Performs a test on the association value of the current operation or the current object. The type of test performed depends on the operator specified by the op attribute. The following table shows the type of test performed by each operator.
Operator |
Returns true when... |
---|---|
associated |
There is an established association for the current object. |
available |
There is a non-empty association value specified by the current operation. |
equal |
The association value specified by the current operation is exactly equal to the content of <if-association>. Supports variable expansion. |
lt |
The association value specified by the current operation is less than the content of the condition when compared using the specified comparison mode. Supports variable expansion. |
gt |
The association value specified by the current operation is greater than the content of the condition when compared using the specified comparison mode. Supports variable expansion. |
not-associated |
Associated returns false. |
not-available |
Available returns false. |
not-equal |
Equal returns false. |
not-lt |
Less than returns false. |
not-gt |
Greater than returns false. |
<if-association op="associated "/> <if-association op="available"/> <if-association op="equal">{07414faa-1b38-40ec-8b7c-c20aa21ddafb}</if-association>
#PCDATA
Attribute |
Possible Values |
Default Value |
---|---|---|
disabled |
true | false True if this element is disabled. |
false |
mode |
case | nocase | regex | src-dn | dest-dn | numeric | octet Comparison mode if op implies a comparison. |
nocase |
notrace |
true | false True if this element should not be traced during execution of the policy. |
false |
op |
available | equal | lt | gt | not-available | not-equal not-lt | not-gt Test operator. |
#REQUIRED |
( #PCDATA )