If Operation Attribute

Performs a test on attribute values in the current operation. The test performed depends on the specified operator.

Fields

Name

Specify the name of the attribute to test.

Operator

Select the condition test type.

Operator

Returns True when...

Available

There is a value available in the current operation (<add-attr>, <add-value> or <attr>) for the specified attribute.

Not Available

Available would return False.

Equal

There is a value available in the current operation (other than a <remove-value>) for the specified attribute that equals the content of the condition when compared by using the specified comparison mode. If mode=structured, then the content must be a set of <component>'s. Otherwise, it must be text.

Not Equal

Equal would return False.

Greater Than

There is a value available in the current operation (other than a <remove-value>) for the specified attribute that is greater than the content of the condition when compared by using the specified comparison mode. If mode=structured, then the content must be a set of <component>'s. Otherwise, it must be text.

Not Greater Than

Greater Than or Equal would return False.

Less Than

There is a value available in the current operation (other than a <remove-value>) for the specified attribute that is less than the content of the condition when compared by using the specified comparison mode. If mode=structured, then the content must be a set of <component>'s. Otherwise, it must be text.

Not Less Than

Less Than or Equal would return False.

Changing

The current operation contains a change (<modify-attr> or <add-attr>) of the specified attribute.

Not Changing

Changing would return False.

Changing From

The current operation contains a change that removes a value (<remove-value>) of the specified attribute that equals the content of the condition when compared by using the specified comparison mode. If mode=structured, then the content must be a set of <component>'s. Otherwise, it must be text.

Not Changing From

Changing From would return False.

Changing To

The current operation contains a change that adds a value (<add-value> or <add-attr>) to the specified attribute that equals the content of the condition when compared by using the specified comparison mode. If mode=structured, then the content must be a set of <component>'s. Otherwise, it must be text.

Not Changing To

Changing To would return False.

Value

Contains the value defined for the selected operator. The value is used by the condition. The operators that contain the value field are:

  • Equal

  • Not Equal

  • Changing To

  • Changing From

  • Not Changing To

  • Not Changing From

  • Greater Than

  • Not Greater Than

  • Less Than

  • Not Less Than

Comparison Mode

Some condition tests have a mode parameter that indicates how the comparison is done.

Mode

Description

Case Sensitive

Character-by-character case sensitive comparison.

Case Insensitive

Character-by-character case insensitive comparison.

Regular Expression

The regular expression matches the entire string. It defaults to case insensitive, but can be changed by an escape in the expression.

See Sun’s Web site.

The pattern options CASE_INSENSITIVE, DOTALL, and UNICODE_CASE are used but can be reversed using the appropriate embedded escapes.

Source DN

Compares using semantics appropriate to the DN format for the source data store.

Destination DN

Compares using semantics appropriate to the DN format for the destination data store.

Numeric

Compares numerically.

Binary

Compares the binary information.

Structured

Compares the structured attribute according to the comparison rules for the structured syntax of the attribute.

The operators that contain the comparison mode parameter are:

  • Equal

  • Not Equal

  • Changing To

  • Changing From

  • Not Changing To

  • Not Changing From

  • Greater Than

  • Not Greater Than

  • Less Than

  • Not Less Than

Example

The example adds a User object to the appropriate group, Employee or Manager, based on Title. It also creates the group, if needed, and sets up security equal to that group. The policy name is Govern Groups for User Based on Title Attribute, and it is available for download from the Novell Support Web site. For more information, see Downloading Identity Manager Policies in Understanding Policies for Identity Manager 4.0.2. To view the policy in XML, see 003-Command-Add-CreateGroups.xml.

Policy to see if the Title indicates manager
Operation attribute

The condition is checking to see if the attribute of Title is equal to .*manager*, which is a regular expression. This means that it is looking for a title that has zero or more characters before manager and a single character after manager. It would find a match if the User object’s title was sales managers.