可以将一个角色授予多个组或用户(主体)；一个组或主体可以具有映射到它的多个角色。
One role might be granted to multiple groups or users (principals); one group or principal may have multiple roles mapped to it.
由于上面列出的每个主体可能与其他主体交互，因此图1中所示的中间层要求为每个交互提供一个这样的关系图。
Because each principal listed above can potentially interact with other principals, it follows that the intermediation shown in Figure 1 will require one of these diagrams for each interaction.
要使用这些主体，需要提供每个此类主体的登录信息。
To use these subjects, you need to supply login information for each such subject.
土星燃料箱将从LCROSS的主体上分离，而主体就像本次航天任务的大脑，同时也携带摄像机及感应设备。
The Saturn fuel tank will detach from the body of the main LCROSS unit - which, stuffed with cameras and sensing equipment, ACTS as the mission's brain.
TGT被要求用一个或多个服务主体来为用户主体初始化gssapi上下文。
The TGT is required for the user principal to initiate GSSAPI context with one or more service principals.
主体、组和组织信息：包含单元的所有主体、组和组织(PGO)的列表。
Principal, group and organization information: This includes a list of all the principals, groups and organizations (PGO) for the cell.
登录模块还支持缺省主体，即，在没有指明主体名时使用缺省的TGT或密钥。
The login module can also support default principals, that is, using default TGT or secret key when no principal name is specified.
主体UUID：一个主体的UUID,PAC中描述了该主体的安全属性。
Principal UUID: the UUID of the principal whose security attributes are described in PAC.
如果启用了wrap -principals选项，CommunityEdition将对主体进行“包装”，以跟踪各个主体来自于哪个登录模块和安全领域。
If the wrap-principals option is enabled, Community Edition will "wrap" principals to track which login module and security realm each principal came from.
在每个主体包中，创建与主体有关的期望。
Within each subject package, create expectations pertaining to the subject.
客户机主体名和客户机主机主体名必须在KDC数据库中。
The client principal name and client host principal name should be in the KDC database.
解决方案：检查服务器服务主体名和客户机主体名是否存储在KDC数据库中。
Fix: Verify whether the server service principal name and client principal name are in the KDC database.
主体：主体可以表示从用户、客户端和服务器到单元的任何实体。
Principal: a principal can represent anything from users, clients and servers to cells.
几乎每个现代操作系统都使用基于位屏蔽权限的模型，该模型基于主体和组按主体处理资源控制。
Nearly every modern OS makes use of a bit-masking permission-based model that deals with the control of resources by principals, based on principals and groups.
这是一个管理守护进程，负责管理主体数据库、主体数据库的密钥和策略配置。
This is an administrative daemon managing a database of principals, their secret keys, and policy configurations.
例如，您可以决定对整个SOAP主体加密，也可以对部分主体加密。
For example, you may decide to encrypt the entire SOAP body or a part of the body.
他们构建了一个基于主体的模型，在这个模型中，每个主体的财富根据它与邻居互动的方式而变化。
They have created an agent-based model in which each agent’s “wealth” evolves according to the way it interacts with its neighbours.
通常，TGT是为GSSAPI用户主体而不是为服务主体而获取的。
Normally, a TGT is acquired for GSSAPI user principals and not service principals.
管理员主体是处理管理任务的KDC服务主体。
The admin principals are KDC service principals that handle the administrative tasks.
每个帐户表示一个主体和该主体所属的组列表。
Each account represents a principal and a list of the groups to which the principal belongs.
在为用户主体获取tgt时或是为服务主体创建一个密钥时需要此信息。
This information is needed to acquire a TGT for a user principal or to create a secret key for a service principal.
一般来说，光线方向和被摄主体角度越大，主体的纹理就越明显。
Generally, the greater the Angle at which the light is positioned to the subject, the more texture is revealed.
这个设计中最有意思的是主体的照片部分，主体照片大小不一，引导用户关注网站的专题报道。
What keeps this design interesting is the jarring asymmetry in the main photos below the "process" content, helping draw focus to the site's featured story.
既支持用户主体又支持服务主体。
在触发器主体中，可以声明将要在主体中使用的变量。
In a trigger body, you can declare variables that you want to use in the body of the trigger.
所谓“人在城中，城在景中”，在我看来，构成城市的主体是人，创造美好生活的主体是人，享受美好生活的主体也是人。
There is a saying that“people who live in cities create the urban landscape.”In my opinion, it is human beings that constitute cities, create a beautiful life and live it.
否则，通知的主体与方法的主体相似。
Otherwise, the body of an advice is similar to the body of a method.
主体-放置存放内容主体的画布的区域。
清单13显示了用于本文使用的示例应用程序之一的Run -as主体和缺省主体。
Listing 13 shows the run-as and default subject configuration of one of the sample applications used in this article.
清单9中的片段展示如何从安全处理程序接收主体的凭证，并以这个主体的身份调用EJB方法？
The snippet in Listing 9 shows how to call the EJB method under the identity of a subject whose credentials were received from the security handler.
应用推荐