Dell Powerconnect W-ClearPass Virtual Appliances W-ClearPass Guest 6.0 Deploym - Page 255

3. Select the Enabled check box to enable this rule once you have created it. If you do not select this check box, the rule you create will appear in the rules list, but will not be active until you enable it. 4. Click the Matching rule drop-down list and select a rule. The Matching Rule field can be one of: n (blank) - always matches n contains - case-insensitive substring match anywhere in string n matches - regular expression match, where the value is a Perl-compatible regular expression including delimiters (for example, to match the regular expression "admin" case-insensitively, use the value "/admin/i"; See "Regular Expressions" on page 305 for more details about regular expressions) n equals - case-insensitive string comparison, matches on equality n does not equal - case-insensitive string comparison, matches on inequality n less than - numerical value is less than the match value n greater than - numerical value is greater than the match value n starts with - case-insensitive substring match at start of string n ends with - case-insensitive substring match at end of string 5. Select a Value. The Value field states what is to be matched, in this case CN=Administrators to look for a specific group of which the user is a member. 6. Click the On Match drop-down list and select the action the system should take when there is a match. Your options here are to: n Do nothing - makes no changes. n Assign fixed operator profile - assigns the selected Operator Profile to the operator n Assign attribute's value to operator field - uses the value of the attribute as the value for an operator field. This option can be used to store operator configuration details in the directory. n Assign custom value to operator field - uses a template to assign a value to a specific operator field. If you choose this option, the form expands to include the Custom text box for you to enter your custom template code. See "Custom LDAP Translation Processing" on page 256. n Apply custom processing - evaluates a template that may perform custom processing on the LDAP operator. If you choose this option, the form expands to include the Custom text box for you to enter your custom template code. See "Custom LDAP Translation Processing" on page 256. n Remove attribute from operator - removes the selected LDAP attribute from the operator. 7. Click the Operator Profile drop-down list and select the profile to be assigned if there is a rule match. In the example shown above, if the Administrator group is matched, the Administrator profile is to be assigned. 8. Select the Fallthrough check box if you want to use multiple translation rules. When you create multiple rules, you can build a complete logical structure to perform any type of processing on the LDAP attributes available in your directory. 9. Click Save Changes to save your rule settings. The Administration > Operator Logins > Translation Rules window shows a list of all configured translation rules. Dell Networking W-ClearPass Guest 6.0 | Deployment Guide LDAP Translation Rules | 255