Netscape Certificate Management System 6.1, Руководство администратора

Страница: 350 / 840

Authorization for CMS Users
350 Netscape Certificate Management System Administrator’s Guide • February 2003
For example:
user=”BobC”
user!=”JaneK”
Note: To specify all users, provide the value
anybody
. For example:
user=”anybody”
IP Address Syntax
The syntax for an IP address is:
ipaddress=”ipaddress”
to specify that the IP address specified is to be allowed or
denied access to the operation specified. An IP address is specified using its
numeric value, DNS values are not permitted.
ipaddress!=”ipaddress”
to specify that any IP address except for the IP address
specified is to be allowed or denied access to the operation specified. An IP address
is specified using its numeric value, DNS values are not permitted.
For example:
ipaddress=”12.33.45.99”
ipaddress!=”23.99.09.88”
Stringing Values
You can create a string with more than one value. You do this by separating each
value with two pipe characters (||) with a space on either side. For example:
user=”BobC” || group=”Auditors” || group=”Administrators”
Agents
There are four agent groups, one for each subsystem. When specifying an agent
group, you must either specify the agent group for the particular manager, or all
four agent groups. The agent groups are
Certificate Manager Agents
,
Registration Manager Agents
,
Online Certificate Status Manager Agents
,
and
Data Recovery Manager Agents
.
Editing ACLs
ACLs are stored in the internal database and can only be modified in the CMS
console interface.