Appendix D: CPL Substitutions

 

 

 

 

 

Category: user

 

 

 

 

 

 

 

ELFF

CPL

Description

 

 

 

 

 

cs-auth-group

group

One group that an authenticated client is a

 

 

 

member of. The group selected is determined

 

 

 

by either a group.log_order definition in

 

 

 

policy or the order groups are referenced in

 

 

 

policy

 

 

 

 

 

cs-auth-groups

groups

Groups that an authenticated client is a

 

 

 

member of.

 

cs-auth-type

 

Client-side: authentication type (such as

 

 

 

BASIC, NTLM, LDAP)

 

cs-realm

realm

Authentication realm that the user was

 

 

 

challenged in.

 

cs-userdn

user

Full username of a client authenticated to the

 

 

 

proxy (fully distinguished).

 

cs-username

user.name

Relative username of a client authenticated to

 

 

 

the proxy; for example, not fully

 

 

 

distinguished.

 

 

 

 

 

sc-auth-status

 

Client-side: Authorization status.

 

x-cache-user

 

Relative username of a client authenticated to

 

 

 

the proxy; for example, not fully

 

 

 

distinguished (same as cs-username).

 

x-cs-username-or-ip

 

Used to identify the user using either their

 

 

 

authenticated proxy username or, if that is

 

 

 

unavailable, their IP address.

 

 

 

 

 

x-radius-splash-

 

Session ID made available through RADIUS

 

session-id

 

when configured for session management

 

 

 

 

x-radius-splash-

 

Username made available through RADIUS

 

username

 

when configured for session management

 

x-user-x509-issuer

user.x509.issuer

If the user was authenticated through an

 

 

 

X.509 certificate, this is the issuer of the

 

 

 

certificate as an RFC2253 DN.

 

 

 

 

 

x-user-x509-serial-

user.x509.serialNumber

If the user was authenticated through an

 

number

 

X.509 certificate, this is the serial number

 

 

 

from the certificate as a hexadecimal number.

 

x-user-x509-subject

user.x509.subject

If the user was authenticated through an

 

 

 

X.509 certificate, this is the subject of the

 

 

 

certificate as an RFC2253 DN.

 

 

 

 

 

 

 

 

 

Category: ci_request_header

 

 

 

 

 

 

 

ELFF

CPL

Description

 

 

 

 

 

cs(Accept)

request.header.Accept

Request header: Accept

 

cs(Accept-Charset)

request.header.Accept-

Request header: Accept-Charset

 

 

Charset

 

 

cs(Accept-Encoding)

request.header.Accept-

Request header: Accept-Encoding

 

 

Encoding

 

293

Page 293
Image 293
Blue Coat Systems Proxy SG manual Category user