLIED -> - - -<!-- -The operation should be one of the following strings: - GET, PUT, PUTALL, DESTROY, REGISTER_INTEREST, UNREGISTER_INTEREST, - CONTAINS_KEY, KEY_SET, QUERY, EXECUTE_CQ, STOP_CQ, CLOSE_CQ, REGION_CLEAR, - REGION_CREATE, REGION_DESTROY ---> -<!ELEMENT operation (#PCDATA)> http://git-wip-us.apache.org/repos/asf/incubator-geode/blob/67dc693b/geode-core/src/test/resources/templates/security/authz6_0.dtd ---------------------------------------------------------------------- diff --git a/geode-core/src/test/resources/templates/security/authz6_0.dtd b/geode-core/src/test/resources/templates/security/authz6_0.dtd deleted file mode 100755 index 06cceff..0000000 --- a/geode-core/src/test/resources/templates/security/authz6_0.dtd +++ /dev/null @@ -1,110 +0,0 @@ -<?xml version="1.0" encoding="UTF-8"?> -<!-- -Licensed to the Apache Software Foundation (ASF) under one or more -contributor license agreements. See the NOTICE file distributed with -this work for additional information regarding copyright ownership. -The ASF licenses this file to You under the Apache License, Version 2.0 -(the "License"); you may not use this file except in compliance with -the License. You may obtain a copy of the License at - - http://www.apache.org/licenses/LICENSE-2.0 - -Unless required by applicable law or agreed to in writing, software -distributed under the License is distributed on an "AS IS" BASIS, -WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. -See the License for the specific language governing permissions and -limitations under the License. ---> -<!-- - -This is the XML DTD for the GemFire sample XML based authorization callback -in templates.security.XmlAuthorization. - -All XMLs must include a DOCTYPE of the following form: - - <!DOCTYPE acl PUBLIC - "-//GemStone Systems, Inc.//GemFire XML Authorization 1.0//EN" - "http://www.gemstone.com/dtd/authz5_5.dtd";> - -The contents of a declarative XML file correspond to APIs found in the - - com.gemstone.gemfire.security.AccessControl - -package. The sample implementation may be used to specify access control -policies. - ---> - -<!-- - -The following conventions apply to all GemFire sample authorization -XML file elements unless indicated otherwise. - -- In elements that contain PCDATA, leading and trailing whitespace in - the data may be ignored. - -- In elements whose value is an "enumerated type", the value is case - sensitive. - ---> - - -<!-- -The "acl" element is the root element of the authorization file. -This element contains the role to user mappings and role to permissions -mapping on a per region per operation basis. ---> - -<!ELEMENT acl (role+,permission+)> - -<!-- -The "role" element contains the set of users that have the permissions of -given role. A user can be present in more than one "role" elements in -which case the union of the permissions to all those roles determines -the full set of permissions to be given to the user. ---> - -<!ELEMENT role (user*)> -<!ATTLIST role - name CDATA #REQUIRED -> - -<!-- -The "user" element is contained within the "role" element and contains -the name of a user having the permissions of that role. ---> - -<!ELEMENT user (#PCDATA)> - -<!-- -The "permission" element specifies the list of operations that are allowed -for a particular role in the given regions as provided in the optional -"regions" attribute. The value of "regions" attribute should be a comma -separated list of region names for which permissions are to be provided. -If no "regions" attribute is provided then those permissions are provided -for all the other regions (i.e. other than those that have been explicitly -specified). Permissions for cache level operations REGION_DESTROY, -REGION_CREATE, QUERY and CQ operations should be specified with no "regions" -attribute. If cache-level permission is not provided for QUERY or CQ operations -then the permission for all the region names in the query string is checked. ---> - -<!ELEMENT permission (operation*)> -<!ATTLIST permission - role CDATA #REQUIRED - regions CDATA #IMPLIED -> - - -<!-- -The operation should be one of the following strings: - GET, PUT, PUTALL, DESTROY, REGISTER_INTEREST, UNREGISTER_INTEREST, - CONTAINS_KEY, KEY_SET, QUERY, EXECUTE_CQ, STOP_CQ, CLOSE_CQ, REGION_CLEAR, - REGION_CREATE, REGION_DESTROY ---> -<!ELEMENT operation (#PCDATA)> -<!ATTLIST operation - functionIds CDATA #IMPLIED - optimizeForWrite CDATA #IMPLIED - keySet CDATA #IMPLIED -> http://git-wip-us.apache.org/repos/asf/incubator-geode/blob/67dc693b/geode-cq/src/test/java/com/gemstone/gemfire/security/ClientAuthzObjectModDUnitTest.java ---------------------------------------------------------------------- diff --git a/geode-cq/src/test/java/com/gemstone/gemfire/security/ClientAuthzObjectModDUnitTest.java b/geode-cq/src/test/java/com/gemstone/gemfire/security/ClientAuthzObjectModDUnitTest.java index d8e675e..e29691b 100644 --- a/geode-cq/src/test/java/com/gemstone/gemfire/security/ClientAuthzObjectModDUnitTest.java +++ b/geode-cq/src/test/java/com/gemstone/gemfire/security/ClientAuthzObjectModDUnitTest.java @@ -21,6 +21,9 @@ import java.util.List; import