Index: fedd/abac-src/ttg/demo/web/CVS/Entries
===================================================================
--- fedd/abac-src/ttg/demo/web/CVS/Entries	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
+++ fedd/abac-src/ttg/demo/web/CVS/Entries	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
@@ -0,0 +1,9 @@
+/SAdmir.txt/1.2/Mon Apr  7 23:08:11 2003//
+/SEAdmiraltyKDR.txt/1.1/Tue Jun 25 01:21:54 2002//
+/add_credential.html/1.4/Fri Jul 18 23:40:16 2003//
+/disc-sadmir.xml/1.1/Fri Jun 27 00:26:50 2003//
+/disc-ussh.xml/1.1/Fri Jun 27 00:26:50 2003//
+/medsup.txt/1.1/Tue Jun 25 01:19:38 2002//
+/naval.gif/1.1/Tue Jun 11 21:07:51 2002/-kb/
+/sadmir.xml/1.1/Mon Apr  7 23:08:11 2003//
+D
Index: fedd/abac-src/ttg/demo/web/CVS/Entries.Log
===================================================================
--- fedd/abac-src/ttg/demo/web/CVS/Entries.Log	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
+++ fedd/abac-src/ttg/demo/web/CVS/Entries.Log	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
@@ -0,0 +1,4 @@
+A D/WEB-INF////
+A D/medsup////
+A D/soap////
+A D/sweden////
Index: fedd/abac-src/ttg/demo/web/CVS/Repository
===================================================================
--- fedd/abac-src/ttg/demo/web/CVS/Repository	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
+++ fedd/abac-src/ttg/demo/web/CVS/Repository	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
@@ -0,0 +1,1 @@
+ttg/demo/web
Index: fedd/abac-src/ttg/demo/web/CVS/Root
===================================================================
--- fedd/abac-src/ttg/demo/web/CVS/Root	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
+++ fedd/abac-src/ttg/demo/web/CVS/Root	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
@@ -0,0 +1,1 @@
+:ext:jjacobs@src.columbia.sparta.com/cvs/abac
Index: fedd/abac-src/ttg/demo/web/SAdmir.txt
===================================================================
--- fedd/abac-src/ttg/demo/web/SAdmir.txt	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
+++ fedd/abac-src/ttg/demo/web/SAdmir.txt	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
@@ -0,0 +1,37 @@
+[EntityID]
+HashCode=FakeHashKeySAdmir
+ShortName=SAdmir
+
+[RTML]
+CredentialStore=sadmir.xml
+ApplicationDomain=FakeHashADSD01
+
+[SelfReachable]
+SE.usr <-- SAdmir
+
+[PolicyReachable]
+SE.friendly <-- US
+SAdmir.needsSLocs <-- SAdmir.NRetTacCom.NRetTacUsr
+SAdmir.NRetTacCom <-- USEUCOM.NRetUSTacCom
+SAdmir.getsSLocs <-- SE.friendly.usr ^ SAdmir.needsSLocs
+
+[IssuerTracesAll]
+friendly
+
+[IssuerTracesDef]
+getsSLocs
+needsSLocs
+NRetTacCom
+
+[SubjectTraceable]
+usr
+NRetTacUsr
+NRetUSTacCom
+assignedNRet
+
+[AccessControl]
+
+[AckPolicy]
+
+[Strategy]
+type=default
Index: fedd/abac-src/ttg/demo/web/SEAdmiraltyKDR.txt
===================================================================
--- fedd/abac-src/ttg/demo/web/SEAdmiraltyKDR.txt	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
+++ fedd/abac-src/ttg/demo/web/SEAdmiraltyKDR.txt	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
@@ -0,0 +1,26 @@
+# Initial configuration for Alice
+[EntityID]
+SEAdmirKDR
+
+[SelfReachable]
+SE.usr<--SEAdmirKDR
+
+[PolicyReachable]
+SEAdmirKDR.readsSELocs<--USEUCOM.NRetTacUsr  
+SEAdmirKDR.readsSELocs<--SE.usr  
+
+[IssuerTraceable]
+readsSELocs
+# Can this one be omitted?  
+# Probably there are some other types that don't have to be in here.
+friendlyUsr
+
+[SubjectTraceable]
+NRetTacUsr
+assignedNRet
+usr
+
+[AccessControl]
+
+[AckPolicy]
+
Index: fedd/abac-src/ttg/demo/web/WEB-INF/CVS/Entries
===================================================================
--- fedd/abac-src/ttg/demo/web/WEB-INF/CVS/Entries	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
+++ fedd/abac-src/ttg/demo/web/WEB-INF/CVS/Entries	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
@@ -0,0 +1,2 @@
+/web.xml/1.12/Fri Jul 18 19:39:23 2003//
+D
Index: fedd/abac-src/ttg/demo/web/WEB-INF/CVS/Repository
===================================================================
--- fedd/abac-src/ttg/demo/web/WEB-INF/CVS/Repository	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
+++ fedd/abac-src/ttg/demo/web/WEB-INF/CVS/Repository	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
@@ -0,0 +1,1 @@
+ttg/demo/web/WEB-INF
Index: fedd/abac-src/ttg/demo/web/WEB-INF/CVS/Root
===================================================================
--- fedd/abac-src/ttg/demo/web/WEB-INF/CVS/Root	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
+++ fedd/abac-src/ttg/demo/web/WEB-INF/CVS/Root	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
@@ -0,0 +1,1 @@
+:ext:jjacobs@src.columbia.sparta.com/cvs/abac
Index: fedd/abac-src/ttg/demo/web/WEB-INF/web.xml
===================================================================
--- fedd/abac-src/ttg/demo/web/WEB-INF/web.xml	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
+++ fedd/abac-src/ttg/demo/web/WEB-INF/web.xml	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
@@ -0,0 +1,226 @@
+<!DOCTYPE web-app 
+    PUBLIC "-//Sun Microsystems, Inc.//DTD Web Application 2.3//EN" 
+    "http://java.sun.com/dtd/web-app_2_3.dtd">
+
+<web-app>
+
+
+    <!-- General description of your web application -->
+
+    <display-name>ABAC Demo Application</display-name>
+    <description>
+      This is version 1.0 of an application to perform
+      attribute based access control using a servlet
+      authentication filter.  
