out_original.txt

一个完整的XACML工程,学习XACML技术的好例子!

Result:
Done|CN=admin1,OU=admin,O=permis,C=gb|permisRole:Admin|Thu Jan 01 00:00:00 GMT 2004|Fri Jan 01 00:00:00 GMT 2010|Holder can not assert privileges|0


Exptected result: 
Roles:  Admin
Validity time:  2004.01.01 00:00:00 to 2010.01.01 00:00:00
Can assert:  cannot
Delegation depth:  Unlimited

=======================================================================
Test number:  3
Requester: cn=soa,ou=admin,o=permis,c=gb    Holder:   cn=admin1,ou=admin,o=permis,c=gb
RoleType:  permisRole  RoleValues:  Student, Researcher, 
From:  2001.01.01 00:00:00  To:  2006.01.01 00:00:00
Assertion:  can  Depth:  2

Result:
Done|CN=admin1,OU=admin,O=permis,C=gb|permisRole:Researcher|Thu Jan 01 00:00:00 GMT 2004|Sun Jan 01 00:00:00 GMT 2006|Holder can assert privileges|2


Exptected result: 
Roles:  Researcher
Validity time:  2004.01.01 00:00:00 to 2006.01.01 00:00:00
Can assert:  can
Delegation depth:  2

=======================================================================
Test number:  4
Requester: cn=soa,ou=admin,o=permis,c=gb    Holder:   cn=admin1,ou=admin,o=permis,c=gb
RoleType:  perRole  RoleValues:  Staff, 
From:  2005.01.01 00:00:00  To:  2007.01.01 00:00:00
Assertion:  can  Depth:  2

Result:
Role type or role value is not supported in policy


Exptected result: 
Error:  Role type is not supported in policy

=======================================================================
Test number:  5
Requester: cn=soa,ou=admin,o=permis,c=gb    Holder:   cn=soa1, o=permis,c=gb
RoleType:  permisRole  RoleValues:  Staff, 
From:  2005.01.01 00:00:00  To:  2006.01.01 00:00:00
Assertion:  can  Depth:  2

Result:
Issuer do not have enough privilege or can not downgrade privilege or wrong request


Exptected result: 
Error:  Issuer do not have enough privilege or can not downgrade privilege or wrong request

=======================================================================
Test number:  6
Requester: cn=soa,ou=admin,o=permis,c=gb    Holder:   cn=aa1,ou=staff,o=permis,c=gb
RoleType:  permisRole  RoleValues:  Professor, Researcher, 
From:  2004.06.01 12:00:00  To:  2007.01.1 12:00:00
Assertion:  can  Depth:  -1

Result:
Done|CN=aa1,OU=staff,O=permis,C=gb|permisRole:Professor,Researcher|Tue Jun 01 12:00:00 BST 2004|Mon Jan 01 12:00:00 GMT 2007|Holder can assert privileges|-1


Exptected result: 
Roles:  Professor, Researcher
Validity time:  2004.06.01 12:00:00 to 2007.01.1 12:00:00
Can assert:  can
Delegation depth:  No delegate

=======================================================================
Test number:  7
Requester: cn=soa,ou=admin,o=permis,c=gb    Holder:   cn=aa1,ou=staff,o=permis,c=gb
RoleType:  permisRole  RoleValues:  Professor, Researcher, 
From:  2004.06.01 12:00:00  To:  2007.08.27 12:00:00
Assertion:  can  Depth:  -1

Result:
Done|CN=aa1,OU=staff,O=permis,C=gb|permisRole:Professor,Researcher|Tue Jun 01 12:00:00 BST 2004|Mon Aug 27 01:00:00 BST 2007|Holder can assert privileges|-1


Exptected result: 
Roles:  Professor, Researcher
Validity time:  2004.06.01 12:00:00 to 2007.08.27 01:00:00
Can assert:  can
Delegation depth:  No delegate

=======================================================================
Test number:  8
Requester: cn=soa,ou=admin,o=permis,c=gb    Holder:   cn=aa1,ou=staff,o=permis,c=gb
RoleType:  permisRole  RoleValues:  Professor, Staff, 
From:  2004.06.01 12:00:00  To:  2007.08.27 12:00:00
Assertion:  can  Depth:  0

