HP 3PAR OS 3.1.3 Command Line Interface Reference

Table 3 Values for setauthparam Specifiers (continued)
<value><param>
be specified using multiple <value> arguments. It is
mutually exclusively with the groups-dn variable.
The objectClass attribute of an account object.account-obj
The attribute of an account object that holds the user's
username .
account-name-attr
The attribute that holds the name of a group of which the
user is a member.
memberof-attr
When set, the mapping of groups to domains is enabled.
For a user that is a member of a group that maps to a role
domain-name-attr
level, the value of domain-name-attr is used to look
up an attribute in the group that holds the name of the
domain. If the domain is too long or contains characters
that are not allowed in a domain name, the name is
truncated to the maximum length of a domain name and
invalid characters are replaced with an underscore ( _ ).
When domain-name-prefix is set, the value of the
attribute specified by domain-name-attr is a candidate
domain-name-prefix
domain name. The value of domain-name-prefix is
a character string used to extract the domain name from
the candidate. The value is an optional exclamation point
( ! ) followed by a character string called the prefix. The
exclamation point is a flag that means the presence of the
prefix is required and is described more in the paragraphs
that follow. The candidate domain name is searched for
the presence of the prefix and if found, the domain name
starts after the first occurrence of the prefix and stops before
the first space or tab following it or at the end of the
candidate domain name. If the prefix is not found, the
behavior depends on the flag. If the exclamation point was
not used (there is no flag), the candidate domain name
becomes the domain name. If the flag is present, the
candidate domain name is rejected and there is no domain
name. As a last step, and as described for
domain-name-attr , domain names can be truncated
and have invalid characters replaced.
Some examples of the effects of domain-name-prefix are shown in Table 4 (page 264):
Table 4 Examples of Domain Name Prefix Effects
resultdomain-name-prefixcandidate
dom1ISDom=dom1
dom2ISDom=ISDom=dom2
dom3!ISDom=ISDom=dom3
!ISDom=dom4
In the last case there is no resulting domain name because ISDom= does not appear in the
candidate.
Table 5 Values for Specifiers <map-param> and <map-value>
<map-value><map-param>
A group name that grants the user the Super role level if
the user is a member of that group. Multiple group names
super-map
264 Set Commands