The following property is required for a PAM realm.
The JAAS (Java Authentication and Authorization Service) context (the identifier for the login module to use for this realm). The only valid value is pamRealm.
The following optional property is available for a PAM realm.
A comma-separated list of group names. All clients who present valid certificates are assigned to these groups, for example, employee,manager, where these are the names of user groups.