Novell Doc: Identity Manager 3.5.1 DTD Reference

Remarks

<src-dn-delims> and <dest-dn-delims> are used to specify custom DN formats. The eight characters that make up the delimiter set are defined as follows:

Typed Name Boolean Flag: 0 means names are not typed, 1 means names are typed
Unicode No-Map Character Boolean Flag: 0 means don't output or interpret unmappable Unicode characters as escaped hex digit strings, for example \FEFF. The Unicode characters 0xfeff, 0xfffe, 0xfffd, and 0xffff are not accepted by eDirectory.
Relative RDN Delimiter
RDN Delimiter
Name Divider
Name Value Delimiter
Wildcard Character
Escape Character

If RDN Delimiter and Relative RDN Delimiter are the same character, then the orientation of the name is root right, otherwise the orientation is root left.

If there are more than eight characters in the delimiter set, the extra characters are all considered to be characters that need to be escaped but have no other special meaning.

Example

<token-parse-dn src-dn-format="src-dn" dest-dn-format="dest-dn" start="0"length="-1"> <token-op-attr name="Group Membership"/></token-parse-dn>

Allowed Content

Element	Description
token-added-entitlement	The values of an entitlement granted in the current operation.
token-association	The association value from the current operation.
token-attr	The values of an attribute in the current operation or current object in the source data store.
token-base64-decode	Decodes base64 data into a string.
token-base64-encode	Encodes a string into base64 data.
token-char	A Unicode character.
token-class-name	The object class name from the current operation
token-convert-time	Converts a date/time from one format to another.
token-dest-attr	The values of an attribute of current object in the destination data store.
token-dest-dn	A value derived from the destination DN from the current operation.
token-dest-name	The unqualified RDN derived from the destination DN from the current operation.
token-document	Reads an XML document.
token-entitlement	The values of a granted entitlement of the current object.
token-escape-for-dest-dn	Converts a string for use in a destination DN.
token-escape-for-src-dn	Converts a string for use in a source DN.
token-generate-password	Generates a random password.
token-global-variable	The value of a global variable.
token-join	Joins a node-set into a string.
token-local-variable	The value of a local variable.
token-lower-case	Converts a string to lowercase.
token-map	Maps a string through a mapping table.
token-named-password	The value of the named password.
token-op-attr	The values of an attribute in the current operation.
token-op-property	The value of an operation property.
token-operation	The name of the current operation.
token-parse-dn	Parses or converts a DN.
token-password	The value of the password in the current operation.
token-query	Queries the source or destination data store.
token-removed-attr	The values of an attribute removed in the current operation.
token-removed-entitlement	The values of an entitlement revoked in the current operation.
token-replace-all	Replaces all instances of a substring within a string.
token-replace-first	Replaces a single instance of a substring within a string.
token-resolve	Resolves a DN to an association key or an association key to a DN.
token-split	Splits a string into a node set.
token-src-attr	The values of an attribute of the current object in the source data store.
token-src-dn	A value derived from the source DN from the current operation.
token-src-name	The unqualified RDN derived from source DN from the current operation.
token-substring	Substring of a string.
token-text	Constant text.
token-time	The current date/time.
token-unique-name	Generates a unique name.
token-unmatched-src-dn	A DN relative to the one matched by if-src-dn.
token-upper-case	Converts a string to uppercase.
token-xml-parse	Parses XML.
token-xml-serialize	Serializes XML.
token-xpath	The result of an XPath expression.

Attributes

Attribute	Possible Values	Default Value
dest-dn-delims	CDATA Specifies the custom DN delimiter set when dest-dn-format=“custom”.	#IMPLIED
dest-dn-format	src-dn \| dest-dn \| dot \| qualified-dot \| slash \| qualified-slash \| ldap \| custom The format used to output the parsed DN.	dest-dn
length	CDATA The number of DN segments to include negative numbers are interpreted as (total # of segments + length) + 1. For example, for a DN with 5 segments a length of -1 = (5 + (-1)) + 1 = 5, -2 = (5 + (-2)) + 1 = 4, etc.	-1
notrace	true \| false True if this element should not be traced during execution of the policy.	false
src-dn-delims	CDATA Specifies the custom DN delimiter set when src-dn-format=“custom”	#IMPLIED
src-dn-format	src-dn \| dest-dn \| dot \| qualified-dot \| slash \| qualified-slash \| ldap \| custom The format used to parse the enclosed DN.	src-dn
start	CDATA The segment index to start with: 0 is the rootmost segment. >0 is an offset from the rootmost segment. -1 is the leafmost segment. <-1 is an offset from the leafmost segment towards the rootmost segment.	0

Content Rule

Parent Elements

Element	Description
arg-association	Association argument.
arg-component	Component argument.
arg-dn	DN argument.
arg-node-set	Node set argument.
arg-password	Password argument.
arg-string	String argument.
arg-value	Value argument.
token-base64-decode	Decode base64 data into a string.
token-base64-encode	Encode a string into base64 data.
token-convert-time	Convert a data/time from one format to another format.
token-escape-for-dest-dn	Convert a string for use in the destination DN.
token-escape-for-src-dn	Convert a string for use in a source DN.
token-join	Join a node set into a string.
token-lower-case	Convert a string to lowercase.
token-map	Map a string through a mapping table.
token-parse-dn	Parses or converts a DN.
token-replace-all	Replaces all instances of a substring with a string.
token-replace-first	Replaces a single instance of a substring within a string.
token-split	Splits a string into a node set.
token-substring	Substring of a string.
token-upper-case	Converts a string to uppercase.
token-xml-parse	Parses XML.
token-xml-serialize	Serializes XML.