ipAddress-regexp-match

[Roland Illig <roland.illig@gmx.de>]

Hi,

the specification of ipAddress-regexp-match says that the argument of
type ipAddress "SHALL be an IPv4 or IPv6 address", while the type
ipAddress also allows DNS names. So it seems that

- "www.google.com:80-443" is a valid value for type ipAddress.
- nevertheless, it cannot be used in ipAddress-regexp-match.

Is that intended? I doubt that since in XACML 2.0, there was no other
function that could process values of type ipAddress. That has changed
in XACML 3.0, where the function string-from-ipAddress uses a slightly
different wording.

Roland