Defines attribute value groupings along with their associated values.
The attribute value groupings file is in the configuration directory. It resides along with the rules file in the SuperConf and SubConf directories.
The attribute value groupings file is formatted as a flat ASCII file list with attribute grouping names followed by an equal (=) sign and the list of all attribute values in the group, separated by commas. The list of attribute values will be terminated by a carriage return. The list of attribute values can be continued onto multiple lines by preceding carriage returns with a backslash. The only whitespace that is significant in the groupings file is a carriage return. Other whitespace characters are removed during file parsing. Comments are lines preceded by an asterisk.
Each attribute grouping definition is limited to WLM_GROUPING_LEN characters. The attribute grouping name and the list of attribute values cannot be an empty string.
Attribute groupings can be used as element of a selection criteria in the rules file for superclasses or subclasses. The attribute grouping name must be preceded by a dollar sign ($) and will be replaced by the list of all attribute values associated with itself. No special character (*,[,],-,?) except exclusion character '!' can be applied to an attribute grouping name. Attribute groupings cannot been used in the class field.
"rules" files: * class resvd user group application type tag classA - $trusted,!$nottrusted - - - - classB - - - $shell,!/bin/zsh - - classC - - $rootgroup -
The syntax of the attribute values is the same as in the rules file, including potential wildcards ([,],*,-,?,+). The use of the exclusion character '!' in the attribute values list is not allowed. This restriction is necessary to avoid a confusing interpretation of an attribute value grouping used in the class assignement file preceded by an exclusion character. Syntax is checked only when attribute groupings are used (rules processing during a configuration load or explicit check with wlmcheck command). The groupings file is not mandatory. By default, no attribute grouping is defined. Attribute value groupings of a groupings file are defined and usable only in the scope of their configuration directory (SuperConfDir or SubConfDir level). If it exists, the groupings file is copied in the .running directory when the configuration is loaded into the kernel as it is done with other configuration files. No command interface is provided to update the attribute groupings file.
"groupings" file:
* attribute groupings definition
* will be used in the rules file
trusted = user[0-9][0-9],admin*
nottrusted = user23, user45
shell=/bin/?sh,\
/bin/sh,\
/bin/tcsh
rootgroup=system,bin,sys,security,cron,audit
| $HOME/.groupings | Defines attribute value groupings along with their associated values. |
The rules file.