+    </description>
+
+
+    <!-- Context initialization parameters that define shared
+         String constants used within your application, which
+         can be customized by the system administrator who is
+         installing your application.  The values actually
+         assigned to these parameters can be retrieved in a
+         servlet or JSP page by calling:
+
+             String value =
+               getServletContext().getInitParameter("name");
+
+         where "name" matches the <param-name> element of
+         one of these initialization parameters.
+
+         You can define any number of context initialization
+         parameters, including zero.
+    -->
+
+    <context-param>
+      <param-name>webmaster</param-name>
+      <param-value>Jay_Jacobs@networkassociates.com</param-value>
+      <description>
+        The EMAIL address of the administrator to whom questions
+        and comments about this application should be addressed.
+      </description>
+    </context-param>
+
+
+    <!-- Servlet definitions for the servlets that make up
+         your web application, including initialization
+         parameters.  With Tomcat, you can also send requests
+         to servlets not listed here with a request like this:
+
+           http://localhost:8080/{context-path}/servlet/{classname}
+
+         but this usage is not guaranteed to be portable.  It also
+         makes relative references to images and other resources
+         required by your servlet more complicated, so defining
+         all of your servlets (and defining a mapping to them with
+         a servlet-mapping element) is recommended.
+
+         Servlet initialization parameters can be retrieved in a
+         servlet or JSP page by calling:
+
+             String value =
+               getServletConfig().getInitParameter("name");
+
+         where "name" matches the <param-name> element of
+         one of these initialization parameters.
+
+         You can define any number of servlets, including zero.
+    -->
+
+    <!--filter>
+      <filter-name>medsup filter</filter-name>
+      <description>
+      The access mediator handles the initialization of a negotiation on
+      the server-side. This includes creating a new negotiation context,
+      a new agent, retrieve a remote reference to the peer's agent, and
+      constructing a new primary trust target. 
+
+      The servlet then waits for a decision. If the negotiation succeeds
+      the reuqest is allowed to continue along the filter/servlet chain.
+      Failure results in the request being blocked immediately. 
+      </description>
+      <filter-class>AccessMediator</filter-class>
+      <init-param>
+        <param-name>EntityName</param-name>
+        <param-value>MedSup</param-value>
+      </init-param>
+      <init-param>
+        <param-name>EntityHash</param-name>
+        <param-value>FakeHashKeyMedSup</param-value>
+      </init-param>
+      <init-param>
+        <param-name>PrimaryRole</param-name>
+        <param-value>discount</param-value>
+      </init-param>
+      <init-param>
+        <param-name>PolicyFile</param-name>
+        <param-value>/var/tomcat4/webapps/demo/medsup.txt</param-value>
+      </init-param>
+    </filter-->
+
+    <filter>
+      <filter-name>geni filter</filter-name>
+      <description>
+      The access mediator handles the initialization of a negotiation on
+      the server-side. This includes creating a new negotiation context,
+      a new agent, retrieve a remote reference to the peer's agent, and
+      constructing a new primary trust target. 
+
+      The servlet then waits for a decision. If the negotiation succeeds
+      the reuqest is allowed to continue along the filter/servlet chain.
+      Failure results in the request being blocked immediately. 
+      </description>
+      <filter-class>AccessMediator</filter-class>
+      <init-param>
+        <param-name>EntityName</param-name>
+        <param-value>GENI</param-value>
+      </init-param>
+      <init-param>
+        <param-name>EntityHash</param-name>
+        <param-value>FakeHashKeyGeni</param-value>
+      </init-param>
+      <init-param>
+        <param-name>PrimaryRole</param-name>
+        <param-value>GENI.CTFaccess</param-value>
+      </init-param>
+      <init-param>
+        <param-name>PolicyFile</param-name>
+        <param-value>/var/tomcat4/webapps/demo/geni.txt</param-value>
+      </init-param>
+    </filter>
+
+    <!--filter>
+      <filter-name>swedish filter</filter-name>
+      <description>
+      The access mediator handles the initialization of a negotiation on
+      the server-side. This includes creating a new negotiation context,
+      a new agent, retrieve a remote reference to the peer's agent, and
+      constructing a new primary trust target. 
+
+      The servlet then waits for a decision. If the negotiation succeeds
+      the reuqest is allowed to continue along the filter/servlet chain.
+      Failure results in the request being blocked immediately. 
