Chapter 3: Condition Reference
user.x509.subject=
Tests the subject field of the x509 certificate used to authenticate the user against a certificate realm. The user.x509.subject= condition is primarily useful in constructing explicit certificate revocation lists.
Syntax
user.x509.subject=subject
where subject is an RFC2253 LDAP DN, appropriately escaped.
Comparisons are
Layer and Transaction Notes
•Use in <Proxy>, <Admin>, and <Exception> Layers.
•Applies to proxy transactions.
See Also
•Conditions: user.x509.issuer=, user.x509.serialNumber=
•Properties: authenticate( ), authenticate.force( )
149
