How to configure WebSentry for different certificate access

Thales WebSentry
Keon Certificate Authority web ACLs

How to configure WebSentry for different certificate access
Client certificate authentication to Web server
Web folder/directory setup and security access wanted as follows:

/protected
(access only to client certificates signed by ca_md5 = 185546716d3a2b41dd343de936bf13c1)

/protected/IT
(access only to client certificates signed by ca_md5 = 185546716d3a2b41dd343de936bf13c1 and OU = IT )

/protected/HR
(access only to client certificates signed by ca_md5 = 185546716d3a2b41dd343de936bf13c1 and OU = HR )

Below are the 3 ACLs for the web folder/directory setup and security access described above:


/protected/
  ( ca_md5 = 185546716d3a2b41dd343de936bf13c1 )
read


/protected/IT/
( |
  ( ^ ( ou = IT) )
  ( ^ ( ca_md5 = 185546716d3a2b41dd343de936bf13c1 ) )
)
!none!


/protected/HR/
( |
  ( ^ ( ou = HR) )
  ( ^ ( ca_md5 = 185546716d3a2b41dd343de936bf13c1 ) )
)
!none!