filter-attr

Describes an attribute of the enclosing <filter-class> that is used by a particular instance of an Identity Manager driver. The attr-name attribute specifies the name of an attribute in eDirectory.The publisher and subscriber attributes control whether this attribute is synchronized on the respective channels according to the following table. If the channel setting for the object class as a whole is ignored, then the setting for individual attributes is ignored.

Remarks

The publisher and subscriber attributes control whether this attribute is synchronized on the respective channels according to the following table. If the channel setting for the object class as a whole is ignored, then the setting for individual attributes is ignored.

Value

Description

ignore

Changes to this attribute are not reported or automatically synchronized.

notify

Changes to this attribute are reported but not automatically synchronized.

sync

Changes to this attribute are reported and automatically synchronized.

reset

Changes to this attribute are reported and triggers the attribute to be automatically reset to the values from the other channel. It is illegal for both Publisher and Subscriber to reset for the same attribute.

The merge-authority attribute controls the behavior of the attribute during a merge operation according to the following table:

Value

Behavior

Valid

default

1. If an attribute is not being synchronized in either channel, then no merging occurs.

2. If an attribute is being synchronized in one channel and not the other, then all existing values on the destination for that channel are removed and replaced with the values from the source for that channel. If the source has multiple values and the destination can only accommodate a single value, then only one of the values is used on the destination side, although it is undefined which of those values are used.

3. If an attribute is being synchronized in both channels and both sides can accommodate multiple values, then each side ends up with the union of values present on either side.

4. If an attribute is being synchronized in both channels and both sides can accommodate only a single value, the application ends up with the value from eDirectory unless there is no value in eDirectory. In this case eDirectory ends up with the value from the application (if any).

5. If an attribute is synchronized in both channels and only one side can accommodate multiple values then the single-valued side's value is added to the value from the multiple-value side if it is already there. If there is no value on the single-valued side one of the values (undefined) is added to the single-valued side.

Always

edir

Has the same behavior as the default if the attributes are synchronized on the Subscriber channel and not on the Publisher channel.

When synchronizing or notifying on the Subscriber channel

app

Has the same behavior as the default if the attributes are synchronized on the Publisher channel and not on the Subscriber channel.

When synchronizing or notifying on the Publisher channel

none

No merging occurs regardless of synchronization.

Always

The publisher-optimize-modify attribute controls whether or not changes to this attribute are examined on the Publisher channel to determine the minimal change needed in the Identity Vault.

Example

See <filter>.

Allowed Content

EMPTY

Attributes

Attribute

Possible Values

Default Value

attr-name

CDATA

Name of the attribute.

#REQUIRED

merge-authority

default | edir | app | none

Flag that controls how this attribute is merged.

default

publisher

ignore | notify | sync | reset

Flag that controls Publisher channel synchronization.

ignore

publisher-optimize-modify

true | false

Flag that controls optimization of modifications on the Subscriber channel.

true

subscriber

ignore | notify | sync | reset

Flag that controls Subscriber channel synchronization.

ignore

Content Declaration

Empty

Parent Elements

Element

Description

filter-class

Behavior of an object class.