+      </description>
+      <filter-class>AccessMediator</filter-class>
+      <init-param>
+        <param-name>EntityName</param-name>
+        <param-value>SAdmir</param-value>
+      </init-param>
+      <init-param>
+        <param-name>EntityHash</param-name>
+        <param-value>FakeHashKeySAdmir</param-value>
+      </init-param>
+      <init-param>
+        <param-name>PrimaryRole</param-name>
+        <param-value>SAdmin.getsSLocs</param-value>
+      </init-param>
+      <init-param>
+        <param-name>PolicyFile</param-name>
+        <param-value>/var/tomcat4/webapps/demo/WEB-INF/sadmir.txt</param-value>
+      </init-param>
+    </filter-->
+
+    <!--filter-mapping>
+      <filter-name>medsup filter</filter-name>
+      <url-pattern>/medsup/*</url-pattern>
+    </filter-mapping-->
+
+    <filter-mapping>
+      <filter-name>geni filter</filter-name>
+      <url-pattern>/geni/*</url-pattern>
+    </filter-mapping>
+
+    <!--filter-mapping>
+      <filter-name>swedish filter</filter-name>
+      <url-pattern>/sweden/*</url-pattern>
+    </filter-mapping-->
+
+    <servlet>
+      <servlet-name>session servlet</servlet-name>
+      <servlet-class>SessionServlet</servlet-class>
+    </servlet>
+
+    <!--servlet>
+      <servlet-name>swedish discovery</servlet-name>
+      <servlet-class>DiscoveryServlet</servlet-class>
+      <init-param>
+        <param-name>PolicyFile</param-name>
+        <param-value>/var/tomcat4/webapps/demo/WEB-INF/se.xml</param-value>
+      </init-param>
+    </servlet-->
+
+    <!--servlet>
+      <servlet-name>american discovery</servlet-name>
+      <servlet-class>DiscoveryServlet</servlet-class>
+      <init-param>
+        <param-name>PolicyFile</param-name>
+        <param-value>/var/tomcat4/webapps/demo/WEB-INF/usn.xml</param-value>
+      </init-param>
+    </servlet-->
+
+    <servlet-mapping>
+      <servlet-name>session servlet</servlet-name>
+      <url-pattern>/session</url-pattern>
+    </servlet-mapping>
+
+    <!--servlet-mapping>
+      <servlet-name>swedish discovery</servlet-name>
+      <url-pattern>/se-discovery</url-pattern>
+    </servlet-mapping-->
+
+    <!--servlet-mapping>
+      <servlet-name>american discovery</servlet-name>
+      <url-pattern>/us-discovery</url-pattern>
+    </servlet-mapping-->
+
+    <!-- Define the default session timeout for your application,
+         in minutes.  From a servlet or JSP page, you can modify
+         the timeout for a particular session dynamically by using
+         HttpSession.getMaxInactiveInterval(). -->
+
+    <session-config>
+      <session-timeout>30</session-timeout>    <!-- 30 minutes -->
+    </session-config>
+
+
+</web-app>
Index: fedd/abac-src/ttg/demo/web/add_credential.html
===================================================================
--- fedd/abac-src/ttg/demo/web/add_credential.html	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
+++ fedd/abac-src/ttg/demo/web/add_credential.html	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
@@ -0,0 +1,42 @@
+<html>
+<body>
+
+
+   <h1 align=center>Repository Administration Page</h1>
+   <center>
+   <FORM action="/demo/us-discovery" method="post">	
+     <INPUT type="submit" value="Delete Credential" name="reset">
+   </FORM>
+   <FORM action="/demo/us-discovery" method="post">
+      <INPUT type="submit" value="Add Credential"><BR>
+      <TEXTAREA name="xml" rows="25" cols="80">
+	<Credential id="FakeHashCredential03">
+		<!-- USEUCOM.NRetUSTacCom <- RADMSmith -->
+		<Preamble>
+			<ImportDomain name="s" idref="FakeHashADSD02"/>
+			<Principal shortName="USEUCOM">
+				<KeyHash>FakeHashKeyUSEUCOM</KeyHash>
+			</Principal>
+			<Principal shortName="RADMSmith">
+				<KeyHash>FakeHashKeyRADMSmith</KeyHash>
+			</Principal>
+		</Preamble>
+		<Issuer>
+			<PrincipalRef shortName="USEUCOM"/>
+		</Issuer>
+		<SimpleMember>
+			<HeadRoleTerm name="NRetUSTacCom" domain="s"/>
+			<PrincipalRef shortName="RADMSmith"/>
+		</SimpleMember>
+		<ValidityTime>
+			<IssueTime>2002-09-01T13:20:00</IssueTime>
+			<NotAfter>2004-09-01T13:20:00</NotAfter>
+		</ValidityTime>
+	</Credential>
+      </TEXTAREA>
+      <br>
+      <INPUT type="reset" value="Reset Default RTML"><br>
+     </FORM>
+   </center>
+</body>
+</html>
Index: fedd/abac-src/ttg/demo/web/disc-sadmir.xml
===================================================================
--- fedd/abac-src/ttg/demo/web/disc-sadmir.xml	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
+++ fedd/abac-src/ttg/demo/web/disc-sadmir.xml	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
