HP-UX AAA Server A.08.02 Administrator's Guide

◦ * /
◦ + -
• Association Rules:
Following are the association rules in decreasing order:
◦ + - left-to-right
◦ * / left-to-right
◦ - (negation) non-associative
The following example illustrates the use of arithmetic expressions.
Example 16 Using arithmetic expressions
Example 1
insert Xvalue = Xvalue + 10
insert Nas-Port = Nas-Port + Xvalue[0]
modify Xvalue = count( Framed-IP-Address[*]) + Tunnel-Type
modify Acct-Session-Time = ( Session-Timeout + Idle-Timeout ) * (Xvalue – 10 )
if( Acct-Session-Time + 10 = Session-Timeout + Idle-Timeout )
{
modify Acct-Session-Time = Acct-Session-Time / 10
}
if( count( Login-IP-Host ) * Login-TCP-Port != Xvalue * 10 )
{
insert Login-TCP-Port = Login-TCP-Port + 1
}
Supported Boolean Operators
Table 94 lists the operators you can use to create an expression with various combinations of A-V
pairs.
Table 94 Supported Boolean Operators
DescriptionOperator
Equal toThe = operator
Not equal toThe != operator
Less thanThe < operator
Less than or equal toThe <= operator
Greater thanThe > operator
Greater than or equal toThe >= operator
Logical andThe && operator
Logical orThe || operator
Logical notThe ! operator
You can also use parentheses to nest expressions.
Defining a Policy in a Decision File 317