icsDomainAllowed
Origin
Not implemented.
Syntax
cis, single-valued (see mgrpAllowedDomain)
Object Classes
Definition
What domains are allowed. The value has the following format:
service-list:client-list
where service-list is a blank- or comma-separated list of one or more service names or wild cards, and client-list is a blank- or comma-separated list of one or more host names or addresses, patterns or wild cards.
The following are the explicit wild cards recognized by the system:
|
ALL |
Always matches |
|
LOCAL |
Matches any host whose name does not contain a dot character. |
|
UNKNOWN |
Matches any host whose name or address are unknown. Use this with care. |
|
KNOWN |
Matches any host whose name and address are known. Use with care. |
|
DNSSPOOFER |
Matches any host whose name does not match its address. |
There is one operator that can be used in the service-list and the client-list:
|
EXCEPT |
Matches anything that matches list 1 unless it matches anything in list 2. The expected form: list1 EXCEPT list2. List1 and list2 are comma-separated. |
You can use patterns to distinguish clients by the network address that they can connect to. For example: service@host_pattern:client-list.
The default value comes from service.http.domainallowed in the ics.conf file.
Example
Allow local access to anyone in the sesta.com domain.
icsDomainAllowed: ALL:sesta.com
OID
2.16.840.1.113730.3.1.736
- © 2010, Oracle Corporation and/or its affiliates