Using Either The Domain Or The Realm As The Domain Name; Specifying The Domain Name Or Realm Name Parse Direction - Juniper JUNOSE SOFTWARE 11.0.X - BROADBAND ACCESS CONFIGURATION GUIDE 4-1-2010 Configuration Manual

Using Either the Domain or the Realm as the Domain Name

If the username contains both a realm name and a domain name delimiter, you can
use either the domain name or the realm name as the domain name. As previously
mentioned, the router treats usernames with multiple delimiters as though the realm
name is to the left of the realm delimiter and the domain name is to the right of the
domain delimiter.
If you set the parse order to:
For example, if you set the delimiter for the realm name to / and set the delimiter
for the domain name to @, the router parses the realm first by default. The username
usEast/lori@abc.com results in a domain name of usEast. To cause the parsing to
return abc.com as the domain, enter the aaa parse-order domain-first command.

Specifying the Domain Name or Realm Name Parse Direction

You can specify the direction either left to right or right to left in which the router
performs the parsing operation when identifying the realm name or domain name.
This feature is particularly useful if the username contains nested realm or domain
names. For example, for a username of userjohn@abc.com@xyz.com, you can
identify the domain as either abc.com@xyz.com or as xyz.com, depending on the
parse direction that you specify.
You use either the left-to-right or right-to-left keywords with one of the following
keywords to specify the type of search and parsing that the router performs:
host1(config)#aaa delimiter domainName @!
domain-first The router searches for a domain name first. For example, for
username usEast/lori@abc.com, the domain name is abc.com.
realm-first The router searches for a realm name first and uses the realm name
as the user's domain name. For username usEast/lori@abc.com, the domain is
usEast.
domainName The router searches for the next domain delimiter value in the
direction specified. When it reaches a delimiter, the router uses anything to the
right of the delimiter as the domain name. Domain parsing is from right to left
by default.
realmName The router searches for the next realm delimiter value in the
direction specified. When it reaches a delimiter, the router uses anything to the
left of the delimiter as the realm name. Realm parsing is from left to right by
default.
Example
host1(config)#aaa parse-direction domainName left-to-right
Chapter 1: Configuring Remote Access
Setting Up Domain Name and Realm Name Usage
13