Novell Documentation: Novell Nsure Identity Manager Driver Kit

create-rule

Specifies the criteria for creating a new entry in the destination of an add operation.

Description

The DirXML engine uses the following algorithm to determine if the add operation can use a particular create rule:

If a class-name attribute is specified in the <create-rule> element, the class-name attribute in the add operation must match the class-name attribute in the <create-rule> element.
If <match-attr> elements are specified in the <create-rule> element, the add operation must contain an attribute value for each of the attributes specified in the <match-attr> elements.

If a rule cannot be used, it is skipped, and the DirXML engine moves to the next rule.

Once a suitable rule is found, the DirXML engine evaluates the add operation to see if it has values for all the <required-attr> elements that do not have default values.

If the add operation does not have values for all the <required-attr> elements and the create rule does not supply default values for these attributes, the add operation fails.
If the add operation has all the required values but is missing some of the default values, the DirXML engine fills in the missing default values.

If a <template> element is specified, the template-dn attribute of the <add> element is filled in.

If not applicable rule is found, the add is allowed.

Definition

  <!ELEMENT create-rule (match-attr*, 
                         required-attr*, 
                         template?) >
  <!ATTLIST create-rule 
            class-name    CDATA   #IMPLIED
            description   CDATA   #IMPLIED>

Attributes

class-name: Specifies the base class that this rule applies to. If no base class is specified, the rule applies to all classes. The name is specified in the eDirectory name space.
description: Provides a description of the rule for display in the ConsoleOne snapin.

Elements

match-attr: Specifies an attribute value that the entry must match in order for the rule to be selected.
required-attr: Specifies the attributes that the entry must have. Default values for the attributes may be specified.
template: Specifies the distinguished name of template to use in creating the entry. The name is specified in the destination name space.

Parent

create-rules