Internet Express for Tru64 UNIX Version 6.8 Administration Guide (14233)

Table 4-2 LDAP Database Utilities (continued)
DescriptionOptionsProgram Name
Gets group entries from the LDAP
directory server. By default,
selects all groups on the default
group branch or search base. Use
the -s option to select a subset of
group.
-b branch – Branch to get groups from.
-f output-file – Specifies the name of the output
file in which to store search results (the default is
stdout).
-s searchfilter – Specifies an optional LDAP
search filter to select the group entries to output.
-S searchfilter – Specifies an optional LDAP
search filter to select the group entries to output.
Differs from the -s option in that the provided filter
is wrapped within a filter that adds an object class
restriction on the query.
-R start[-end] – Specifies a range of group IDs
to be retrieved, including the endpoints. If you do
not specify the -end portion of the range, then all
groups greater than or equal to the start value are
retrieved.
ldap_get_group
Starts the ldapcd daemon and
configures SIA to use the LDAP
authentication mechanism.
None.
ldap_enable
Stops the ldapcd daemon and
configures SIA to not use the
LDAP authentication mechanism.
None.
ldap_disable
Extracts users from the specified
input file (/etc/passwd is the
default). Specify users to be
extracted by name (as parameters
to the passwd_extract
command) or by using one or
more options in any combination.
-f output-file – Specifies the output file in which
to store
passwd entries that match the selection criteria (the
default is stdout).
-g range – Extracts passwd entries that match the
specified range of GIDs. Use commas and/or hyphens
to separate the range values (for example, 23,
40-49).
-i input-file – Specifies the file from which to
extract users (the default is /etc/passwd).
-r output-file – Specifies the output file in which
to store
passwd entries that do not match the selection criteria
(that is, the remaining passwdentries after extracting
matching entries).
-u range – Extracts passwd entries that match the
specified range of UIDs. Use commas and/or hyphens
to separate the range values (for example, 350,
400-1000).
-v – Verbose output.
passwd_extract
[username ...]
4.4.1 Checking the LDAP Server Configuration
The ldap_check utility validates the contents of the ./ldapcd.conf or /etc/ldapcd.conf
file as follows:
• Verifies that the specified directory servers are running and that connections to the servers
can be made
84 User Authentication