Table 5 LDAP Database Utilities (continued)

Program Name

Options

Description

ldap_mod_group

-bbranch – Branch in which groups to be modified

Assigns the listed login names to

 

reside.

the specified group. Use the -r

 

-r– Remove login names from specified group.

option to remove the specified

 

login names from the group or the

 

-R– Remove login names from all groups.

 

-Roption to remove login names

 

 

from all groups.

 

 

 

ldap_del_group

-bbranch – Branch from which to delete groups.

 

-n– Do not submit.

 

-v– Verbose output.

Deletes a group from the LDAP directory server. Can be used on the command line, from a file, or from stdin.

ldap_get_group

-bbranch – Branch to get groups from.

 

-foutput-file– Specifies the name of the output

 

file in which to store search results (the default is

 

stdout).

 

-ssearchfilter – Specifies an optional LDAP

 

search filter to select the group entries to output.

 

-Ssearchfilter – Specifies an optional LDAP

 

search filter to select the group entries to output. Differs

 

from the -soption in that the provided filter is

 

wrapped within a filter that adds an object class

 

restriction on the query.

 

-Rstart[-end]– Specifies a range of group IDs

 

to be retrieved, including the endpoints. If you do not

 

specify the -endportion of the range, then all groups

 

greater than or equal to the start value are

 

retrieved.

Gets group entries from the LDAP directory server. By default, selects all groups on the default group branch or search base. Use the -soption to select a subset of group.

ldap_enable

None.

Starts the ldapcd daemon and

 

 

configures SIA to use the LDAP

 

 

authentication mechanism.

 

 

 

ldap_disable

None.

Stops the ldapcd daemon and

 

 

configures SIA to not use the LDAP

 

 

authentication mechanism.

 

 

 

passwd_extract

-foutput-file– Specifies the output file in which

[username ...]

to store

 

passwd entries that match the selection criteria (the

 

default is stdout).

 

-grange – Extracts passwd entries that match the

 

specified range of GIDs. Use commas and/or hyphens

 

to separate the range values (for example, 23,

 

40-49).

 

-iinput-file– Specifies the file from which to

 

extract users (the default is /etc/passwd).

 

-routput-file– Specifies the output file in which

 

to store

 

passwd entries that do not match the selection criteria

 

(that is, the remaining passwdentries after extracting

 

matching entries).

 

-urange – Extracts passwd entries that match the

 

specified range of UIDs. Use commas and/or hyphens

 

to separate the range values (for example, 350,

 

400-1000).

 

-v– Verbose output.

Extracts users from the specified input file (/etc/passwd is the default). Specify users to be extracted by name (as parameters to the passwd_extract command) or by using one or more options in any combination.

80 User Authentication