@@ -0,0 +1,168 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<CredentialStore xmlns="http://crypto.stanford.edu/dc/RTMLv1.0" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://crypto.stanford.edu/dc/RTMLv1.0
+  file:///home/jay/rtml/schemas/RTMLv1.0q.xsd">
+	<ApplicationDomainSpecification uri="" id="FakeHashADSD01">
+		<RoleDeclaration name="friendly">
+			<Plain issuerTraces="all" subjectTraces="none"/>
+		</RoleDeclaration>
+		<RoleDeclaration name="getsSLocs">
+			<Plain issuerTraces="def" subjectTraces="none"/>
+		</RoleDeclaration>
+		<RoleDeclaration name="needsSLocs">
+			<Plain issuerTraces="def" subjectTraces="none"/>
+		</RoleDeclaration>
+		<RoleDeclaration name="NRetTacCom">
+			<Plain issuerTraces="def" subjectTraces="none"/>
+		</RoleDeclaration>
+		<RoleDeclaration name="usr">
+			<Plain issuerTraces="none" subjectTraces="all"/>
+		</RoleDeclaration>
+		<RoleDeclaration name="NRetTacUsr">
+			<Plain issuerTraces="none" subjectTraces="all"/>
+		</RoleDeclaration>
+		<RoleDeclaration name="NRetUSTacCom">
+			<Plain issuerTraces="none" subjectTraces="all"/>
+		</RoleDeclaration>
+		<RoleDeclaration name="assignedNRet">
+			<Plain issuerTraces="none" subjectTraces="all"/>
+		</RoleDeclaration>
+		<RoleDeclaration name="friendlyUsr">
+			<Plain issuerTraces="all" subjectTraces="none"/>
+		</RoleDeclaration>
+	</ApplicationDomainSpecification>
+	<Credential id="FakeHashCredential01">
+		<!-- SE.usr <- SAdmir-->
+		<Preamble>
+			<ImportDomain name="s" idref="FakeHashADSD01"/>
+			<Principal shortName="SE">
+				<KeyHash>SE</KeyHash>
+			</Principal>
+			<Principal shortName="SAdmir">
+				<KeyHash>SAdmir</KeyHash>
+			</Principal>
+		</Preamble>
+		<Issuer>
+			<PrincipalRef shortName="SE"/>
+		</Issuer>
+		<SimpleMember>
+			<HeadRoleTerm name="usr" domain="s"/>
+			<PrincipalRef shortName="SAdmir"/>
+		</SimpleMember>
+		<ValidityTime>
+			<IssueTime>2002-09-01T13:20:00</IssueTime>
+			<NotAfter>2003-09-01T13:20:00</NotAfter>
+		</ValidityTime>
+	</Credential>
+	<Credential id="FakeHashCredential02">
+		<!-- SE.friendly <- US -->
+		<Preamble>
+			<ImportDomain name="s" idref="FakeHashADSD01"/>
+			<Principal shortName="SE">
+				<KeyHash>SE</KeyHash>
+			</Principal>
+			<Principal shortName="US">
+				<KeyHash>US</KeyHash>
+			</Principal>
+		</Preamble>
+		<Issuer>
+			<PrincipalRef shortName="SE"/>
+		</Issuer>
+		<SimpleMember>
+			<HeadRoleTerm name="friendly" domain="s"/>
+			<PrincipalRef shortName="US"/>
+		</SimpleMember>
+		<ValidityTime>
+			<IssueTime>2002-09-01T13:20:00</IssueTime>
+			<NotAfter>2003-09-01T13:20:00</NotAfter>
+		</ValidityTime>
+	</Credential>
+	<Credential id="FakeHashCredential03">
+		<!-- SAdmir.needsSLocs <- Sadmir.NRetTacCom.NRetTacUsr-->
+		<Preamble>
+			<ImportDomain name="s" idref="FakeHashADSD01"/>
+			<Principal shortName="SAdmir">
+				<KeyHash>SAdmir</KeyHash>
+			</Principal>
+		</Preamble>
+		<Issuer>
+			<PrincipalRef shortName="SAdmir"/>
+		</Issuer>
+		<LinkedContainment>
+			<HeadRoleTerm name="needsSLocs" domain="s"/>
+			<LinkedRole>
+				<RoleTerm name="NRetTacCom" domain="s"/>
+				<RoleTerm name="NRetTacUsr" domain="s"/>
+			</LinkedRole>
+		</LinkedContainment>
+		<ValidityTime>
+			<IssueTime>2002-09-01T13:20:00</IssueTime>
+			<NotAfter>2003-09-01T13:20:00</NotAfter>
+		</ValidityTime>
+	</Credential>
+	<Credential id="FakeHashCredential04">
+		<!-- SAdmir.NRetTacCom <- USEUCOM.NRetUSTacCom-->
+		<Preamble>
+			<ImportDomain name="s" idref="FakeHashADSD01"/>
+			<Principal shortName="SAdmir">
+				<KeyHash> SAdmir</KeyHash>
+			</Principal>
+			<Principal shortName="USEUCOM">
+				<KeyHash> USEUCOM</KeyHash>
+			</Principal>
+		</Preamble>
+		<Issuer>
+			<PrincipalRef shortName="SAdmir"/>
+		</Issuer>
+		<SimpleContainment>
+			<HeadRoleTerm name="NRetTacCom" domain="s"/>
+			<ExternalRole>
+				<PrincipalRef shortName="USEUCOM"/>
+				<RoleTerm name="NRetUSTacCom" domain="s"/>
+			</ExternalRole>
+		</SimpleContainment>
+		<ValidityTime>
+			<IssueTime>2002-09-01T13:20:00</IssueTime>
+			<NotAfter>2003-09-01T13:20:00</NotAfter>
+		</ValidityTime>
+	</Credential>
+	<Credential id="FakeHashCredential05">
+		<!-- SAdmir.getsSLocs <- SE.friendly.usr ^ SAdmir.needsSLocs-->
+		<Preamble>
+			<ImportDomain name="s" idref="FakeHashADSD01"/>
+			<Principal shortName="SE">
+				<KeyHash>SE</KeyHash>
+			</Principal>
+			<Principal shortName="SAdmir">
+				<KeyHash>SAdmir</KeyHash>
+			</Principal>
+		</Preamble>
+		<Issuer>
