Example LDAP commands - Revision history

Hutch at 22:17, 19 February 2008

Hutch — Tue, 19 Feb 2008 22:17:57 GMT

←Older revision		Revision as of 22:17, 19 February 2008
Line 26:		Line 26:
	$ '''ldapsearch -h ''LDAP_server'' -D "cn=Directory Manager" -b "" -s base "(objectClass=*)" aci'''		$ '''ldapsearch -h ''LDAP_server'' -D "cn=Directory Manager" -b "" -s base "(objectClass=*)" aci'''

-	* Display the root Directory Server Entry (DSE). This is a good LDAP connectivity ~~test~~ and ~~sanity check~~, as the root DSE has to be available via anonymous bind.	+	* Display the root Directory Server Entry (DSE). This is a good test of LDAP connectivity and basic functionality of the Directory Server, as the root DSE has to be available via anonymous bind.
	$ '''ldapsearch -h ''LDAP_server'' -s base -b "" "objectClass=*"'''		$ '''ldapsearch -h ''LDAP_server'' -s base -b "" "objectClass=*"'''

Hutch at 22:15, 19 February 2008

Hutch — Tue, 19 Feb 2008 22:15:33 GMT

←Older revision		Revision as of 22:15, 19 February 2008
Line 26:		Line 26:
	$ '''ldapsearch -h ''LDAP_server'' -D "cn=Directory Manager" -b "" -s base "(objectClass=*)" aci'''		$ '''ldapsearch -h ''LDAP_server'' -D "cn=Directory Manager" -b "" -s base "(objectClass=*)" aci'''

-	* Display the root Directory Server Entry (DSE). This is a good LDAP connectivity test, as the root DSE has to be available via anonymous bind.	+	* Display the root Directory Server Entry (DSE). This is a good LDAP connectivity test and sanity check, as the root DSE has to be available via anonymous bind.
	$ '''ldapsearch -h ''LDAP_server'' -s base -b "" "objectClass=*"'''		$ '''ldapsearch -h ''LDAP_server'' -s base -b "" "objectClass=*"'''

Hutch at 22:11, 19 February 2008

Hutch — Tue, 19 Feb 2008 22:11:00 GMT

←Older revision		Revision as of 22:11, 19 February 2008
Line 25:		Line 25:
	* View the default root level ACIs.		* View the default root level ACIs.
	$ '''ldapsearch -h ''LDAP_server'' -D "cn=Directory Manager" -b "" -s base "(objectClass=*)" aci'''		$ '''ldapsearch -h ''LDAP_server'' -D "cn=Directory Manager" -b "" -s base "(objectClass=*)" aci'''
		+
		+	* Display the root Directory Server Entry (DSE). This is a good LDAP connectivity test, as the root DSE has to be available via anonymous bind.
		+	$ '''ldapsearch -h ''LDAP_server'' -s base -b "" "objectClass=*"'''

	=== Changing an LDAP UID ===		=== Changing an LDAP UID ===

Hutch at 17:21, 25 January 2008

Hutch — Fri, 25 Jan 2008 17:21:51 GMT

←Older revision		Revision as of 17:21, 25 January 2008
Line 22:		Line 22:

	$ '''ldapsearch -h ''LDAP_server'' -D "cn=Directory Manager" -b ou=profile,dc=example,dc=com cn=proxyagent passwordExpirationTime'''		$ '''ldapsearch -h ''LDAP_server'' -D "cn=Directory Manager" -b ou=profile,dc=example,dc=com cn=proxyagent passwordExpirationTime'''
		+
		+	* View the default root level ACIs.
		+	$ '''ldapsearch -h ''LDAP_server'' -D "cn=Directory Manager" -b "" -s base "(objectClass=*)" aci'''

	=== Changing an LDAP UID ===		=== Changing an LDAP UID ===

Hutch at 18:14, 14 December 2007

Hutch — Fri, 14 Dec 2007 18:14:26 GMT

←Older revision		Revision as of 18:14, 14 December 2007
Line 9:		Line 9:

