Novell Documentation: Novell Nsure Identity Manager Driver Kit

driver-filter

Specifies the object classes and attributes for which the publisher can send modifications and for which the subscriber can receive modifications.

Description

The filter controls the information that eDirectory synchronizes with the external application and helps designate the authoritative source of the information. A driver which publishes changes to an attribute but does not subscribe for changes to that attribute is set up in DirXML to be the authoritative source for that attribute. (The other step is to modify the attribute's ACL in eDirectory so that the driver object is the only object with rights to modify the attribute). If no authoritative sources are being set up, the subscription and publication filters can be the same. The driver filter is stored in the DirXML-DriverFilter attribute of the DirXML-Publisher and DirXML-Subscriber objects in eDirectory.

The DirXML engine processes the filter according to the channel:

For the subscriber channel which sends events from eDirectory to the driver, the engine applies the subscriber filter to the eDirectory events before applying the event transformation rules (see Section 8.5, Event Transformation Rules).
For the publisher channel which sends events from the driver to the engine, the engine applies the filter after applying input transformation rules (see Section 8.7, Input Transformation Style Sheets) and the schema mapping rules (see attr-name-map).

The attributes and the classes specified in the filters must complement the attributes and classes specified in the rules. For example, if the create rule for the subscriber specifies that a User object must have a Surname attribute, then the subscriber filter should include the User object and its Surname attribute.

Definition

  <!ELEMENT driver-filter   (allow-class)* >
  <!ATTLIST driver-filter
            type            (publisher|subscriber)   #IMPLIED>
  
  <!ELEMENT allow-class     (allow-attr)* >
  <!ATTLIST allow-class
            class-name      CDATA              #REQUIRED>
  
  <!ELEMENT allow-attr      EMPTY>
  <!ATTLIST allow-attr
            attr-name       CDATA              #REQUIRED>

Attributes

type: Specifies whether publisher or subscriber should use the filter

Elements

<allow-class>: Specifies the classes that are allowed by the filter

Format

A driver-filter contains the following:

type attribute which specifies whether the publisher or the subscriber should use the filter. If type is not specified, both use the filter.
<allow-class> (0 or more) which specifies the classes that are allowed by the filter
- class-name attribute which specifies the class name
- <allow-attr> (0 or more) which specifies the attributes of the enclosing class that are allowed by the filter. This element contains an attr-name attribute.

Parent

init-params

Sample Filter

The VR Test driver can be configured to use the following sample filter for the subscriber shim. This sample starts with the <input> element. The filter allows the subscriber to receive modifications for four attributes of the User object class.

  ...
  <input>
     <init-params>
        <driver-filter>
           <allow-class class-name="User">
              <allow-attr attr-name="Surname"/>
              <allow-attr attr-name="CN"/>
              <allow-attr attr-name="Given Name"/>
              <allow-attr attr-name="Telephone Number"/>
           </allow-class>
        </driver-filter>
  ...