+			<PrincipalRef shortName="SAdmir"/>
+		</Issuer>
+		<SimpleContainment>
+			<HeadRoleTerm name="friendly" domain="s"/>
+			<ExternalRole>
+				<PrincipalRef shortName="SE"/>
+				<RoleTerm name="friendly" domain="s"/>
+			</ExternalRole>
+		</SimpleContainment>
+		<LinkedContainment>
+			<HeadRoleTerm name="friendlyUsr" domain="s"/>
+			<LinkedRole>
+				<RoleTerm name="friendly" domain="s"/>
+				<RoleTerm name="usr" domain="s"/>
+			</LinkedRole>
+		</LinkedContainment>
+		<IntersectionContainment>
+			<HeadRoleTerm name="getsSLocs" domain="s"/>
+			<Intersection>
+				<RoleTerm name="friendlyUsr" domain="s"/>
+				<RoleTerm name="needsSLocs" domain="s"/>
+			</Intersection>
+		</IntersectionContainment>
+		<ValidityTime>
+			<IssueTime>2002-09-01T13:20:00</IssueTime>
+			<NotAfter>2003-09-01T13:20:00</NotAfter>
+		</ValidityTime>
+	</Credential>
+</CredentialStore>
Index: fedd/abac-src/ttg/demo/web/disc-ussh.xml
===================================================================
--- fedd/abac-src/ttg/demo/web/disc-ussh.xml	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
+++ fedd/abac-src/ttg/demo/web/disc-ussh.xml	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
@@ -0,0 +1,148 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!-- edited with XML Spy v4.3 U (http://www.xmlspy.com) by Kangshi (Kangshi) -->
+<CredentialStore xmlns="http://crypto.stanford.edu/dc/RTMLv1.0" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="file:///var/tomcat4/webapps/demo/WEB-INF/RTMLv1.0q.xsd">
+	<ApplicationDomainSpecification uri="" id="FakeHashADSD02">
+		<RoleDeclaration name="friendly">
+			<Plain issuerTraces="all" subjectTraces="none"/>
+		</RoleDeclaration>
+		<RoleDeclaration name="getsSLocs">
+			<Plain issuerTraces="def" subjectTraces="none"/>
+		</RoleDeclaration>
+		<RoleDeclaration name="NRetTacCom">
+			<Plain issuerTraces="def" subjectTraces="none"/>
+		</RoleDeclaration>
+		<RoleDeclaration name="usr">
+			<Plain issuerTraces="none" subjectTraces="all"/>
+		</RoleDeclaration>
+		<RoleDeclaration name="NRetTacUsr">
+			<Plain issuerTraces="none" subjectTraces="all"/>
+		</RoleDeclaration>
+		<RoleDeclaration name="NRetUSTacCom">
+			<Plain issuerTraces="none" subjectTraces="all"/>
+		</RoleDeclaration>
+		<RoleDeclaration name="assignedNRet">
+			<Plain issuerTraces="none" subjectTraces="all"/>
+		</RoleDeclaration>
+		<RoleDeclaration name="friendlyUsr">
+			<Plain issuerTraces="none" subjectTraces="all"/>
+		</RoleDeclaration>
+	</ApplicationDomainSpecification>
+	<Credential id="FakeHashCredential01">
+		<!-- USN.assignedNRet <- USSH -->
+		<Preamble>
+			<ImportDomain name="s" idref="FakeHashADSD02"/>
+			<Principal shortName="USN">
+				<KeyHash>USN</KeyHash>
+			</Principal>
+			<Principal shortName="USSH">
+				<KeyHash>USSH</KeyHash>
+			</Principal>
+		</Preamble>
+		<Issuer>
+			<PrincipalRef shortName="USN"/>
+		</Issuer>
+		<SimpleMember>
+			<HeadRoleTerm name="assignedNRet" domain="s"/>
+			<PrincipalRef shortName="USSH"/>
+		</SimpleMember>
+		<ValidityTime>
+			<IssueTime>2002-09-01T13:20:00</IssueTime>
+			<NotAfter>2004-09-01T13:20:00</NotAfter>
+		</ValidityTime>
+	</Credential>
+	<Credential id="FakeHashCredential02">
+		<!-- US.usr <- USSH -->
+		<Preamble>
+			<ImportDomain name="s" idref="FakeHashADSD02"/>
+			<Principal shortName="USSH">
+				<KeyHash>USSH</KeyHash>
+			</Principal>
+			<Principal shortName="US">
+				<KeyHash>US</KeyHash>
+			</Principal>
+		</Preamble>
+		<Issuer>
+			<PrincipalRef shortName="US"/>
+		</Issuer>
+		<SimpleMember>
+			<HeadRoleTerm name="usr" domain="s"/>
+			<PrincipalRef shortName="USSH"/>
+		</SimpleMember>
+		<ValidityTime>
+			<IssueTime>2002-09-01T13:20:00</IssueTime>
+			<NotAfter>2004-09-01T13:20:00</NotAfter>
+		</ValidityTime>
+	</Credential>
+	<Credential id="FakeHashCredential03">
+		<!-- USEUCOM.NRetUSTacCom <- RADMSmith -->
+		<Preamble>
+			<ImportDomain name="s" idref="FakeHashADSD02"/>
+			<Principal shortName="USEUCOM">
+				<KeyHash>USEUCOM</KeyHash>
+			</Principal>
+			<Principal shortName="RADMSmith">
+				<KeyHash>RADMSmith</KeyHash>
+			</Principal>
+		</Preamble>
+		<Issuer>
+			<PrincipalRef shortName="USEUCOM"/>
+		</Issuer>
+		<SimpleMember>
+			<HeadRoleTerm name="NRetUSTacCom" domain="s"/>
+			<PrincipalRef shortName="RADMSmith"/>
+		</SimpleMember>
+		<ValidityTime>
+			<IssueTime>2002-09-01T13:20:00</IssueTime>
+			<NotAfter>2004-09-01T13:20:00</NotAfter>
+		</ValidityTime>
+	</Credential>
+	<Credential id="FakeHashCredential04">
