}
}
+#----- wrong group is rejected -----
+
+set bad [lreplace $good 1 1 Gwrong]
+
+if {![catch {
+ eval run-mss-userv $bad
+} emsg]} {
+ error "should have failed"
+} else {
+ switch -glob $emsg {
+ {*caller not in group Ginside*} { }
+ * { error "huh ? $emsg" }
+ }
+}
+
+#----- resulting sites file is processable -----
+
+eval run-mss $tmp/out.sites >$tmp/out.conf
+
+diff-mss-sites-conf mtest/e-userv.conf $tmp/out.conf