if-password

Performs a test on a password in the current operation. The type of test performed depends on the operator specified by the op attribute. The following table shows the type of test performed by each operator.

Remarks

Operator

Returns true when...

available

There is password available in the current operation.

equal

There is password available in the current operation and its value equals the content of the condition when compared using the specified comparison mode. Supports variable expansion.

lt

There is password available in the current operation and its value is less than the content of the condition when compared using the specified comparison mode. Supports variable expansion.

gt

There is password available in the current operation and its value is greater than the content of the condition when compared using the specified comparison mode. Supports variable expansion.

not-available

Available returns false.

not-equal

Equal returns false.

not-lt

Less than returns false.

not-gt

Greater than returns false.

Example

<if-password op="available"/>

Allowed Content

EMPTY

Attributes

Attribute

Possible Values

Default Value

disabled

true | falseTrue if this element is disabled.

false

mode

case| nocase | regex | scr-dn | dest-dn | numeric | octet

Comparison mode if op implies a comparison.

case

notrace

true | false

True if this element should not be traced during execution of the policy.

false

op

available | equal | lt | gt | not-available | not-equal | not-lt | not-gt

Test operator.

#REQUIRED

Content Rule

Empty

Parent Elements

Element

Description

and

Logical conjunction.

or

Logical disjunction.