+		<!-- RADMSmith.NRetTacUsr <- USN.assignedNRet -->
+		<Preamble>
+			<ImportDomain name="s" idref="FakeHashADSD02"/>
+			<Principal shortName="RADMSmith">
+				<KeyHash>RADMSmith</KeyHash>
+			</Principal>
+			<Principal shortName="USN">
+				<KeyHash>USN</KeyHash>
+			</Principal>
+		</Preamble>
+		<Issuer>
+			<PrincipalRef shortName="RADMSmith"/>
+		</Issuer>
+		<SimpleContainment>
+			<HeadRoleTerm name="NRetTacUsr" domain="s"/>
+			<ExternalRole>
+				<PrincipalRef shortName="USN"/>
+				<RoleTerm name="assignedNRet" domain="s"/>
+			</ExternalRole>
+		</SimpleContainment>
+		<ValidityTime>
+			<IssueTime>2002-09-01T13:20:00</IssueTime>
+			<NotAfter>2004-09-01T13:20:00</NotAfter>
+		</ValidityTime>
+	</Credential>
+	<Credential id="FakeHashCredential05">
+		<!-- US.friendly <- SE -->
+		<Preamble>
+			<ImportDomain name="s" idref="FakeHashADSD02"/>
+			<Principal shortName="SE">
+				<KeyHash>SE</KeyHash>
+			</Principal>
+			<Principal shortName="US">
+				<KeyHash>US</KeyHash>
+			</Principal>
+		</Preamble>
+		<Issuer>
+			<PrincipalRef shortName="US"/>
+		</Issuer>
+		<SimpleMember>
+			<HeadRoleTerm name="friendly" domain="s"/>
+			<PrincipalRef shortName="SE"/>
+		</SimpleMember>
+		<ValidityTime>
+			<IssueTime>2002-09-01T13:20:00</IssueTime>
+			<NotAfter>2004-09-01T13:20:00</NotAfter>
+		</ValidityTime>
+	</Credential>
+</CredentialStore>
Index: fedd/abac-src/ttg/demo/web/geni.txt
===================================================================
--- fedd/abac-src/ttg/demo/web/geni.txt	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
+++ fedd/abac-src/ttg/demo/web/geni.txt	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
@@ -0,0 +1,31 @@
+[EntityID]
+GENI
+
+[SelfReachable]
+UCLA.ACMofficer<--Mike
+MIT.CTFcontestant<--MIT.student
+UCLA.CTFcontestant<--UCLA.ACMofficer.CTFcontestant
+
+[PolicyReachable]
+GENI.CTFaccess<--ACM.CTFrep.CTFcontestant
+ACM.CTFrep<--USC
+ACM.CTFrep<--MIT
+ACM.CTFrep<--UCLA
+
+[IssuerTracesAll]
+
+[IssuerTracesDef]
+CTFrep
+CTFaccess
+
+[SubjectTraceable]
+CTFcontestant
+student
+ACMofficer
+
+[AccessControl]
+
+[Ack]
+
+[Strategy]
+type=default
Index: fedd/abac-src/ttg/demo/web/geni/index.html
===================================================================
--- fedd/abac-src/ttg/demo/web/geni/index.html	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
+++ fedd/abac-src/ttg/demo/web/geni/index.html	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
@@ -0,0 +1,7 @@
+<html>
+<title>ABAC Demo Application</title>
+<body>
+<center><img src="naval.gif"></center>
+</body>
+</html>
+
Index: fedd/abac-src/ttg/demo/web/medsup.txt
===================================================================
--- fedd/abac-src/ttg/demo/web/medsup.txt	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
+++ fedd/abac-src/ttg/demo/web/medsup.txt	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
@@ -0,0 +1,39 @@
+# Initial configuration for MedSup
+[EntityID]
+MedSup
+
+[PrimaryTrustTarget]
+MedSup: MedSup.discount <--?-- Alice
+
+[SelfReachable]
+ReliefNet.member<--MedSup
+
+[PolicyReachable]
+MedSup.discount<--ReliefNet.provisioner
+
+[IssuerTraceable]
+discount
+
+[SubjectTraceable]
+member
+provisioner
+
+[Access Control]
+
+
+[AckPolicy]
+
+
+# <Alice>
+#
+#[Credentials]
+#MedixFund.PurchasingA<--A
+#ReliefNet.provisioner<--MedixFund.purchasingA
+#MedixFund.cPartner<--ReliefNet.member
+#
+#[Access Control]
+#MedixFund.purchasingA<--Alice		true
+#
+#[Ack]
+#MedixFund.purchasingA		MedixFund.cPartner
+#
Index: fedd/abac-src/ttg/demo/web/medsup/CVS/Entries
===================================================================
--- fedd/abac-src/ttg/demo/web/medsup/CVS/Entries	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
+++ fedd/abac-src/ttg/demo/web/medsup/CVS/Entries	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
@@ -0,0 +1,2 @@
+/index.html/1.1/Fri Jun 21 22:16:50 2002//
+D
Index: fedd/abac-src/ttg/demo/web/medsup/CVS/Repository
===================================================================
--- fedd/abac-src/ttg/demo/web/medsup/CVS/Repository	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
+++ fedd/abac-src/ttg/demo/web/medsup/CVS/Repository	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
@@ -0,0 +1,1 @@
+ttg/demo/web/medsup
Index: fedd/abac-src/ttg/demo/web/medsup/CVS/Root
===================================================================
--- fedd/abac-src/ttg/demo/web/medsup/CVS/Root	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
+++ fedd/abac-src/ttg/demo/web/medsup/CVS/Root	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
