Performs a test on attribute values in the current operation. The test performed depends on the specified operator.
Specify the name of the attribute to test. Supports variable expansion. For more information, see Section 3.6, Variable Selector.
Select the condition test type.
Contains the value defined for the selected operator. The value is used by the condition. Each value supports variable expansion. For more information, see Section 3.6, Variable Selector. The operators that contain the value field are:
Changing From
Changing To
Equal
Greater Than
Less Than
Not Changing From
Not Changing To
Not Equal
Not Greater Than
Not Less Than
The condition has a comparison mode parameter that indicates how a comparison is done.
Mode |
Description |
---|---|
Case Sensitive |
Character-by-character case sensitive comparison. |
Case Insensitive |
Character-by-character case insensitive comparison. |
Regular Expression |
The regular expression matches the entire string. It defaults to case insensitive, but can be changed by an escape in the expression. For more information, see Sun’s Web site. The pattern options CASE_INSENSITIVE, DOTALL, and UNICODE_CASE are used but can be reversed by using the appropriate embedded escapes. |
Source DN |
Compares by using semantics appropriate to the DN format for the source data store. |
Destination DN |
Compares by using semantics appropriate to the DN format for the destination data store. |
Numeric |
Compares numerically. |
Binary |
Compares the binary information. |
Structured |
Compares the structured attribute according to the comparison rules for the structured syntax of the attribute. |
The operators that contain the comparison mode parameter are:
Changing From
Changing To
Equal
Greater Than
Less Than
Not Changing From
Not Changing To
Not Equal
Not Greater Than
Not Less Than
The example adds a User object to the appropriate Employee or Manager group based on Title. It also creates the group, if needed, and sets up security equal to that group. The policy name is Govern Groups for User Based on Title Attribute, and it is available for download from the Novell Support Web site. For more information, see Downloading Identity Manager Policies
in Understanding Policies for Identity Manager 3.6. To view the policy in XML, see 003-Command-Add-CreateGroups.xml.
The condition checks to see if the attribute of Title is equal to .*manager.*, which is a regular expression. The condition looks for a title that has zero or more characters before manager and a single character after manager. It would find a match if the User object’s title was sales managers.