If Operation

Fields

Operator

Select the condition test type.

Operator	Returns True When...
Equal	The name of the current operation is equal to the content of the condition when compared by using the specified comparison mode.
Greater Than	The name of the current operation is greater than content of the condition when compared by using the specified comparison mode.
Less Than	The name of the current operation is less than content of the condition when compared by using the specified comparison mode.
Not Equal	Equal would return False.
Not Greater Than	Greater Than would return False.
Not Less Than	Less Than would return False.

Mode

The condition has a comparison mode parameter that indicates how a comparison is done.

Mode	Description
Case Sensitive	Character-by-character case sensitive comparison.
Case Insensitive	Character-by-character case insensitive comparison.
Regular Expression	The regular expression matches the entire string. It defaults to case insensitive, but can be changed by an escape in the expression. For more information, see Sun’s Web site. The pattern options CASE_INSENSITIVE, DOTALL, and UNICODE_CASE are used but can be reversed by using the appropriate embedded escapes.
Source DN	Compares by using semantics appropriate to the DN format for the source data store.
Destination DN	Compares by using semantics appropriate to the DN format for the destination data store.
Numeric	Compares numerically.
Binary	Compares the binary information.

The operators that contain the comparison mode parameter are:

• Equal

• Greater Than

• Less Than

• Not Equal

• Not Greater Than

• Not Less Than

Value

Contains the value defined for the selected operator. The value is used by the condition. Each value supports variable expansion. For more information, see Section 3.6, Variable Selector. The operators that contain the value field are:

• Equal

• Greater Than

• Less Than

• Not Equal

• Not Greater Than

• Not Less Than

The values are the operations that the Metadirectory engine looks for:

• add

• add-association

• check-object-password

• check-password

• delete

• generated-password

• get-named-password

• init-params

• instance

• modify

• modify-association

• modify-password

• move

• password

• query

• query-schema

• remove-association

• rename

• schema-def

• status

• sync

• trigger

This list is not exclusive. Custom operations can be implemented by drivers and administrators.

Example

The example adds a User object to the appropriate Employee or Manager group based on Title. It also creates the group, if needed, and sets up security equal to that group. The policy name is Govern Groups for User Based on Title Attribute, and it is available for download from the Novell Support Web site. For more information, see Downloading Identity Manager Policies in Understanding Policies for Identity Manager 3.6. To view the policy in XML, see 003-Command-AddCreateGroups.xml.

The condition checks to see if an Add or Modify operation has occurred. When one of these occurs, it sets the local variables.