@@ -0,0 +1,1 @@
+:ext:jjacobs@src.columbia.sparta.com/cvs/abac
Index: fedd/abac-src/ttg/demo/web/medsup/index.html
===================================================================
--- fedd/abac-src/ttg/demo/web/medsup/index.html	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
+++ fedd/abac-src/ttg/demo/web/medsup/index.html	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
@@ -0,0 +1,7 @@
+<html>
+<title>ABAC Demo Application</title>
+<body>
+<center><img src="naval.gif"></center>
+</body>
+</html>
+
Index: fedd/abac-src/ttg/demo/web/sadmir.xml
===================================================================
--- fedd/abac-src/ttg/demo/web/sadmir.xml	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
+++ fedd/abac-src/ttg/demo/web/sadmir.xml	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
@@ -0,0 +1,168 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<CredentialStore xmlns="http://crypto.stanford.edu/dc/RTMLv1.0" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://crypto.stanford.edu/dc/RTMLv1.0
+  file:///home/jay/rtml/schemas/RTMLv1.0q.xsd">
+	<ApplicationDomainSpecification uri="" id="FakeHashADSD01">
+		<RoleDeclaration name="friendly">
+			<Plain issuerTraces="all" subjectTraces="none"/>
+		</RoleDeclaration>
+		<RoleDeclaration name="getsSLocs">
+			<Plain issuerTraces="def" subjectTraces="none"/>
+		</RoleDeclaration>
+		<RoleDeclaration name="needsSLocs">
+			<Plain issuerTraces="def" subjectTraces="none"/>
+		</RoleDeclaration>
+		<RoleDeclaration name="NRetTacCom">
+			<Plain issuerTraces="def" subjectTraces="none"/>
+		</RoleDeclaration>
+		<RoleDeclaration name="usr">
+			<Plain issuerTraces="none" subjectTraces="all"/>
+		</RoleDeclaration>
+		<RoleDeclaration name="NRetTacUsr">
+			<Plain issuerTraces="none" subjectTraces="all"/>
+		</RoleDeclaration>
+		<RoleDeclaration name="NRetUSTacCom">
+			<Plain issuerTraces="none" subjectTraces="all"/>
+		</RoleDeclaration>
+		<RoleDeclaration name="assignedNRet">
+			<Plain issuerTraces="none" subjectTraces="all"/>
+		</RoleDeclaration>
+		<RoleDeclaration name="friendlyUsr">
+			<Plain issuerTraces="all" subjectTraces="none"/>
+		</RoleDeclaration>
+	</ApplicationDomainSpecification>
+	<Credential id="FakeHashCredential01">
+		<!-- SE.usr <- SAdmir-->
+		<Preamble>
+			<ImportDomain name="s" idref="FakeHashADSD01"/>
+			<Principal shortName="SE">
+				<KeyHash>FakeHashKeySE</KeyHash>
+			</Principal>
+			<Principal shortName="SAdmir">
+				<KeyHash>FakeHashKeySAdmir</KeyHash>
+			</Principal>
+		</Preamble>
+		<Issuer>
+			<PrincipalRef shortName="SE"/>
+		</Issuer>
+		<SimpleMember>
+			<HeadRoleTerm name="usr" domain="s"/>
+			<PrincipalRef shortName="SAdmir"/>
+		</SimpleMember>
+		<ValidityTime>
+			<IssueTime>2002-09-01T13:20:00</IssueTime>
+			<NotAfter>2003-09-01T13:20:00</NotAfter>
+		</ValidityTime>
+	</Credential>
+	<Credential id="FakeHashCredential02">
+		<!-- SE.friendly <- US -->
+		<Preamble>
+			<ImportDomain name="s" idref="FakeHashADSD01"/>
+			<Principal shortName="SE">
+				<KeyHash>FakeHashKeySE</KeyHash>
+			</Principal>
+			<Principal shortName="US">
+				<KeyHash>FakeHashKeyUS</KeyHash>
+			</Principal>
+		</Preamble>
+		<Issuer>
+			<PrincipalRef shortName="SE"/>
+		</Issuer>
+		<SimpleMember>
+			<HeadRoleTerm name="friendly" domain="s"/>
+			<PrincipalRef shortName="US"/>
+		</SimpleMember>
+		<ValidityTime>
+			<IssueTime>2002-09-01T13:20:00</IssueTime>
+			<NotAfter>2003-09-01T13:20:00</NotAfter>
+		</ValidityTime>
+	</Credential>
+	<Credential id="FakeHashCredential03">
+		<!-- SAdmir.needsSLocs <- Sadmir.NRetTacCom.NRetTacUsr-->
+		<Preamble>
+			<ImportDomain name="s" idref="FakeHashADSD01"/>
+			<Principal shortName="SAdmir">
+				<KeyHash>FakeHashKeySAdmir</KeyHash>
+			</Principal>
+		</Preamble>
+		<Issuer>
+			<PrincipalRef shortName="SAdmir"/>
+		</Issuer>
+		<LinkedContainment>
+			<HeadRoleTerm name="needsSLocs" domain="s"/>
+			<LinkedRole>
+				<RoleTerm name="NRetTacCom" domain="s"/>
+				<RoleTerm name="NRetTacUsr" domain="s"/>
+			</LinkedRole>
+		</LinkedContainment>
+		<ValidityTime>
+			<IssueTime>2002-09-01T13:20:00</IssueTime>
+			<NotAfter>2003-09-01T13:20:00</NotAfter>
+		</ValidityTime>
+	</Credential>
+	<Credential id="FakeHashCredential04">
+		<!-- SAdmir.NRetTacCom <- USEUCOM.NRetUSTacCom-->
+		<Preamble>
+			<ImportDomain name="s" idref="FakeHashADSD01"/>
+			<Principal shortName="SAdmir">
+				<KeyHash>FakeHashKeySAdmir</KeyHash>
+			</Principal>
