# user map
map "$host:$ssl_client_serial:$ssl_client_i_dn" $<%=$name%>_user_role {
    default     "<invalid>/";
}