define a set of rules for performing substring matching operations against assertion values. Substring matching may be used to perform partial matching with attribute values. 1.3.6.1.4.1.26027.1.2.33 ds-cfg-substring-matching-rule ds-cfg-matching-rule