The provides a means of using a regular expression to translate the provided identifier when searching for the appropriate user entry. This may be used, for example, if the provided identifier is expected to be an e-mail address or Kerberos principal, but only the username portion (the part before the "@" symbol) should be used in the mapping process. Note that a replacement will be made only if all or part of the provided ID string matches the given match pattern. If no part of the provided ID string matches the provided pattern, then the given ID string will be used without any alteration. ds-cfg-regular-expression-identity-mapper ds-cfg-identity-mapper org.opends.server.extensions.RegularExpressionIdentityMapper Specifies the attribute to use to perform the mapping. Specifies the name or OID of the attribute whose value should match the provided identifier string after it has been processed by the associated regular expression. At least one value must be provided. All values must refer to the name or OID of an attribute type defined in the Directory Server schema. If multiple attribute type names or OIDs are provided, then at least one of those attributes must contain the provided ID string value in exactly one entry. ds-cfg-match-attribute Specifies the set of base DNs below which to search for users. Specifies the base DN(s) that should be used when performing searches to map the provided ID string to a user entry. If no values are provided, then the server will search below all public naming contexts. The server will search below all public naming contexts. ds-cfg-match-base-dn Specifies the regular expression pattern that will be used to identify portions of the ID string which will be replaced. Specifies the regular expression pattern that should be used to match all or part of the provided ID string. Any portion of the ID string which matches this pattern will be replaced in accordance with the provided replace pattern (or will be removed if no replace pattern is specified). If multiple substrings within the given ID string match this pattern, then all occurrences will be replaced. If no part of the given ID string matches this pattern, then the ID string will not be altered. Exactly one match pattern value must be provided, and it must be a valid regular expression as described in the API documentation for the java.util.regex.Pattern class, including support for capturing groups. ds-cfg-match-pattern Specifies the replacement pattern that should be used for substrings in the ID string that match the provided regular expression pattern. If no replacement pattern is provided, then any matching portions of the ID string will be removed. Specifies the replacement pattern that should be used for substrings in the ID string that match the provided regular expression pattern. If no replacement pattern is provided, then any matching portions of the ID string will be removed (i.e., replaced with an empty string). The replacement pattern may include a string from a capturing group by using a dollar sign ($) followed by an integer value that indicates which capturing group should be used. The replace pattern will be the empty string. ds-cfg-replace-pattern