Table 6-10 Additional ldapsearch options (continued)

Option

Description

-S

Specifies the attribute to use as the sort criteria. For example:

 

-S sn

 

Use multiple -Sarguments to further define the sort order. In the following example, the search

 

results will be sorted first by surname, then by given name:

 

-S sn -S givenname

 

The default is not to sort the returned entries.

 

 

-T

Specifies that no line breaks should be used within individual values in the search results.

 

 

-t

Specifies that the results be written to a set of temporary files. With this option, each attribute value

 

is placed in a separate file within the system temporary directory. No base-64 encoding is performed

 

on the values, regardless of the content.

 

 

-u

Specifies that the user-friendly form of the distinguished name be used in the output.

 

 

-v

Specifies that the utility is to run in verbose mode.

 

 

-V

Specifies the LDAP version number to be used on the search. For example:

 

-V 2

 

LDAPv3 is the default. An LDAPv3 search cannot be performed against a Directory Server that

 

only supports LDAPv2.

 

 

-Y

Specifies the proxy DN to use for the search. This argument is provided for testing purposes. For

 

more information about proxied authorization, see the "Managing Access Control" chapter in the

 

HP-UX Directory Server administrator guide.

 

 

-X

Specifies the getEffectiveRightscontrol specific attribute list, where attributes are separated

 

by spaces. For example:

 

"nsroledn userPassword"

 

 

6.5 ldapmodify

The ldapmodify command makes changes to directory entries through LDAP.

“ldapmodify syntax” (page 201)

“Commonly-used ldapmodify options” (page 201)

“ldapmodify SSL options” (page 202)

“ldapmodify SASL options” (page 203)

“Additional ldapmodify options” (page 204)

6.5.1ldapmodify syntax

#ldapmodify optional_options

ldapmodify [-Dbinddn ] [ -wpasswd ] [ -acmnrvFR ] [ -ddebug_level ] [ -hhost ] [ -pport ] [ -Mauth_mechanism ] [ -Z/ZZ/ZZZ ] [ -Vversion ] [ -ffile ] [ -lnumber_of_ldap_connections ] [ entryfile ]

6.5.2 Commonly-used ldapmodify options

Table 6-11 Commonly-used ldapmodify options

Option

Description

-a

Adds LDIF entries to the directory without requiring the changetype:add LDIF update statement.

 

This provides a simplified method of adding entries to the directory. This option also allows directly

 

adding a file created by the ldapmodify command.

 

 

-B

Specifies the suffix under which the new entries will be added.

 

 

6.5 ldapmodify 201