token-escape-for-dest-dn

Expands to a version of the expansion of the concatenation of the enclosed tokens, which has been escaped for use in a DN according to the rules of the destination DN format.

Example

<token-escape-for-dest-dn>
 <token-attr name="Surname"/>
</token-escape-for-dest-dn>

Allowed Content

Element

Description

token-added-entitlement

The values of an entitlement granted in the current operation.

token-association

The association value from the current operation.

token-attr

The values of an attribute in the current operation or current object in the source data store.

token-base64-decode

Decodes base64 data into a string.

token-base64-encode

Encodes a string into base64 data.

token-char

A Unicode character.

token-class-name

The object class name from the current operation

token-convert-time

Converts a date/time from one format to another.

token-dest-attr

The values of an attribute of current object in the destination data store.

token-dest-dn

A value derived from the destination DN from the current operation.

token-dest-name

The unqualified RDN derived from the destination DN from the current operation.

token-document

Reads an XML document.

token-entitlement

The values of a granted entitlement of the current object.

token-escape-for-dest-dn

Converts a string for use in a destination DN.

token-escape-for-src-dn

Converts a string for use in a source DN.

token-generate-password

Generates a random password.

token-global-variable

The value of a global variable.

token-join

Joins a node-set into a string.

token-local-variable

The value of a local variable.

token-lower-case

Converts a string to lowercase.

token-map

Maps a string through a mapping table.

token-named-password

The value of the named password.

token-op-attr

The values of an attribute in the current operation.

token-op-property

The value of an operation property.

token-operation

The name of the current operation.

token-parse-dn

Parses or converts a DN.

token-password

The value of the password in the current operation.

token-query

Queries the source or destination data store.

token-removed-attr

The values of an attribute removed in the current operation.

token-removed-entitlement

The values of an entitlement revoked in the current operation.

token-replace-all

Replaces all instances of a substring within a string.

token-replace-first

Replaces a single instance of a substring within a string.

token-resolve

Resolves a DN to an association key or an association key to a DN.

token-split

Splits a string into a node set.

token-src-attr

The values of an attribute of the current object in the source data store.

token-src-dn

A value derived from the source DN from the current operation.

token-src-name

The unqualified RDN derived from source DN from the current operation.

token-substring

Substring of a string.

token-text

Constant text.

token-time

The current date/time.

token-unique-name

Generates a unique name.

token-unmatched-src-dn

A DN relative to the one matched by if-src-dn.

token-upper-case

Converts a string to uppercase.

token-xml-parse

Parses XML.

token-xml-serialize

Serializes XML.

token-xpath

The result of an XPath expression.

Attributes

Attribute

Possible Values

Default Value

notrace

true | false

True if this element should not be traced during execution of the policy.

false

Content Rule

( token-added-entitlement | token-association | token-attr | token-base64-decode | token-base64-encode | token-char | token-class-name | token-convert-time | token-dest-attr | token-dest-dn | token-dest-name | token-document | token-entitlement | token-escape-for-dest-dn | token-escape-for-src-dn | token-generate-password | token-global-variable | token-join | token-local-variable | token-lower-case | token-named-password | token-map | token-op-attr | token-op-property | token-operation | token-parse-dn | token-password | token-removed-attr | token-removed-entitlement | token-replace-all | token-replace-first | token-resolve | token-src-attr | token-src-dn | token-src-name | token-substring | token-text | token-time | token-unique-name | token-unmatched-src-dn | token-upper-case | token-xml-parse | token-xml-serialize | token-xpath ) +

Parent Elements

Element

Description

arg-association

Association argument.

arg-component

Component argument.

arg-dn

DN argument.

arg-node-set

Node set argument.

arg-password

Password argument.

arg-string

String argument

arg-value

Value argument.

token-base64-decode

Decodes base64 data into a string.

token-base64-encode

Encodes a string into base64 data.

token-convert-time

Converts a date/time from one format to another.

token-escape-for-dest-dn

Converts a string for use in a destination DN.

token-escape-for-src-dn

Converts a string for use in a source DN.

token-join

Joins a node-set into a string.

token-lower-case

Converts a string to lowercase.

token-map

Maps a string through a mapping table.

token-parse-dn

Parses or converts a DN.

token-replace-all

Replaces all instances of a substring within a string.

token-replace-first

Replaces a single instance of a substring within a string.

token-split

Splits a string into a node set.

token-substring

Substring of a string.

token-upper-case

Converts a string to uppercase.

token-xml-parse

Parses XML.

token-xml-serialize

Serializes XML.