Hello,

I am attempting to match from a policy in the following way:

Matching rule:

Match on attribute A with a specific value, and also attribute B with a
specific value, and also attribute C, which must not be there. Not
empty, but not there at all.

The object passing through the driver, does actually have a value for C,
but it must only match, if attribute C in IDV is empty.

Explanation for this:

I have 1 object in IDV:

Object:

Attribute A value in IDV: "12345"
Attribute B value in IDV: "abcde"
Attribute C value in IDV: "hello"

So when this passes through the driver, on the publisher channel, it
matches on all 3 attributes and a match is found.

If no match is found in this rule, it goes on to the next matching rule,
which will try to match on A and B and if C is empty in IDV.

Object 2:

Attribute A value in IDV: "12345"
Attribute B value in IDV: "abcde"
Attribute C value in IDV: EMPTY

So when this object passes through the driver, attribute C DOES have a
value, but I want it to find object 2, even through it is empty, and it
MUST be empty, it cannot have another value. It is empty, because it is
missing the value which is coming from the system.

I am unable to make a matching rule, that will do this. I have tried the
following:

1. Specify Other Value, string and then nothing on the "specify string"
option.
2. Specify Other Value, string and then an empty string on the "specify
string" option.
3. Create an empty local variable, which i match on.

It seems like it wants to match on an empty string, no matter what, and
it is not an empty string in IDV, the attribute is not there at all.

How can I do this? Should I go another way entirely?

Thanks in advance,

Jacob.


--
jacmarpet
------------------------------------------------------------------------
jacmarpet's Profile: https://forums.netiq.com/member.php?userid=415
View this thread: https://forums.netiq.com/showthread.php?t=56221