HP 3PAR StoreServ 7400 2-node HP 3PAR Command Line Interface Reference (OS 3.1 - Page 276

Table 3 Values for setauthparam Specifiers (continued) account-obj account-name-attr memberof-attr domain-name-attr domain-name-prefix The objectClass attribute of an account object. The attribute of an account object that holds the user's username . The attribute that holds the name of a group of which the user is a member. When set, the mapping of groups to domains is enabled. For a user that is a member of a group that maps to a role level, the value of domain-name-attr is used to look up an attribute in the group that holds the name of the domain. If the domain is too long or contains characters that are not allowed in a domain name, the name is truncated to the maximum length of a domain name and invalid characters are replaced with an underscore ( _ ). When domain-name-prefix is set, the value of the attribute specified by domain-name-attr is a candidate domain name. The value of domain-name-prefix is a character string used to extract the domain name from the candidate. The value is an optional exclamation point ( ! ) followed by a character string called the prefix. The exclamation point is a flag that means the presence of the prefix is required and is described more in the paragraphs that follow. The candidate domain name is searched for the presence of the prefix and if found, the domain name starts after the first occurrence of the prefix and stops before the first space or tab following it or at the end of the candidate domain name. If the prefix is not found, the behavior depends on the flag. If the exclamation point was not used (there is no flag), the candidate domain name becomes the domain name. If the flag is present, the candidate domain name is rejected and there is no domain name. As a last step, and as described for domain-name-attr , domain names can be truncated and have invalid characters replaced. Some examples of the effects of domain-name-prefix are shown in Table 4 (page 276): Table 4 Examples of Domain Name Prefix Effects candidate dom1 ISDom=dom2 ISDom=dom3 dom4 domain-name-prefix ISDom= ISDom= !ISDom= !ISDom= result dom1 dom2 dom3 In the last case there is no resulting domain name because ISDom= does not appear in the candidate. Table 5 Values for Specifiers and super-map service-map A group name that grants the user the Super role level if the user is a member of that group. Multiple group names can be specified using multiple arguments. A value of " * " matches any group name. Same as super-map, but for the Service level. 276 Set Commands