Chapter 19   Actions Configuration


Action objects are used to specify actions to take if an event evaluates to TRUE. This chapter contains the following sections:

• ids-proxy-sch-Action Object Class

• ids-proxy-sch-ChangeGroupAction Object Class

ids-proxy-sch-Action Object Class

---

This object class defines the action object attributes. It contains the following attributes.

ids-proxy-con-Name

The ids-proxy-con-Name attribute specifies the name of the action. This attribute value must be unique within the set of actions. This attribute must be present as it forms the RDN of entries of this class.

ids-proxy-con-Priority

The ids-proxy-con-Priority attribute is reserved for future versions of this product.

ids-proxy-sch-Enable

The ids-proxy-sch-Enable attribute specifies if this object entry is part of the configuration or not. For an entry to be part of the iDAR configuration, the ids-proxy-sch-Enable attribute must be present with a value TRUE. If the ids-proxy-sch-Enable attribute is not present or has the value FALSE, the entry is ignored.

ids-proxy-sch-belongs-to

This is a multi-valued attribute that specifies which server configuration(s) this object entry belongs to. Each value of this attribute should be the value of the ids-proxy-con-server-Name attribute in the ids-proxy-sch-LDAPProxy object entry.

ids-proxy-sch-ChangeGroupAction Object Class

---

This object class is sub-classed from the ids-proxy-sch-Action object class. It can be used to specify the groups to which a client can change. It has the following multi-valued attribute.

ids-proxy-con-to-group

The ids-proxy-con-to-group specifies the group to which the client can change. It has the following syntax:

( <group-name>|NONE )

#<normal-DN-regexp>#<precedence>

group-name: The value of ids-proxy-con-Name attribute from a ids-proxy-sch-Group object entry. The special value NONE indicates no change is to be made.

normal-DN-regexp: The clients DN must match this regular expression. This regular expression must be normalized, i.e., there should be no spaces in between RDN components and "=" sign, all attribute names must be capitalized, and attribute values with cis syntax must be capitalized.

precedence: This must be a positive integer. This determines the order in which the change of group will be tried. ids-proxy-con-to-group value with higher value will be tried first.

For example, if you want all clients who have cn=manager as their least significant RDN component in their bind DN, into the manager group and not do anything with other bind credentials, you must specify the following:

ids-proxy-con-to-group: manager#CN=MANAGER,.*#100
ids-proxy-con-to-group: NONE#.*#10

The following book can be used as a reference on regular expressions: Mastering Regular Expressions, by Friedl and Oram, published by O'Reilly, ISBN: 1565922573.