if-dest-attr

Performs a test on attribute values of the current object in the destination data store. The type of test performed depends on the operator specified by the op attribute. The table below shows the type of test performed by each operator.

Remarks

Operator	Returns true when...
available	There is a value available in the destination data store for the specified attribute.
equal	There is a value available for the specified attribute in the destination data store that equals the content of <if-dest-attr> when compared using the specified comparison mode. If mode=“structured” then the content must be a set of <component> elements otherwise, it must be text. Supports variable expansion.
lt	There is a value available for the specified attribute in the destination data store that is less than the content of the condition when compared using the specified comparison mode. If mode=“structured” then the content must be a set of <component> elements, otherwise it must be text. Supports variable expansion.
gt	There is a value available for the specified attribute in the destination data store that is greater than the content of the condition when compared using the specified comparison mode. If mode=“structured” then the content must be a set of <component> elements, otherwise it must be text. Supports variable expansion.
not-associated	Associated returns false.
not-available	Available returns false.
not-equal	Equal returns false.
not-lt	Less than returns false.
not-gt	Greater than returns false.

Example

<if-dest-attr op="available" name="OU"/><if-dest-attr op="equal" mode="nocase" name="OU">Sales</if-dest-attr><if-dest-attr op="equal" mode="structured" name="Language"> <component name="string">EN</component> <component name="string">JP</component></if-dest-attr >

Allowed Content

#PCDATA

Attributes

Attribute	Possible Values	Default Value
disabled	true \| false True if this element is disabled.	false
mode	case \| nocase \| regex \| src-dn \| dest-dn \| numeric \| octet \| structured Comparison mode if op=“equal” or op=”not-equal”	nocase
name	CDATA Name of the attribute. Supports variable expansion.	#REQUIRED
notrace	true \| false True if this element should not be traced during execution of the policy.	false
op	available \| equal \| lt \| gt \| not-available \| not-equal \| not-lt \| not-gt Test operator.	#REQUIRED

Content Rule

( #PCDATA | component ) *

Parent Elements

Element	Description
and	Logical conjunction.
or	Logical disjunction.