<principals>
This file contains the definition of a set of users/groups.

<groups>
The defined groups.

<group name="nameOfGroup">
A defined group.

name - The name of this group.


<description>The description</description>
A short description, use etc.

<permission name="nameOfPermission" />
A server-specific permission-type, "administration" for instance.

name - null


 
 
<users>
The defined users.

<user deactivated="true|false" locked="true|false" password="userPassword" realname="John Doe" username="nameOfUser">
A defined user.

deactivated - Whether or not the user is deactivated (can't log in). The default is false.
locked - Whether or not the user is locked in his role. Good for preventing application-errors that lead to security holes (for instance adding the "guest" user to a role).
password - The password for this user.
realname - The real name of this user.
username - The name of this user.


<description>The description</description>
A short description, use etc.

<certificate-issuer>CN=...</certificate-issuer>
The issuer CA for the user's X509-certificate if any.

<certificate-serial-id>1234567891011</certificate-serial-id>
The serial ID of the user's X509-certificate if any.

<group-membership group="nameOfGroup" />
A group that this user is a member of.

group - The name of the group.