	* To display the ''userPassword'' attribute with ''pam_ldap'' authentication for ''uid=hutchib'':		* To display the ''userPassword'' attribute with ''pam_ldap'' authentication for ''uid=hutchib'':
-	$ '''ldapsearch -D "cn=Directory Manager" -w ''Directory_Manager_password -h ''LDAP_server'' -b ou=people,dc=example,dc=com uid=hutchib userPassword'''	+	$ '''ldapsearch -D "cn=Directory Manager" -w ''Directory_Manager_password'' -h ''LDAP_server'' -b ou=people,dc=example,dc=com uid=hutchib userPassword'''

	* Two ways to delete an LDAP client profile named ''cn=default,ou=profile,dc=example,dc=com'':		* Two ways to delete an LDAP client profile named ''cn=default,ou=profile,dc=example,dc=com'':

Hutch at 18:14, 14 December 2007

Hutch — Fri, 14 Dec 2007 18:14:00 GMT

←Older revision		Revision as of 18:14, 14 December 2007
Line 7:		Line 7:
	* To test the ''proxyagent'' password:		* To test the ''proxyagent'' password:
	$ '''ldapsearch -D "cn=proxyagent,ou=profile,dc=example,dc=com" -w ''password'' -b dc=example,dc=com objectclass=\*'''		$ '''ldapsearch -D "cn=proxyagent,ou=profile,dc=example,dc=com" -w ''password'' -b dc=example,dc=com objectclass=\*'''
		+
		+	* To display the ''userPassword'' attribute with ''pam_ldap'' authentication for ''uid=hutchib'':
		+	$ '''ldapsearch -D "cn=Directory Manager" -w ''Directory_Manager_password -h ''LDAP_server'' -b ou=people,dc=example,dc=com uid=hutchib userPassword'''

	* Two ways to delete an LDAP client profile named ''cn=default,ou=profile,dc=example,dc=com'':		* Two ways to delete an LDAP client profile named ''cn=default,ou=profile,dc=example,dc=com'':

Hutch at 18:07, 14 December 2007

Hutch — Fri, 14 Dec 2007 18:07:10 GMT

←Older revision		Revision as of 18:07, 14 December 2007
Line 4:		Line 4:
	* To list LDAP client profiles on LDAP server:		* To list LDAP client profiles on LDAP server:
	$ '''ldapsearch -h ''LDAP_server'' -D "cn=Directory Manager" -b "ou=profile,dc=example,dc=com" "objectClass=*"'''		$ '''ldapsearch -h ''LDAP_server'' -D "cn=Directory Manager" -b "ou=profile,dc=example,dc=com" "objectClass=*"'''
		+
		+	* To test the ''proxyagent'' password:
		+	$ '''ldapsearch -D "cn=proxyagent,ou=profile,dc=example,dc=com" -w ''password'' -b dc=example,dc=com objectclass=\*'''

	* Two ways to delete an LDAP client profile named ''cn=default,ou=profile,dc=example,dc=com'':		* Two ways to delete an LDAP client profile named ''cn=default,ou=profile,dc=example,dc=com'':

Hutch at 16:24, 18 October 2007

Hutch — Thu, 18 Oct 2007 16:24:56 GMT

←Older revision		Revision as of 16:24, 18 October 2007
Line 1:		Line 1:
-	To list the password policy on Sun Directory Server 5.2 and later:	+	* To list the password policy on Sun Directory Server 5.2 and later:
	$ '''ldapsearch -h ''LDAP_server'' -D "cn=Directory Manager" -b "cn=Password Policy,cn=config" "objectClass=*"'''		$ '''ldapsearch -h ''LDAP_server'' -D "cn=Directory Manager" -b "cn=Password Policy,cn=config" "objectClass=*"'''

-	To list LDAP client profiles on LDAP server:	+	* To list LDAP client profiles on LDAP server:
	$ '''ldapsearch -h ''LDAP_server'' -D "cn=Directory Manager" -b "ou=profile,dc=example,dc=com" "objectClass=*"'''		$ '''ldapsearch -h ''LDAP_server'' -D "cn=Directory Manager" -b "ou=profile,dc=example,dc=com" "objectClass=*"'''

