Aruba Networks PowerConnect W Clearpass 100 Software Deployment Manual page 199

For example, to permit non-administrator users to access the system only between the hours of 8:00 am and
6:00 pm, you could define the following LDAP translation rule:
The Custom rule is:
{strip}
{if stripos($user.memberof, "CN=Administrators")!==false}
1
{elseif date('H') >= 8 && date('H') < 18}
1
{else}
0
{/if}
{/strip}
Explanation: The rule will always match on the "memberof" attribute that contains the user's list of groups.
The operator field "enabled" will determine if the user is permitted to log in or not. The custom template
uses the {strip} block function to remove any whitespace, which makes the contents of the template easier
to understand. The {if} statement first checks for membership of the Administrators group using the PHP
stripos()
Otherwise, the server's current time is checked to see if it is after 8am and before 6pm; if so, the operator
will be enabled. If neither condition has matched, the "enabled" field will be set to 0 and login will not be
permitted.
ClearPass Guest 3.9 | Deployment Guide
function for case-insensitive substring matching; if matched, the operator will be enabled.
Operator Logins | 199