| All users are principals ... perhaps in the native OS, perhaps
not.
Users always have authentication information, which is used
to validate a user's proferred credentials. Different kinds of
realms use different kinds of authentication information. For
example, realms could use X.509 public key certificates, shared
passphrases, encrypted passwords, smart cards, or biometric data
to figure out if the user's credentials are valid.
Users typically have attributes that identify privileges
granted/possesed by the user. |
