Red Hat CERTIFICATE SYSTEM 8.0 - ADMINISTRATION, Руководство администратора

Страница: 378 / 564

Chapter 14. Managing Certificate System Users and Groups
356
user="BobC" || user!="JaneK"
To specify all users, provide the value
anybody
. For example:
user="anybody"
It is also possible to use regular expressions to specify the user names, such as using wildcard
characters like an asterisk (
*
). For example:
user="*johnson"
For more information on supported regular expression patterns, see
http://java.sun.com/j2se/1.4.2/
docs/api/java/util/regex/Pattern.html#sum
.
The syntax to include an IP address in the ACL is
ipaddress="ipaddress"
. The syntax to exclude
an ID address from the ACL is
ipaddress!="ipaddress"
. An IP address is specified using its
numeric value; DNS values are not permitted. For example:
ipaddress="12.33.45.99"
ipaddress!="23.99.09.88"
The IP address can be an IPv4 address, as shown above, or IPv6 address. An IPv4 address has the
format
n.n.n.n
or
n.n.n.n,m.m.m.m
with the netmask. An IPv6 address uses a 128-bit namespace, with
the IPv6 address separated by colons and the netmask separated by periods. For example:
ipaddress="0:0:0:0:0:0:13.1.68.3"
It is also possible to use regular expressions to specify the IP address, such as using wildcard
characters like an asterisk (
*
). For example:
ipaddress="12.33.45.*"
For more information on supported regular expression patterns, see
http://java.sun.com/j2se/1.4.2/
docs/api/java/util/regex/Pattern.html#sum
.
It is possible to create a string with more than one value by separating each value with two pipe
characters (||) with a space on either side. For example:
user="BobC" || group="Auditors" || group="Administrators"
14.6.2. Editing ACLs
ACLs are stored in the internal database and can only be modified in the administrative console.
To edit the existing ACLs:
1. Log into the administrative console.
2. Select
Access Control List
in the left navigation menu.