Performs a test on attribute values of the current object in the destination data store. The test performed depends on the specified operator.
Specify the name of the attribute to test.
Select the condition test type.
Contains the value defined for the selected operator. The value is used by the condition. Each value supports variable expansion. For more information, see Variable Expansion. The operators that contain the value field are:
Equal
Not Equal
Not Greater Than
Less Than
Not Less Than
Some condition tests have a mode parameter that indicates how the comparison is done.
Mode |
Description |
---|---|
Case Sensitive |
Character-by-character case sensitive comparison. |
Case Insensitive |
Character-by-character case insensitive comparison. |
Regular Expression |
The regular expression matches the entire string. It defaults to case insensitive, but can be changed by an escape in the expression. See Sun’s Web site. The pattern options CASE_INSENSITIVE, DOTALL, and UNICODE_CASE are used but can be reversed using the appropriate embedded escapes. |
Source DN |
Compares using semantics appropriate to the DN format for the source data store. |
Destination DN |
Compares using semantics appropriate to the DN format for the destination data store. |
Numeric |
Compares numerically. |
Binary |
Compares the binary information. |
Structured |
Compares the structured attribute according to the comparison rules for the structured syntax of the attribute. |
The operators that contain the comparison mode parameter are:
Equal
Not Equal
Not Greater Than
Less Than
Not Less Than
The example uses the condition If Attribute to govern group membership for a User object based on the title. The policy is Govern Groups for User Based on Title Attribute, and it is available for download from the Novell Support Web site. For more information, see
Downloading Identity Manager Policies
in
Understanding Policies for Identity Manager 3.5.1
. To view the policy in XML, see
004-CommandGroupChangeOnTitleChange.xml.
The policy checks to see if the value of the title attribute contains manager.