How about, canonical_map: SSL .* dek and, user_map: dek dek That should map everyone coming in to you.Or a canonical_map of: SSL "/DC=org/DC=doegrids/OU=People/CN=David E \. Konerding.*" dekLet me know if this works...
Both examples work just fine. I see why I was having problems before: I was inputting my certificate subject name using the openssl output format, which uses comma-and-space separated fields
rather than slash-separated fields. Thanks! Dave