Use
the optional USERGROUP object statement to define a group of
user IDs. The group name can be used on several mapping statements.
Syntax
.----------.
V |
>>-USERGROUP--user_group_name----user_IDs-+--ENDUSERGROUP------><
Parameters
- user_group_name
- The group name (up to 16 characters) that contains user ID names
which represent clients when the client certificate is translated
into a user ID.
- user_IDs
- An exact user ID name or a wildcard user ID name.
User ID names
can be wildcarded when specified in a group.
- % or ? is a single character position wildcard. It can be placed
anywhere.
- * is a multi-position wildcard. It can only be placed at the
end of the user ID.
- The two wildcard types can be used together. For example, U%%V5*
is a valid wildcard name.
The position of the single wildcard (%) is used first
to determine the most specific match. For example, the following
wildcard names are checked in the order listed:
- M5MUSER*
- M5M%%%%*
- M5%USER*
- M%MUSER*
- M%MUS%R*
- M%MUS%*
- M%MU%ER*
- M*