User's Manual

6. Click the On Match drop-down list and select the action the system should take when there is a match.
Your options here are to:
n Do nothing – makes no changes.
n Assign fixed operator profile – assigns the selected Operator Profile to the operator.
n Assign attribute’s value to operator field – uses the value of the attribute as the value for an
operator field. This option can be used to store operator configuration details in the directory. (For
operator profiles from enforcement profiles, matching can be performed on either their IDs or their
name values, even if the Fallthrough option is not selected)
n Assign custom value to operator field – uses a template to assign a value to a specific operator field.
If you choose this option, the form expands to include the Custom text box for you to enter your
custom template code. See "Custom LDAP Translation Processing" on page 474. (For operator profiles
from enforcement profiles, matching can be performed on either their IDs or their name values, even if
the Fallthrough option is not selected)
n Apply custom processing – evaluates a template that may perform custom processing on the LDAP
operator. If you choose this option, the form expands to include the Custom text box for you to enter
your custom template code. See "Custom LDAP Translation Processing" on page 474.
n Remove attribute from operator – removes the selected LDAP attribute from the operator.
7. Click the Operator Profile drop-down list and select the profile to be assigned if there is a rule match. In
the example shown above, if the Administrator group is matched, the Administrator profile is to be
assigned.
8. Select the Fallthrough check box if you want to use multiple translation rules. When you create multiple
rules, you can build a complete logical structure to perform any type of processing on the LDAP attributes
available in your directory.
9. Click Save Changes to save your rule settings.
The Administration > Operator Logins > Translation Rules window shows a list of all configured
translation rules.
Translation rules are processed in order, until a matching rule is found that does not have the Fallthrough field
set.
To edit the matching rule list, select an entry in the table to display a menu that lets you perform the following
actions:
l Edit – Changes the configuration of matching rule
l Delete – Removes matching rule from the list
l Duplicate – Creates a duplicate copy of an existing rule
l Disable – Temporarily disables the rule without deleting it from the rule list
Dell Networking W-ClearPass Guest 6.4 | User Guide Operator Logins | 473