+			<Principal shortName="USEUCOM">
+				<KeyHash>FakeHashKeyUSEUCOM</KeyHash>
+			</Principal>
+		</Preamble>
+		<Issuer>
+			<PrincipalRef shortName="SAdmir"/>
+		</Issuer>
+		<SimpleContainment>
+			<HeadRoleTerm name="NRetTacCom" domain="s"/>
+			<ExternalRole>
+				<PrincipalRef shortName="USEUCOM"/>
+				<RoleTerm name="NRetUSTacCom" domain="s"/>
+			</ExternalRole>
+		</SimpleContainment>
+		<ValidityTime>
+			<IssueTime>2002-09-01T13:20:00</IssueTime>
+			<NotAfter>2003-09-01T13:20:00</NotAfter>
+		</ValidityTime>
+	</Credential>
+	<Credential id="FakeHashCredential05">
+		<!-- SAdmir.getsSLocs <- SE.friendly.usr ^ SAdmir.needsSLocs-->
+		<Preamble>
+			<ImportDomain name="s" idref="FakeHashADSD01"/>
+			<Principal shortName="SE">
+				<KeyHash>FakeHashKeySE</KeyHash>
+			</Principal>
+			<Principal shortName="SAdmir">
+				<KeyHash>FakeHashKeySAdmir</KeyHash>
+			</Principal>
+		</Preamble>
+		<Issuer>
+			<PrincipalRef shortName="SAdmir"/>
+		</Issuer>
+		<SimpleContainment>
+			<HeadRoleTerm name="friendly" domain="s"/>
+			<ExternalRole>
+				<PrincipalRef shortName="SE"/>
+				<RoleTerm name="friendly" domain="s"/>
+			</ExternalRole>
+		</SimpleContainment>
+		<LinkedContainment>
+			<HeadRoleTerm name="friendlyUsr" domain="s"/>
+			<LinkedRole>
+				<RoleTerm name="friendly" domain="s"/>
+				<RoleTerm name="usr" domain="s"/>
+			</LinkedRole>
+		</LinkedContainment>
+		<IntersectionContainment>
+			<HeadRoleTerm name="getsSLocs" domain="s"/>
+			<Intersection>
+				<RoleTerm name="friendlyUsr" domain="s"/>
+				<RoleTerm name="needsSLocs" domain="s"/>
+			</Intersection>
+		</IntersectionContainment>
+		<ValidityTime>
+			<IssueTime>2002-09-01T13:20:00</IssueTime>
+			<NotAfter>2003-09-01T13:20:00</NotAfter>
+		</ValidityTime>
+	</Credential>
+</CredentialStore>
Index: fedd/abac-src/ttg/demo/web/soap/CVS/Entries
===================================================================
--- fedd/abac-src/ttg/demo/web/soap/CVS/Entries	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
+++ fedd/abac-src/ttg/demo/web/soap/CVS/Entries	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
@@ -0,0 +1,1 @@
+D
Index: fedd/abac-src/ttg/demo/web/soap/CVS/Repository
===================================================================
--- fedd/abac-src/ttg/demo/web/soap/CVS/Repository	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
+++ fedd/abac-src/ttg/demo/web/soap/CVS/Repository	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
@@ -0,0 +1,1 @@
+ttg/demo/web/soap
Index: fedd/abac-src/ttg/demo/web/soap/CVS/Root
===================================================================
--- fedd/abac-src/ttg/demo/web/soap/CVS/Root	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
+++ fedd/abac-src/ttg/demo/web/soap/CVS/Root	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
@@ -0,0 +1,1 @@
+:ext:jjacobs@src.columbia.sparta.com/cvs/abac
Index: fedd/abac-src/ttg/demo/web/sweden/CVS/Entries
===================================================================
--- fedd/abac-src/ttg/demo/web/sweden/CVS/Entries	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
+++ fedd/abac-src/ttg/demo/web/sweden/CVS/Entries	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
@@ -0,0 +1,3 @@
+/index.html/1.1/Fri Jun 21 22:16:50 2002//
+/naval.gif/1.1/Wed Jun 26 00:15:20 2002//
+D
Index: fedd/abac-src/ttg/demo/web/sweden/CVS/Repository
===================================================================
--- fedd/abac-src/ttg/demo/web/sweden/CVS/Repository	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
+++ fedd/abac-src/ttg/demo/web/sweden/CVS/Repository	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
@@ -0,0 +1,1 @@
+ttg/demo/web/sweden
Index: fedd/abac-src/ttg/demo/web/sweden/CVS/Root
===================================================================
--- fedd/abac-src/ttg/demo/web/sweden/CVS/Root	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
+++ fedd/abac-src/ttg/demo/web/sweden/CVS/Root	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
@@ -0,0 +1,1 @@
+:ext:jjacobs@src.columbia.sparta.com/cvs/abac
Index: fedd/abac-src/ttg/demo/web/sweden/index.html
===================================================================
--- fedd/abac-src/ttg/demo/web/sweden/index.html	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
+++ fedd/abac-src/ttg/demo/web/sweden/index.html	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
@@ -0,0 +1,7 @@
+<html>
+<title>ABAC Demo Application</title>
+<body>
+<center><img src="naval.gif"></center>
+</body>
+</html>
+
