User manual NOVELL POLICIES IN IMANAGER 3.6.1 06-05-2009

[. . . ] novdocx (en) 13 May 2009 AUTHORIZED DOCUMENTATION Policies in iManager Novell® 3. 6. 1 June 05, 2009 Policies in iManager www. novell. com Policies in iManager for Identity Manager 3. 6. 1 novdocx (en) 13 May 2009 Legal Notices Novell, Inc. makes no representations or warranties with respect to the contents or use of this documentation, and specifically disclaims any express or implied warranties of merchantability or fitness for any particular purpose. reserves the right to revise this publication and to make changes to its content, at any time, without obligation to notify any person or entity of such revisions or changes. makes no representations or warranties with respect to any software, and specifically disclaims any express or implied warranties of merchantability or fitness for any particular purpose. [. . . ] The test performed depends on the specified operator. Fields Name Specify the name of the attribute to test. Operator Select the condition test type. Operator Returns True when. . . Available Not Available Equal There is a value available in either the current operation or the source data store for the specified attribute. There is a value available in either the current operation or the source data store for the specified attribute, which equals the specified value when compared using the specified comparison mode. There is a value available in either the current operation or the source data store for the specified attribute that is greater than the content of the condition when compared using the specified comparison mode. Greater Than or Equal would return False. There is a value available in either the current operation or the source data store for the specified attribute that is less than the content of the condition when compared using the specified comparison mode. Less Than or Equal would return False. Not Equal Greater Than Not Greater Than Less Than Not Less Than Value Contains the value defined for the selected operator. The operators that contain the value field are: Equal Not Equal Not Greater Than Less Than Not Less Than Comparison Mode Some condition tests have a mode parameter that indicates how the comparison is done. 94 Policies in iManager for Identity Manager 3. 6. 1 novdocx (en) 13 May 2009 Mode Description Case Sensitive Case Insensitive Character-by-character case sensitive comparison. Character-by-character case insensitive comparison. Regular Expression The regular expression matches the entire string. It defaults to case insensitive, but can be changed by an escape in the expression. See Sun's Web site (http://java. sun. com/j2se/1. 4/docs/api/java/util/regex/ Pattern. html). The pattern options CASE_INSENSITIVE, DOTALL, and UNICODE_CASE are used but can be reversed using the appropriate embedded escapes. Source DN Destination DN Numeric Binary Compares using semantics appropriate to the DN format for the source data store. Compares using semantics appropriate to the DN format for the destination data store. Compares the binary information. The operators that contain the comparison mode parameter are: Equal Not Equal Not Greater Than Less Than Not Less Than Example The example uses the condition If Attribute when filtering for User objects that are disabled or have a certain title. The policy is Policy to Filter Events, and it is available for download from the Novell® Support Web site. For more information, see "Downloading Identity Manager Policies" in Understanding Policies for Identity Manager 3. 6. To view the policy in XML, see 001-EventFilterByContainerDisabledOrTitle. xml (. . /samples/001-EventFilterByContainerDisabledOrTitle. xml). The condition is looking for any User object that has an attribute of Title with a value of consultant or sales. Conditions 95 novdocx (en) 13 May 2009 96 Policies in iManager for Identity Manager 3. 6. 1 novdocx (en) 13 May 2009 If Class Name Performs a test on the object class name in the current operation. Fields Operator Select the condition test type. Operator Returns True when. . . Available Not Available Equal There is an object class name available in the current operation. There is an object class name available in the current operation, and it equals the specified value when compared using the specified comparison mode. There is an object class name available in the current operation, and it is greater than the content of the condition when compared using the specified comparison mode. Greater Than or Equal would return False. There is an object class name available in the current operation, and it is less than the content of the condition when compared using the specified comparison mode. [. . . ] Negative indexes are an offset from the last character toward the start of the string. For example, if the start is specified as -2, then it starts reading the first character from the end. If -3 is specified, then is starts 2 characters from the end. Length Number of characters from the start to include in the substring. [. . . ]