if-association

Performs a test on the association value of the current operation or the current object. The type of test performed depends on the operator specified by the op attribute. The following table shows the type of test performed by each operator.

Remarks

Operator	Returns true when...
associated	There is an established association for the current object.
available	There is a non-empty association value specified by the current operation.
equal	The association value specified by the current operation is exactly equal to the content of <if-association>. Supports variable expansion.
lt	The association value specified by the current operation is less than the content of the condition when compared using the specified comparison mode. Supports variable expansion.
gt	The association value specified by the current operation is greater than the content of the condition when compared using the specified comparison mode. Supports variable expansion.
not-associated	Associated returns false.
not-available	Available returns false.
not-equal	Equal returns false.
not-lt	Less than returns false.
not-gt	Greater than returns false.

Example

<if-association op="associated "/><if-association op="available"/><if-associationop="equal">{07414faa-1b38-40ec-8b7c-c20aa21ddafb}</if-association>

Allowed Content

#PCDATA

Attributes

Attribute	Possible Values	Default Value
disabled	true \| false True if this element is disabled.	false
mode	case \| nocase \| regex \| src-dn \| dest-dn \| numeric \| octet Comparison mode if op implies a comparison.	nocase
notrace	true \| false True if this element should not be traced during execution of the policy.	false
op	available \| equal \| lt \| gt \| not-available \| not-equal not-lt \| not-gt Test operator.	#REQUIRED

Content Rule

( #PCDATA )

Parent Elements

Element	Description
and	Logical conjunction.
or	Logical disjunction.