Hi Roland,
I don't understand what you mean. Is it that you interpret the wording
of the function definition to mean that only a subset of the legal
values for an ipAddress data type are allowed for the function? I don't
think that is intended.
Regards,
Erik
Roland Illig wrote:
> Hi,
>
> the specification of ipAddress-regexp-match says that the argument of
> type ipAddress "SHALL be an IPv4 or IPv6 address", while the type
> ipAddress also allows DNS names. So it seems that
>
> - "www.google.com:80-443" is a valid value for type ipAddress.
> - nevertheless, it cannot be used in ipAddress-regexp-match.
>
> Is that intended? I doubt that since in XACML 2.0, there was no other
> function that could process values of type ipAddress. That has changed
> in XACML 3.0, where the function string-from-ipAddress uses a slightly
> different wording.
>
> Roland
>
>
