Juniper NETWORK AND SECURITY MANAGER 2010.4 - CONFIGURING INFRANET CONTROLLER GUIDE REV 01 Manual page 109

Related
Documentation
Copyright © 2010, Juniper Networks, Inc.
Table 26: Role Mapping Rules Configuration Details (continued)
Option Function
Role mapping Specifies the
rule type parameters based on
which the role mapping
is created.
is/is not Specifies the
conditional expression
used in the rule.
User must select Specifies that the rule
from among is based on assigned
assigned roles roles.
User must select Specifies that the rule
the sets of is based on sets of
merged roles merged roles.
assigned by each
rule
Creating an Authentication Realm (NSM Procedure) on page 87
Chapter 9: Configuring Authentication Realms
Your Action
Select If user name if the role mapping
parameter must be based on the user name.
Select is/is not conditional expressions for the
rule, click the Add button, and enter the new user
names.
Select If certificate has any of the attributes if
the role mapping parameter must be based on
the certificate attributes. Select is/is not
conditional expressions for the rule, click the Add
button, and enter the new values.
Select If user has any of these custom
expressions if the role mapping parameter must
be based on the custom expressions. The
collection-of-expressions button appears.
1. Click the collection-of-expressions button
to assign expressions. The expressions that
were created for the selected authentication
server appears.
2. Select an existing expression from the
Non-members area and click Add to assign
the expression to the role-mapping rule.
3. Click New (+) and create an expression to
assign a new expression to the role-mapping
rule. For information on creating custom
expressions and using the Expression
Dictionary, refer to "Creating a Custom
Expression for an Authentication Server (NSM
Procedure)."
NOTE: You can create a custom expression in a
device template, but you cannot validate the
custom expression. The Validate button is not
enabled in the Custom Expressions editor for device
templates.
Select this option to specify conditional expression.
Select this option to specify that the rule is based
on assigned roles.
Select this option to specify that the rule is based
on sets of merged roles.
91