Result:
Done|CN=aa1,OU=staff,O=permis,C=gb|permisRole:Professor|Tue Jun 01 12:00:00 BST 2004|Mon Aug 27 01:00:00 BST 2007|Holder can assert privileges|0


Exptected result: 
Roles:  Professor
Validity time:  2004.06.01 12:00:00 to 2007.08.27 01:00:00
Can assert:  can
Delegation depth:  Unlimited

=======================================================================
Test number:  9
Requester: cn=soa,ou=admin,o=permis,c=gb    Holder:   cn=aa1,ou=staff,o=permis,c=gb
RoleType:  permisRole  RoleValues:  Student, Researcher, 
From:  2004.06.01 12:00:00  To:  2007.08.27 12:00:00
Assertion:  can  Depth:  2

Result:
Done|CN=aa1,OU=staff,O=permis,C=gb|permisRole:Researcher|Tue Jun 01 12:00:00 BST 2004|Mon Aug 27 01:00:00 BST 2007|Holder can assert privileges|2


Exptected result: 
Roles:  Researcher
Validity time:  2004.06.01 12:00:00 to 2007.08.27 01:00:00
Can assert:  can
Delegation depth:  2

=======================================================================
Test number:  10
Requester: cn=soa,ou=admin,o=permis,c=gb    Holder:   cn=student1,ou=student,o=permis,c=gb
RoleType:  permisRole  RoleValues:  Student, 
From:  2004.06.10 12:00:00  To:  2007.08.27 12:00:00
Assertion:  can  Depth:  2

Result:
Done|CN=student1,OU=student,O=permis,C=gb|permisRole:Student|Thu Jun 10 12:00:00 BST 2004|Mon Aug 27 01:00:00 BST 2007|Holder can assert privileges|2


Exptected result: 
Roles:  Student
Validity time:  2004.06.10 12:00:00 to 2007.08.27 01:00:00
Can assert:  can
Delegation depth:  2

=======================================================================
Test number:  11
Requester: cn=soa,ou=admin,o=permis,c=gb    Holder:   cn=student1,ou=student,o=permis,c=gb
RoleType:  permisRole  RoleValues:  Professor, Student, 
From:  2003.06.01 12:00:00  To:  2008.08.27 12:00:00
Assertion:  can  Depth:  -1

Result:
Done|CN=student1,OU=student,O=permis,C=gb|permisRole:Student|Thu Jun 10 01:00:00 BST 2004|Mon Aug 27 01:00:00 BST 2007|Holder can assert privileges|-1


Exptected result: 
Roles:  Student
Validity time:  2004.06.10 00:00:00 to 2007.08.27 01:00:00
Can assert:  can
Delegation depth:  No Delegate

=======================================================================
Test number:  12
Requester: cn=dis,ou=admin,o=permis,c=gb    Holder:   cn=admin1,ou=admin,o=permis,c=gb
RoleType:  permisRole  RoleValues:  Admin, 
From:  2004.01.01 12:00:00  To:  2010.01.01 12:00:00
Assertion:  cannot  Depth:  0

Result:
Done|CN=admin1,OU=admin,O=permis,C=gb|permisRole:Admin|Thu Jan 01 12:00:00 GMT 2004|Fri Jan 01 00:00:00 GMT 2010|Holder can not assert privileges|0


Exptected result: 
Roles:  Admin
Validity time:  2004.01.01 12:00:00 to 2010.01.01 00:00:00
Can assert:  cannot
Delegation depth:  Unlimited

=======================================================================
Test number:  13
Requester: cn=dis,ou=admin,o=permis,c=gb    Holder:   cn=admin1,ou=admin,o=permis,c=gb
RoleType:  permisRole  RoleValues:  Admin, 
From:  2004.01.01 12:00:00  To:  2009.05.01 12:00:00
Assertion:  can  Depth:  1

Result:
Done|CN=admin1,OU=admin,O=permis,C=gb|permisRole:Admin|Thu Jan 01 12:00:00 GMT 2004|Fri May 01 12:00:00 BST 2009|Holder can assert privileges|1


Exptected result: 
Roles:  Admin
Validity time:  2004.01.01 12:00:00 to 2009.05.01 12:00:00
Can assert:  can
Delegation depth:  1

