Well.., for the most part you are right
Altough, I don't understand why you use al these groups, other than you want to prevent 'loopback' from the same user to the same reader..
But in mode-3 and mode-1, loopback does not exist, so you can put all cache- readers/users into the same groups.
All your normal (non-cache) users, should have (at least) the same readergroup assigned of all cache-ex users.
--
Therefore, i advise to let the groups in all cache-users/readers overlap the groups you are using with the normal readers.
For example:
[account]
user = user1
pwd = user1
description = SKY UK CARD USER WITH CACHE-EX SUPPORT
disabled = 0
group = 1
[account]
user = user2
pwd = user2
description = SKY IT CARD USER WITH CACHE-EX SUPPORT
disabled = 0
group = 2
[account]
user = user3
pwd = user3
description = SKY IT / UK CARD USER WITH CACHE-EX SUPPORT
disabled = 0
group = 1,2
[account]
user = user4
pwd = user4
description = CACHE-EX USER 1 - Mode-3
disabled = 0
cacheex=3
group = 1,2 # <= ALL GROUPS YOU USE IN AL NORMAL/PROXY READERS
[account]
user = user5
pwd = user5
description = CACHE-EX USER 2 - Mode-3
disabled = 0
cacheex=3
group = 1,2 # <= ALL GROUPS YOU USE IN AL NORMAL/PROXY READERS
---------------------------------------
[reader]
label = reader1
description = REAL CARD READER SKY UK
enable = 1
group = 1
[reader]
label = reader2
description = REAL CARD READER SKY IT
enable = 1
group = 2
[reader]
label = reader3
description = CACHE-EX READER 1 - Mode3
enable = 1
cacheex=3
group = 1,2 # <= ALL GROUPS YOU USE IN AL NORMAL/PROXY READERS
[reader]
label = user4
description = CACHE-EX READER 2 - Mode3
enable = 1
cacheex=3
group = 1,2 # <= ALL GROUPS YOU USE IN AL NORMAL/PROXY READERS
Hope this helps!
