Identity Manager 4.0.1 Driver for Scripting Implementation ... - NetIQ

Association Matching Rules
You can specify association matching rules in an include or exclude section. Association matching
rule expressions can specify an exact association or a limited regular expression. For details about
limited regular expressions, see “Limited Regular Expressions” on page 43.
The way associations are formed can be customized for an implementation. (See Section 5.1,
“Scripting Driver Data Definition,” on page 35 for more information.)
This example works for associations that are a concatenation of the object name and class name. To
exclude the root user, specify the following:
EXCLUDE
rootUser
ENDEXCLUDE
Single-Line Rules
[SUBSCRIBER|PUBLISHER] INCLUDE|EXCLUDE [className] objectSelection
Where objectSelection can be
{associationMatch | attributeName=expression}
Single-line rules can specify the Subscriber or Publisher channel at the start of the rule. If a channel
is specified, the rule applies only to that channel. Otherwise it applies to both channels.
You must specify whether the rule is to include or exclude the objects it matches.
You can specify a class name to limit matches to only objects of that class.
You must specify either an association or an attribute matching expression. The syntax of the
association and attribute matching expression is the same as that of association matching rules and
attribute matching rules previously described. For details, see “Association Matching Rules” on
page 43 and “Attribute Matching Rules” on page 42.
For example, to ignore events from the ADMIN user in the Identity Vault, code:
# Do not subscribe to events for the ADMIN user.
SUBSCRIBER EXCLUDE adminUser
Limited Regular Expressions
A limited regular expression is a pattern used to match a string of characters.
Character matching is case sensitive.
Any literal character matches that character.
A period (.) matches any single character.
A bracket expression is a set of characters enclosed by left ([) and right (]) brackets that matches any
listed character. Within a bracket expression, a range expression is a pair of characters separated by
a hyphen, and is equivalent to listing all of the characters that sort between the given characters,
inclusive. For example, [0-9] matches any single digit.
An asterisk (*) indicates that the preceding item is matched zero or more times.
Customizing the Scripting Driver 43