=======================================================================
Test number:  14
Requester: cn=dis,ou=admin,o=permis,c=gb    Holder:   cn=admin1,ou=admin,o=permis,c=gb
RoleType:  permisRole  RoleValues:  Admin, Professor, 
From:  2003.01.01 00:00:00  To:  2011.01.01 00:00:00
Assertion:  cannot  Depth:  0

Result:
Done|CN=admin1,OU=admin,O=permis,C=gb|permisRole:Admin|Thu Jan 01 00:00:00 GMT 2004|Fri Jan 01 00:00:00 GMT 2010|Holder can not assert privileges|0


Exptected result: 
Roles:  Admin
Validity time:  2004.01.01 00:00:00 to 2010.01.01 00:00:00
Can assert:  cannot
Delegation depth:  Unlimited

=======================================================================
Test number:  15
Requester: cn=dis,ou=admin,o=permis,c=gb    Holder:   cn=dis,ou=admin,o=permis,c=gb
RoleType:  permisRole  RoleValues:  Admin, Professor, 
From:  2006.01.01 00:00:00  To:  2009.01.01 00:00:00
Assertion:  cannot  Depth:  0

Result:
Issuer do not have enough privilege or can not downgrade privilege or wrong request


Exptected result: 
Error:  Issuer do not have enough privilege or can not downgrade privilege or wrong request

=======================================================================
Test number:  16
Requester: cn=dis,ou=admin,o=permis,c=gb    Holder:   cn=aa2,ou=staff,o=permis,c=gb
RoleType:  permisRole  RoleValues:  Professor, Researcher, 
From:  2004.06.01 12:00:00  To:  2007.08.27 12:00:00
Assertion:  cannot  Depth:  0

Result:
Done|CN=aa2,OU=staff,O=permis,C=gb|permisRole:Researcher,Professor|Tue Jun 01 12:00:00 BST 2004|Mon Aug 27 01:00:00 BST 2007|Holder can not assert privileges|0


Exptected result: 
Roles:  Researcher, Professor
Validity time:  2004.06.01 12:00:00 to 2007.08.27 01:00:00
Can assert:  cannot
Delegation depth:  Unlimited

=======================================================================
Test number:  17
Requester: cn=aa1,ou=staff,o=permis,c=gb    Holder:   cn=aa1,ou=staff,o=permis,c=gb
RoleType:  permisRole  RoleValues:  Student, Researcher, 
From:  2004.06.01 12:00:00  To:  2007.08.27 12:00:00
Assertion:  can  Depth:  2

Result:
Issuer do not have enough privilege or can not downgrade privilege or wrong request


Exptected result: 
Error:  Issuer do not have enough privilege or can not downgrade privilege or wrong request

=======================================================================
Test number:  18
Requester: cn=aa1,ou=staff,o=permis,c=gb    Holder:   cn=student1,ou=student,o=permis,c=gb
RoleType:  permisRole  RoleValues:  Student, 
From:  2004.06.01 12:00:00  To:  2007.08.27 12:00:00
Assertion:  can  Depth:  2

Result:
Issuer do not have enough privilege or can not downgrade privilege or wrong request


Exptected result: 
Error:  Issuer do not have enough privilege or can not downgrade privilege or wrong request

=======================================================================
Test number:  19
Requester: cn=aa1,ou=staff,o=permis,c=gb    Holder:   cn=aa2,ou=staff,o=permis,c=gb
RoleType:  permisRole  RoleValues:  Researcher, 
From:  2004.03.01 00:00:00  To:  2007.08.27 12:00:00
Assertion:  can  Depth:  2

Result:
Done|CN=aa2,OU=staff,O=permis,C=gb|permisRole:Researcher|Tue Jun 01 12:00:00 BST 2004|Mon Aug 27 01:00:00 BST 2007|Holder can assert privileges|1


Exptected result: 
Roles:  Researcher
Validity time:  2004.06.01 12:00:00 to 2007.08.27 01:00:00
Can assert:  can
Delegation depth:  1

=======================================================================
Test number:  20
Requester: cn=aa1,ou=staff,o=permis,c=gb    Holder:   cn=aa3,ou=staff,o=permis,c=gb
RoleType:  permisRole  RoleValues:  Professor, 
From:  2005.01.01 00:00:00  To:  2007.08.27 00:00:00
Assertion:  can  Depth:  1

Result: