If Operation Attribute

Fields

Name

Specify the name of the attribute to test.

Operator

Select the condition test type.

Operator Returns True when...

Operator	Returns True when...
Available	There is a value available in the current operation other than a remove value for the specified attribute.
Not Available	Available would return False.
Equal	There is a value available in the current operation other than a remove value for the specified attribute. It equals the specified value when compared using the specified comparison mode.
Not Equal	Equal would return False.
Greater Than	There is a value available in the current operation other than a remove value for the specified attribute that is greater than the content of the condition when compared using the specified comparison mode. If mode=“structured”, the content must be a set of <component> elements; otherwise, it must be text.
Not Greater Than	Greater Than or Equal would return False.
Less Than	There is a value available in the current operation other than a remove value for the specified attribute that is less than the content of the condition when compared using the specified comparison mode. If mode=“structured” then the content must be a set of <component> elements; otherwise, it must be text.
Not Less Than	Less Than or Equal would return False.
Changing	The current operation contains a change for the specified attribute.
Not Changing	Changing would return False.
Changing From	The current operation contains a change that removes a value other than a remove value of the specified attribute. It equals the specified value when compared using the specified comparison mode.
Not Changing From	Changing From would return False.
Changing To	The current operation contains a change that adds a value other than a remove value to the specified attribute. It equals the specified value when compared using the specified comparison mode.
Not Changing To	Changing To would return False.

Value

Contains the value defined for the select operator. The value is used by the condition. Each value supports variable expansion. For more information, see Variable Expansion. The operators that contain the value field are:

• Equal

• Not Equal

• Changing To

• Changing From

• Not Changing To

• Not Changing From

• Greater Than

• Not Greater Than

• Less Than

• Not Less Than

Comparison Mode

The condition has a comparison mode parameter that indicates how a comparison is done.

Mode	Description
Case Sensitive	Character-by-character case sensitive comparison.
Case Insensitive	Character-by-character case insensitive comparison.
Regular Expression	The regular expression matches the entire string. It defaults to case insensitive, but can be changed by an escape in the expression. See Sun’s Web site. The pattern options CASE_INSENSITIVE, DOTALL, and UNICODE_CASE are used but can be reversed using the appropriate embedded escapes.
Source DN	Compares using semantics appropriate to the DN format for the source data store.
Destination DN	Compares using semantics appropriate to the DN format for the destination data store.
Numeric	Compares numerically.
Binary	Compares the binary information.
Structured	Compares the structured attribute according to the comparison rules for the structured syntax of the attribute.

The operators that contain the comparison mode parameter are:

• Equal

• Not Equal

• Changing To

• Changing From

• Not Changing To

• Not Changing From

• Greater Than

• Not Greater Than

• Less Than

• Not Less Than

Example

The example adds a User object to the appropriate group, Employee or Manager, based on Title. It also creates the group, if needed, and sets up security equal to that group. The policy name is Govern Groups for User Based on Title Attribute, and it is available for download from the Novell Support Web site. For more information, see Downloading Identity Manager Policies. To view the policy in XML, see 003-Command-Add-CreateGroups.xml.

The condition is checking to see if the attribute of Title is equal to .*manager*, which is a regular expression. This means that it is looking for a title that has zero or more characters before manager and a single character after manager. It would find a match if the User object’s title was sales managers.