placement-rules

Deprecated as of DirXML 2.0 - use DirXMLScript <policy>.

<placement-rules> is the top level (document) element for object placements rules. Object matching rules are stored in the DirXML-XmlData attribute of a DirXML-Rule object that is pointed to by the DirXML-PlacementRule attribute of a DirXML-Subscriber or DirXML-Publisher object.

In the Subscriber channel, the source is eDirectory, and the destination is the application. In the Publisher channel the source is the application and the destination is eDirectory.

Object placement rules are used to to try to generate a distinguished name for an object that is about to be created as the result of an <add> event in the source. (Note that DirXML automatically converts <modify> into <add> for events from unassociated objects). Object placement rules are applied only after any existing creation rules are applied and the <add> has not been vetoed.

<placement-rules> will contain 0 or more <placement-rule> elements. The placements rule processor will evaluate each <placement-rule> in order until a suitable rule is found. That rule will then fill in the dest-dn attribute of the <add>.

The distinguished name format for the source event is specified by src-dn-format or src-dn-delims but not both and must be match what the source application actually uses. The distinguished name format for the destination event is specified by dest-dn-format or dest-dn-delims but not both and must match what the destination application actually uses. The format used by eDirectory through DirXML is slash.

One of the standard dn formats should be adequate for most applications but sometimes it may be necessary to specify a custom delimiter set. The eight (8) characters that make up the delimiter set are defined as follows:

1. Typed Name Boolean Flag: '0' means names are NOT typed, '1' means names are typed
2. Unicode No-Map Character Boolean Flag: '0' means don't output or interpret unmappable unicode characters as escaped hex digit strings, e.g.,\FEFF. The following unicode characters are not accepted by eDirectory: 0xfeff, 0xfffe, 0xfffd, and 0xffff.
3. Relative RDN Delimiter
4. RDN Delimiter
5. Name Divider
6. Name Value Delimiter
7. Wildcard Character
8. Escape Character

If RDN Delimiter and Relative RDN Delimiter are the same character, then the orientation of the name is root right, otherwise the orientation is root left.

Example

<placement-rules src-dn-format="slash" dest-dn-format="ldap">
<!-- for Users coming from the subtree \Tree\novell in eDirectory -->
<!-- place them in the same relative hierarchy under o=novell -->
 <placement-rule>
  <match-class class-name="User"/>
  <match-path prefix="\TREE\novell"/>
  <placement><copy-path-suffix/>,o=novell</placement>
 </placement-rule>
<!-- for all other users and groups -->
<!-- place them in the department container under novell -->
 <placement-rule>
  <match-class class-name="User"/>
  <match-class class-name="Group"/>
  <placement>cn=<copy-name/>,ou=<copy-attr attr-name="OU"/>,o=novell</placement>
 </placement-rule>
<!-- for everything else, try to mirror the hierarchy -->
 <placement-rule>
  <placement><copy-path/></placement>
 </placement-rule>
</placement-rules>