java.util.Properties; import java.util.Random; +import com.gemstone.gemfire.security.generator.CredentialGenerator; +import com.gemstone.gemfire.security.generator.DummyAuthzCredentialGenerator; +import com.gemstone.gemfire.security.generator.DummyCredentialGenerator; import com.gemstone.gemfire.security.templates.UserPasswordAuthInit; import com.gemstone.gemfire.DataSerializable; http://git-wip-us.apache.org/repos/asf/incubator-geode/blob/67dc693b/geode-cq/src/test/java/com/gemstone/gemfire/security/ClientCQPostAuthorizationDUnitTest.java ---------------------------------------------------------------------- diff --git a/geode-cq/src/test/java/com/gemstone/gemfire/security/ClientCQPostAuthorizationDUnitTest.java b/geode-cq/src/test/java/com/gemstone/gemfire/security/ClientCQPostAuthorizationDUnitTest.java index 82b3b5c..138b90b 100644 --- a/geode-cq/src/test/java/com/gemstone/gemfire/security/ClientCQPostAuthorizationDUnitTest.java +++ b/geode-cq/src/test/java/com/gemstone/gemfire/security/ClientCQPostAuthorizationDUnitTest.java @@ -39,6 +39,8 @@ import com.gemstone.gemfire.distributed.internal.InternalDistributedSystem; import com.gemstone.gemfire.internal.AvailablePort; import com.gemstone.gemfire.internal.cache.GemFireCacheImpl; import com.gemstone.gemfire.internal.logging.InternalLogWriter; +import com.gemstone.gemfire.security.generator.AuthzCredentialGenerator; +import com.gemstone.gemfire.security.generator.CredentialGenerator; import com.gemstone.gemfire.test.dunit.Host; import com.gemstone.gemfire.test.dunit.Invoke; import com.gemstone.gemfire.test.dunit.LogWriterUtils; http://git-wip-us.apache.org/repos/asf/incubator-geode/blob/67dc693b/geode-cq/src/test/java/com/gemstone/gemfire/security/ClientPostAuthorizationDUnitTest.java ---------------------------------------------------------------------- diff --git a/geode-cq/src/test/java/com/gemstone/gemfire/security/ClientPostAuthorizationDUnitTest.java b/geode-cq/src/test/java/com/gemstone/gemfire/security/ClientPostAuthorizationDUnitTest.java index a1f0149..6cef09a 100644 --- a/geode-cq/src/test/java/com/gemstone/gemfire/security/ClientPostAuthorizationDUnitTest.java +++ b/geode-cq/src/test/java/com/gemstone/gemfire/security/ClientPostAuthorizationDUnitTest.java @@ -24,6 +24,8 @@ import java.util.Random; import com.gemstone.gemfire.cache.operations.OperationContext.OperationCode; import com.gemstone.gemfire.internal.AvailablePort; +import com.gemstone.gemfire.security.generator.AuthzCredentialGenerator; +import com.gemstone.gemfire.security.generator.CredentialGenerator; import com.gemstone.gemfire.test.dunit.Host; import com.gemstone.gemfire.test.dunit.LogWriterUtils; http://git-wip-us.apache.org/repos/asf/incubator-geode/blob/67dc693b/geode-cq/src/test/java/com/gemstone/gemfire/security/MultiuserAPIDUnitTest.java ---------------------------------------------------------------------- diff --git a/geode-cq/src/test/java/com/gemstone/gemfire/security/MultiuserAPIDUnitTest.java b/geode-cq/src/test/java/com/gemstone/gemfire/security/MultiuserAPIDUnitTest.java index 9e824c6..8693217 100644 --- a/geode-cq/src/test/java/com/gemstone/gemfire/security/MultiuserAPIDUnitTest.java +++ b/geode-cq/src/test/java/com/gemstone/gemfire/security/MultiuserAPIDUnitTest.java @@ -16,6 +16,8 @@ */ package com.gemstone.gemfire.security; +import com.gemstone.gemfire.security.generator.CredentialGenerator; +import com.gemstone.gemfire.security.generator.DummyCredentialGenerator; import hydra.Log; import java.io.IOException; http://git-wip-us.apache.org/repos/asf/incubator-geode/blob/67dc693b/geode-cq/src/test/java/com/gemstone/gemfire/security/MultiuserDurableCQAuthzDUnitTest.java ---------------------------------------------------------------------- diff --git a/geode-cq/src/test/java/com/gemstone/gemfire/security/MultiuserDurableCQAuthzDUnitTest.java b/geode-cq/src/test/java/com/gemstone/gemfire/security/MultiuserDurableCQAuthzDUnitTest.java index 68e4cf2..6c641d0 100644 --- a/geode-cq/src/test/java/com/gemstone/gemfire/security/MultiuserDurableCQAuthzDUnitTest.java +++ b/geode-cq/src/test/java/com/gemstone/gemfire/security/MultiuserDurableCQAuthzDUnitTest.java @@ -35,6 +35,8 @@ import com.gemstone.gemfire.distributed.internal.InternalDistributedSystem; import com.gemstone.gemfire.internal.AvailablePort; import com.gemstone.gemfire.internal.cache.GemFireCacheImpl; import com.gemstone.gemfire.internal.logging.InternalLogWriter; +import com.gemstone.gemfire.security.generator.AuthzCredentialGenerator; +import com.gemstone.gemfire.security.generator.CredentialGenerator; import com.gemstone.gemfire.test.dunit.Host; import com.gemstone.gemfire.test.dunit.Invoke; import com.gemstone.gemfire.test.dunit.LogWriterUtils; @@ -137,7 +139,7 @@ public class MultiuserDurableCQAuthzDUnitTest extends } private void doTest(Integer numOfUsers, Integer numOfPuts, - Boolean[] postAuthzAllowed, AuthzCredentialGenerator gen, Boolean keepAlive) + Boolean[] postAuthzAllowed, AuthzCredentialGenerator gen, Boolean keepAlive) throws Exception { CredentialGenerator cGen = gen.getCredentialGenerator(); Properties extraAuthProps = cGen.getSystemProperties();
