ldapentry.1 (2010 09)

l
ldapentry(1) ldapentry(1)
base Search only the entry specified in the
-b option or defined by the LDAP_BASEDN
environment variable.
one Search only the immediate children of the entry specified in the
-b option. Only the
children is searched, the actual entry specified in the
-b option is not searched.
sub Search the entry specified in the
-b option and all of its descendants. Perform a sub-
tree search starting at the point identified in the
-b option.
This is the default.
-v Displays verbose information.
Templ ates
The
add function of ldapentry will open an entry from the template file in
/etc/opt/ldapux/ldapentry.templates
for the user to edit and add to the directory. The tem-
plate can be customized and variable references will be defined by
ldapentry on execution, if available.
Security Restriction
The LDAP administrator password is a required parameter, but for security reasons, it may not be
specified on the command line. It will be prompted for or may be specified in an environment variable,
described in Configuration Variables section below.
When adding, any sensitive information (such as
userpassword:
) will be prompted for with hidden
input after the editor is closed. However, the
modify function requires that the user enter everything
within the editor (where it will be unsecured clear-text.)
EXTERNAL INFLUENCES
The
ldapentry command also accepts options through environment variables, configuration files, and
the LDAP configuration profile.
Configuration Variables
For
ldapentry, configuration variables may be specified in the following locations (in order of pre-
cedence):
1. Local environment variables.
2. Local user
rc configuration file (˜/.ux_ldap_admin_rc
).
3. Global configuration file (
/etc/opt/ldapux/client_admin.conf
).
ldapentry will also discover configuration parameter defaults from the directory configuration profile
created by the LDAP-UX setup program, /opt/ldapux/config/setup
.
Environment variables override configuration parameters in the users
rc file. The rc file overrides the
global configuration file. The global configuration file overrides parameters from the configuration profile
stored in the directory.
Example:
With the following definition in these configuration files:
~/.ux_ldap_admin_rc LDAP_HOST=my.host.com
/etc/opt/ldapux/client_admin.conf LDAP_HOST=your.host.com
ldapentry will only use LDAP_HOST=my.host.com.
Environment Variables
The following variables may be specified as shell environment variables or in either of the above two
configuration files.
EDITOR Name of the editor that will be used when you do an add or modify (defaults to the
vi editor.)
INSERT_BASE This DN specifies to ldapentry where to insert new entries. This value will
default to LDAP_BASEDN or a default defined by the configuration profile.
INSERT_BASE is only used when adding entries.
LDAP_BASEDN The DN of the search base which specifies where ldapentry starts looking from
for the entry. If this variable has been defined, but LDAP_SCOPE was not, then
LDAP_SCOPE defaults to sub.
2 Hewlett-Packard Company − 2 − HP-UX 11i v3: June 2010 Web Release