If your default realm was
APACHE.ORG, but you also wanted to take all principals fromACME.COMthat had a single componentjoe@ACME.COM, you would create this rule:RULE:[1:$1@$0](.*@ACME\.COM)s/@.*// DEFAULT
To also translate names with a second component, you would use these rules:
RULE:[1:$1@$0](.*@ACME\.COM)s/@.*// RULE:[2:$1@$0](.*@ACME\.COM)s/@.*// DEFAULT
To treat all principals from
APACHE.ORGwith the extension/adminasadmin, your rules would look like this:RULE[2:$1%$2@$0](.*%admin@APACHE\.ORG)s/.*/admin/ DEFAULT

