HP UX Red Hat Direry Server Software Defining Access at a Specific Time of Day or Day of Week

Chapter 6. Managing Access Control

The bind rule is evaluated to be true if the client accessing the directory is located in the named domain. This can be useful for allowing access only from a specific domain. Wildcards will not work if your system uses a naming service other than DNS. In such a case, if you want to restrict access to a particular domain, use the ip keyword, as described in Section 4.6, “Defining Access from a Specific IP Address”.

4.8. Defining Access at a Specific Time of Day or Day of Week

You can use bind rules to specify that binding can only occur at a certain time of day or on a certain day of the week. For example, you can set a rule that allows access only if it is between the hours of 8 a.m. and 5 p.m. Monday through Friday. The time used to evaluate access rights is the time on the Directory Server, not the time on the client.

The LDIF syntax for setting a bind rule based on the time of day is as follows:

timeofday operator time

operator can be one of the following symbols:

equal to (=)

not equal to (!=) greater than (>)

greater than or equal to (>=) less than (<)

less than or equal to (<=)

The timeofday keyword requires a time of day expressed in hours and minutes in the 24 hour clock (0 to 2359).

NOTE

The time on the Directory Server is used for the evaluation, not the time on the client.

The LDIF syntax for setting a bind rule based on the day in the week is as follows:

dayofweek = "day1, day2 ...

The possible values for the dayofweek keyword are the English three-letter abbreviations for the days of the week: sun, mon, tue, wed, thu, fri, sat.

4.8.1. Examples

The following are examples of the timeofday and dayofweek syntax:

198