Set a time-of-day restriction

Edit online

Use the pop modify set tod-access command defines the time-of-day (TOD) attribute. Use this command to place specific day and time conditions on the access to a protected object.

This type of condition might be useful to limit access to information that regularly requires periods of inactivity for modification and updates.

pdadmin sec_master> pop modify pop_name set tod-access 
time_of_day_string

The time-of-day-string argument includes a day-range and a time-range and uses the following format:

{anyday|weekday|day_list}:
{anytime|time_spec-time_spec}
[:{utc|local}]

The day_list variable can be any combination of the following values:

mon, tue, wed, thu, fri, sat, sun

The time_spec range variable must be expressed (in 24 hour time) in the following format:

hhmm-hhmm

For example, you can specify the time range with the following string:

0700-1945

The optional time zone [:{utc|local}] for the server (not the client) is local by default.

For example to change the time-of-day attribute to Monday, Tuesday, and Friday from 1:15 p.m. to 5:30 p.m. local time for the POP named poptest1, enter the following command:

pdadmin sec_master> pop modify poptest1 set tod-access mon,tue,fri:1315-1730

Note: When modifying a protected object policy, you provide a list of days, start time, and end time. The start time and end time apply to each day on the list. If the specified start time is greater than the specified end time, then the access is allowed until the specified end time of the next day.

See IBM Verify Identity Access for Web: Command Reference.