-	Two ways to delete an LDAP client profile named ''cn=default,ou=profile,dc=example,dc=com'':	+	* Two ways to delete an LDAP client profile named ''cn=default,ou=profile,dc=example,dc=com'':
	$ '''/usr/bin/printf "cn=default,ou=profile,dc=example,dc=com\n" \| ldapdelete -h ''LDAP_server'' -D "cn=Directory Manager"'''		$ '''/usr/bin/printf "cn=default,ou=profile,dc=example,dc=com\n" \| ldapdelete -h ''LDAP_server'' -D "cn=Directory Manager"'''
	$ '''/usr/bin/printf "dn: cn=default,ou=profile,dc=example,dc=com\nchangetype: delete" \| ldapmodify -h ''LDAP_server'' -D "cn=Directory Manager"'''		$ '''/usr/bin/printf "dn: cn=default,ou=profile,dc=example,dc=com\nchangetype: delete" \| ldapmodify -h ''LDAP_server'' -D "cn=Directory Manager"'''

-	Modifying the ''defaultServerList'' attribute in the ''simple'' LDAP client profile:	+	* Modifying the ''defaultServerList'' attribute in the ''simple'' LDAP client profile:

	$ '''/usr/bin/printf "dn: cn=simple,ou=profile,dc=example,dc=com\nchangetype: modify\nreplace: defaultServerList\ndefaultServerList: 192.168.1.100 192.168.1.101\n" \| ldapmodify -h ''LDAP_server'' -D "cn=Directory Manager"'''		$ '''/usr/bin/printf "dn: cn=simple,ou=profile,dc=example,dc=com\nchangetype: modify\nreplace: defaultServerList\ndefaultServerList: 192.168.1.100 192.168.1.101\n" \| ldapmodify -h ''LDAP_server'' -D "cn=Directory Manager"'''

-	When does my ''proxyagent'' user password expire?	+	* When does my ''proxyagent'' user password expire?

	$ '''ldapsearch -h ''LDAP_server'' -D "cn=Directory Manager" -b ou=profile,dc=example,dc=com cn=proxyagent passwordExpirationTime'''		$ '''ldapsearch -h ''LDAP_server'' -D "cn=Directory Manager" -b ou=profile,dc=example,dc=com cn=proxyagent passwordExpirationTime'''

Hutch: /* Changing an LDAP UID */

Hutch — Fri, 05 Oct 2007 13:50:42 GMT

Changing an LDAP UID

←Older revision		Revision as of 13:50, 5 October 2007
Line 36:		Line 36:
	''ldapmodrdn'' takes as its arguments the DN of the entry to rename and the new RDN. The ''-r'' flag removes the old RDN, which would have been kept by default.		''ldapmodrdn'' takes as its arguments the DN of the entry to rename and the new RDN. The ''-r'' flag removes the old RDN, which would have been kept by default.
	$ '''ldapmodrdn -r -h ''LDAP_server'' -D "cn=Directory Manager"'''		$ '''ldapmodrdn -r -h ''LDAP_server'' -D "cn=Directory Manager"'''
-	'''~~dn:~~ uid=old_uid,ou=people,dc=example,dc=com'''	+	'''uid=old_uid,ou=people,dc=example,dc=com'''
	'''uid=new_uid'''		'''uid=new_uid'''
	'''<Ctrl-D>'''		'''<Ctrl-D>'''

Hutch: /* Changing an LDAP UID */

Hutch — Tue, 25 Sep 2007 18:06:50 GMT

Changing an LDAP UID

←Older revision		Revision as of 18:06, 25 September 2007
Line 49:		Line 49:
	'''replace: homeDirectory'''		'''replace: homeDirectory'''
	'''homeDirectory: /home/new_uid'''		'''homeDirectory: /home/new_uid'''
		+	'''<Ctrl-D>'''