Editing Acls - Netscape MANAGEMENT SYSTEM 6.1 - ADMINISTRATOR Administrator's Manual

Authorization for CMS Users
For example:
user="BobC"
user!="JaneK"
Note: To specify all users, provide the value
user="anybody"
IP Address Syntax
The syntax for an IP address is:
ipaddress="ipaddress"
denied access to the operation specified. An IP address is specified using its
numeric value, DNS values are not permitted.
ipaddress!="ipaddress"
specified is to be allowed or denied access to the operation specified. An IP address
is specified using its numeric value, DNS values are not permitted.
For example:
ipaddress="12.33.45.99"
ipaddress!="23.99.09.88"
Stringing Values
You can create a string with more than one value. You do this by separating each
value with two pipe characters (||) with a space on either side. For example:
user="BobC" || group="Auditors" || group="Administrators"
Agents
There are four agent groups, one for each subsystem. When specifying an agent
group, you must either specify the agent group for the particular manager, or all
four agent groups. The agent groups are
Registration Manager Agents
and
Data Recovery Manager Agents

Editing ACLs

ACLs are stored in the internal database and can only be modified in the CMS
console interface.
350 Netscape Certificate Management System Administrator's Guide • February 2003
anybody
to specify that the IP address specified is to be allowed or
to specify that any IP address except for the IP address
Certificate Manager Agents
,
Online Certificate Status Manager Agents
.
. For example:
,
,