User manual NOVELL POLICIES IN IMANAGER 3.6.1 06-05-2009

[. . . ] novdocx (en) 13 May 2009 AUTHORIZED DOCUMENTATION Policies in iManager Novell® 3. 6. 1 June 05, 2009 Policies in iManager www. novell. com Policies in iManager for Identity Manager 3. 6. 1 novdocx (en) 13 May 2009 Legal Notices Novell, Inc. makes no representations or warranties with respect to the contents or use of this documentation, and specifically disclaims any express or implied warranties of merchantability or fitness for any particular purpose. reserves the right to revise this publication and to make changes to its content, at any time, without obligation to notify any person or entity of such revisions or changes. makes no representations or warranties with respect to any software, and specifically disclaims any express or implied warranties of merchantability or fitness for any particular purpose. [. . . ] It defaults to case insensitive, but can be changed by an escape in the expression. See Sun's Web site (http://java. sun. com/j2se/1. 4/docs/api/java/util/regex/ Pattern. html). The pattern options CASE_INSENSITIVE, DOTALL, and UNICODE_CASE are used but can be reversed using the appropriate embedded escapes. Source DN Destination DN Numeric Binary Compares using semantics appropriate to the DN format for the source data store. Compares using semantics appropriate to the DN format for the destination data store. Compares the binary information. The operators that contain the comparison mode parameter are: Equal Not Equal Not Greater Than Less Than Not Less Than Example The example uses the condition If Class Name to govern group membership for a User object based on the title. The policy is Govern Groups for User Based on Title Attribute, and it is available for download from the Novell Support Web site. For more information, see "Downloading Identity Manager Policies" in Understanding Policies for Identity Manager 3. 6. To view the policy in XML, see 004-Command-GroupChangeOnTitleChange. xml (. . /samples/004-CommandGroupChangeOnTitleChange. xml). Checks to see if the class name of the current object is User. 98 Policies in iManager for Identity Manager 3. 6. 1 novdocx (en) 13 May 2009 Conditions 99 novdocx (en) 13 May 2009 If Destination Attribute Performs a test on attribute values of the current object in the destination data store. The test performed depends on the specified operator. Fields Name Specify the name of the attribute to test. Operator Select the condition test type. Operator Returns True when. . . Available Not Available Equal There is a value available in the destination data store for the specified attribute. There is a value available for the specified attribute in the destination data store that equals the specified value when compared using the specified comparison mode. There is a value available for the specified attribute in the destination data store that is greater than the content of the condition when compared using the specified comparison mode. If mode="structured", the content must be a set of <component> elements; otherwise, it must be text. There is a value available for the specified attribute in the destination data store that is greater than the content of the condition when compared using the specified comparison mode. If mode="structured", the content must be a set of <component> elements; otherwise, it must be text. Less Than or Equal would return False. Not Equal Greater Than Not Greater Than Less Than Not Less Than Value Contains the value defined for the selected operator. The operators that contain the value field are: Equal Not Equal Not Greater Than Less Than Not Less Than Comparison Mode Some condition tests have a mode parameter that indicates how the comparison is done. 100 Policies in iManager for Identity Manager 3. 6. 1 novdocx (en) 13 May 2009 Mode Description Case Sensitive Case Insensitive Character-by-character case sensitive comparison. Character-by-character case insensitive comparison. Regular Expression The regular expression matches the entire string. It defaults to case insensitive, but can be changed by an escape in the expression. See Sun's Web site (http://java. sun. com/j2se/1. 4/docs/api/java/util/regex/ Pattern. html). The pattern options CASE_INSENSITIVE, DOTALL, and UNICODE_CASE are used but can be reversed using the appropriate embedded escapes. [. . . ] This rule transforms the format of the telephone number from (nnn) nnn-nnnn to nnn-nnn-nnnn. 258 Policies in iManager for Identity Manager 3. 6. 1 novdocx (en) 13 May 2009 Split Splits the result of the enclosed tokens into a node set consisting of text nodes based on the pattern specified by delimiter. If comma-separated values (CSV) are true, then CSV quoting rules are honored during the parsing of the string. Fields Delimiter Regular expression that matches the delimiter characters. Apply CSV Quoting Rules Applies CSV quoting values. Example Verb Tokens 259 novdocx (en) 13 May 2009 Substring Extracts a portion of the enclosed tokens. Fields Start Specify the starting character index: Index 0 is the first character. Negative indexes are an offset from the last character toward the start of the string. [. . . ]