Configuring Regular Expressions to Match a CA Certificate with a CommCell User

To allow users to access the Web Console and Command Center using a Common Access Card (CAC), configure the Tomcat server on the Web Console and Command Center computers and add the necessary additional settings.

Procedure

  1. Configure a regular expression pattern to divide the contents of the CA Certificate Subject field into a group of strings.

    For example, with the default regular expression CN=(.*)[.]([0-9]{10} you can split CN=DAVE.OWEN.9875432101 into two string groups DAVE.OWEN and 9875432101.

    1. Log on to the CommCell Console.

    2. To the CommCell environment, add the CACUserNameRegex additional setting as shown in the following table.

      For instructions about adding an additional setting from the CommCell Console, see Adding an Additional Settings from the CommCell Console.

      Property

      Value

      Name

      CACUserNameRegex

      Category

      CommServDB.GxGlobalParam

      Type

      String

      Value

      A pattern to divide the contents of the CA Certificate Subject field into group of strings.

      The default value is CN=(.*)[.]([0-9]{10})

  2. Configure a regular expression pattern to extract the string groups created from the previous step and match it with an existing CommCell user.

    For example, with the default value $2, the second string group 9875432101 is extracted that can be used to match with the employee ID of an existing CommCell user.

    • Log on to the CommCell Console.

    • To the CommCell environment, add the CACUserNameoutputPattern additional setting as shown in the following table.

      For instructions about adding an additional setting from the CommCell Console, see Adding an Additional Settings from the CommCell Console.

Property

Value

Name

CACUserNameoutputPattern

Category

CommServDB.GxGlobalParam

Type

String

Value

A pattern to extract the username or employee ID of the user, from the CA certificate.

The default value is $2

Loading...