Lines Matching refs:rule
4 Library for rule based certificate to user mapping - KRB5 matching rules
67 * [KRB5:][relation-operator]component-rule ...
73 * meaning only one component rule must match. The default is &&.
75 * component-rule
478 struct krb5_match_rule *rule;
482 rule = talloc_zero(ctx, struct krb5_match_rule);
483 if (rule == NULL) {
491 rule->r = relation_and;
494 rule->r = relation_or;
497 rule->r = relation_and;
503 CM_DEBUG(ctx, "Invalid KRB5 matching rule.");
511 ret = parse_krb5_get_component_value(rule, ctx, &cur, &comp);
515 DLIST_ADD(rule->issuer, comp);
518 ret = parse_krb5_get_component_value(rule, ctx, &cur, &comp);
522 DLIST_ADD(rule->subject, comp);
525 ret = parse_krb5_get_ku_value(rule, ctx, &cur, &comp);
529 DLIST_ADD(rule->ku, comp);
532 ret = parse_krb5_get_eku_value(rule, ctx, &cur, &comp);
536 DLIST_ADD(rule->eku, comp);
540 ret = parse_krb5_get_san_value(rule, ctx, &cur, &comp);
544 DLIST_ADD(rule->san, comp);
546 CM_DEBUG(ctx, "Invalid KRB5 matching rule.");
556 *match_rule = rule;
558 talloc_free(rule);