Red Hat CERTIFICATE SYSTEM 7.2 - ADMINISTRATION Administration Manual page 389

For more information on supported regular expression patterns, see
docs/api/java/util/regex/Pattern.html#sum.
16.6.4.3.2. User Syntax
The syntax to include a user in the ACL is user="userID". The syntax to exclude the user is user!
="userID", which allows any user ID except for the user ID named. For example:
user="BobC" user!="JaneK"
To specify all users, provide the value anybody. For example:
user="anybody"
It is also possible to use regular expressions to specify the user names, such as using wildcard
characters like an asterisk (*). For example:
user="*johnson"
For more information on supported regular expression patterns, see
docs/api/java/util/regex/Pattern.html#sum.
16.6.4.3.3. IP Address Syntax
The syntax to include an IP address in the ACL is ipaddress="ipaddress". The syntax to exclude
an ID address from the ACL is ipaddress!="ipaddress". An IP address is specified using its
numeric value, DNS values are not permitted. For example:
ipaddress="12.33.45.99"
ipaddress!="23.99.09.88"
It is also possible to use regular expressions to specify the IP address, such as using wildcard
characters like an asterisk (*). For example:
ipaddress="12.33.45.*"
For more information on supported regular expression patterns, see
docs/api/java/util/regex/Pattern.html#sum.
16.6.4.4. Stringing Values
It is possible to create a string with more than one value by separating each value with two pipe
characters (||) with a space on either side. For example:
user="BobC" || group="Auditors" || group="Administrators"
How ACIs Are Formed
http://java.sun.com/j2se/1.4.2/
http://java.sun.com/j2se/1.4.2/
http://java.sun.com/j2se/1.4.2/
369