HP-UX Directory Server 8.1 administrator guide

dns = "DNS_Hostname or dns != "DNS_Hostname
CAUTION:
The dns keyword requires that the naming service used on your machine is DNS. If the name
service is not DNS, use the ip keyword instead.
The dns keyword requires a fully qualified DNS domain name. Granting access to a host without
specifying the domain creates a potential security threat. For example, the following expression
is allowed but not recommended:
dns = "legend.eng";
Instead, use a fully qualified name:
dns = "legend.eng.example.com";
The dns keyword allows wildcards. For example:
dns = "*.example.com";
The bind rule is evaluated to be true if the client accessing the directory is located in the named
domain. This can be useful for allowing access only from a specific domain. Wildcards will not
work if your system uses a naming service other than DNS. In such a case, if you want to restrict
access to a particular domain, use the ip keyword, as described in “Defining access from a
specific IP address”.
6.4.8 Defining access at a specific time of day or day of week
You can use bind rules to specify that binding can only occur at a certain time of day or on a
certain day of the week. For example, you can set a rule that allows access only if it is between
the hours of 8 a.m. and 5 p.m. Monday through Friday. The time used to evaluate access rights
is the time on the Directory Server, not the time on the client.
The LDIF syntax for setting a bind rule based on the time of day is as follows:
timeofday operator time
Where operator can be one of the following symbols:
=
Equal to
!=
Not equal to
>
Greater than
>=
Greater than or equal to
<
Less than
<=
Less than or equal to
The timeofday keyword requires a time of day expressed in hours and minutes in the 24 hour
clock (0 to 2359).
NOTE:
The time on the Directory Server is used for the evaluation, not the time on the client.
The LDIF syntax for setting a bind rule based on the day in the week is as follows:
dayofweek = "day1, day2 ...
The possible values for the dayofweek keyword are the English three-letter abbreviations for
the days of the week: sun, mon, tue, wed, thu, fri, sat.
6.4.8.1 Examples
The following are examples of the timeofday and dayofweek syntax:
• The bind rule is evaluated to be true if the client is accessing the directory at noon.
6.4 Bind rules 253