If your default realm was
APACHE.ORG
, but you also wanted to take all principals fromACME.COM
that had a single componentjoe@ACME.COM
, you would create this rule:RULE:[1:$1@$0](.*@ACME\.COM)s/@.*// DEFAULT
To also translate names with a second component, you would use these rules:
RULE:[1:$1@$0](.*@ACME\.COM)s/@.*// RULE:[2:$1@$0](.*@ACME\.COM)s/@.*// DEFAULT
To treat all principals from
APACHE.ORG
with the extension/admin
asadmin
, your rules would look like this:RULE[2:$1%$2@$0](.*%admin@APACHE\.ORG)s/.*/admin/ DEFAULT