If your default realm was
APACHE.ORG
, but you also wanted to take all principals fromACME.COM
that had a single componentjoe@ACME.COM
, you would create this rule:RULE:[1:$1@$0](.@ACME.COM)s/@.// DEFAULT
To also translate names with a second component, you would use these rules:
RULE:[1:$1@$0](.@ACME.COM)s/@.// RULE:[2:$1@$0](.@ACME.COM)s/@.// DEFAULT
To treat all principals from
APACHE.ORG
with the extension/admin
asadmin
, your rules would look like this:RULE[2:$1%$2@$0](.%admin@APACHE.ORG)s/./admin/ DEFAULT