Chapter 18   Events Configuration


Event objects are used to specify conditions that are evaluated by iPlanet Directory Access Router (iDAR) at predetermined states. If these conditions are satisfied, then iDAR could optionally take certain actions as defined in the chapter on Actions.

This chapter contains the following sections:

• ids-proxy-sch-Rule Object Class

• ids-proxy-sch-OnBindSuccessRule Object Class

• ids-proxy-sch-OnSSLEstablishedRule Object Class

ids-proxy-sch-Rule Object Class

---

This object class defines the event object attributes. It contains the following attributes.

ids-proxy-con-Name

The ids-proxy-con-Name attribute specifies the name of the event. This attribute value must be unique within the set of events. This attribute must be present as it forms the RDN of entries of this class.

ids-proxy-con-Priority

The ids-proxy-con-Priority attribute specifies the order of evaluation, and is reserved for future versions of this product.

ids-proxy-sch-Enable

The ids-proxy-sch-Enable attribute specifies if this object entry is part of the configuration or not. For an entry to be part of iDAR configuration, the ids-proxy-sch-Enable attribute must be present with a value TRUE. If the ids-proxy-sch-Enable attribute is not present or has the value FALSE, the entry is ignored.

ids-proxy-sch-belongs-to

This is a multi-valued attribute that specifies which server configuration(s) this object entry belongs to. Each value of this attribute should be the value of the ids-proxy-con-server-name attribute in the ids-proxy-sch-LDAPProxy object entry.

ids-proxy-con-execute

The ids-proxy-con-execute is a multi-valued attribute that specifies the actions to take if the event evaluates to TRUE. If this action does not exist then no actions will be taken. The ids-proxy-con-execute attribute has the following syntax:

<action-name>#<precedence>

The action-name part is the value of the ids-proxy-con-Name attribute in the ids-proxy-sch-Action object entry that is to be executed.

The precedence part is a positive integer. This integer determines the order of execution of the actions. Actions with higher precedence are executed first. If two actions have the same precedence, their order of execution is undefined.

ids-proxy-sch-OnBindSuccessRule Object Class

---

This object class is sub-classed from the ids-proxy-sch-Rule object class. This event is evaluated when a client successfully completes a bind operation.

ids-proxy-con-ssl-required

If the ids-proxy-con-ssl-required attribute is set to TRUE then the ids-proxy-sch-OnBindSuccessrule event will evaluate to true only if the client has established an SSL session with iDAR. The default is FALSE.

ids-proxy-con-bind-anonymous

If the ids-proxy-con-bind-anonymous attribute is set to TRUE then the ids-proxy-sch-OnBindSuccessrule event will evaluate to true when the condition in ids-proxy-con-ssl-required is satisfied and the client has just completed a successful anonymous bind.

ids-proxy-con-bind-simple

If the ids-proxy-con-bind-simple attribute is set to TRUE then the ids-proxy-sch-OnBindSuccessrule event will evaluate to true when the condition in ids-proxy-con-ssl-required is satisfied and the client has just completed a successful password-based bind.

ids-proxy-con-bind-sasl

If the ids-proxy-con-bind-sasl attribute is set to TRUE then the ids-proxy-sch-OnBindSuccessrule event will evaluate to true when the condition in ids-proxy-con-ssl-required is satisfied and the client has just completed a successful bind using any SASL mechanism.

ids-proxy-sch-OnSSLEstablishedRule Object Class

---

This object class is sub-classed from the ids-proxy-sch-Rule object class. This event is evaluated when a client successfully establishes an SSL session. This event does not have any attributes.