Internet Express for Tru64 UNIX Version 6.8 Administration Guide (14233)

Table 4-2 LDAP Database Utilities (continued)
DescriptionOptionsProgram Name
Deletes a user from the LDAP
directory server. You can specify
users on the command line, in a
file, or from stdin (with -f -).
-b branch – Branch to delete users from.
-f input-file Specifies an input file containing
login names.
-n – Do not submit.
-v – Verbose output.
ldap_del_user
Retrieves entries selected from the
LDAP directory server for
specified users. By default, this
program selects all users on the
default user branch or search
base.
-b branch – Branch to get users from.
-s searchfilter – Specifies an optional LDAP
search filter to select the password entries to output.
-S searchfilter – Specifies an optional LDAP
search filter to select the password entries to output.
Differs from the -s option in that the provided filter
is wrapped within a filter that adds an object class
restriction on the query.
-R start[-end] – Specifies a range of user IDs to
be retrieved, including the endpoints. If you do not
specify the -end portion of the range, then all users
greater than or equal to the start value are
retrieved.
-f output-file Specifies the name of the output
file in which to store search results (default is
stdout).
ldap_get_user
Synchronizes the users in the
directory server with the provided
input which is in passwd format.
-b branch – Branch to add users to; should be a
full distinguished name, including the search base
-n – Do not submit
-v – Verbose output.
-C – Do not create/modify the CN attribute
ldap_sync_user
Adds a group to the LDAP
directory server. Can be used on
the command line, from a file, or
from stdin.
-b branch – Branch to which to add group.
-n – Do not submit.
-m – Modify existing entry.
-v – Verbose output.
ldap_add_group
Assigns the listed login names to
the specified group. Use the -r
option to remove the specified
login names from the group or the
-R option to remove login names
from all groups.
-b branch Branch in which groups to be modified
reside.
-r – Remove login names from specified group.
-R – Remove login names from all groups.
ldap_mod_group
Deletes a group from the LDAP
directory server. Can be used on
the command line, from a file, or
from stdin.
-b branch – Branch from which to delete groups.
-n – Do not submit.
-v – Verbose output.
ldap_del_group
4.4 Utilities for Maintaining User Information in the LDAP Directory Server 83