Internet Express for Tru64 UNIX Version 6.8 Administration Guide (14233)

Note:
The input must be in group(4) format.
4.4.8 Maintaining Group Membership
Use the ldap_mod_group utility to add or remove users from groups in the LDAP database.
The ldap_mod_group utility adds the specified login names to the specified group as group
members. Use the -r option to remove the specified login names from the group member list.
If a problem is encountered when modifying group membership in the LDAP database, the
ldap_mod_group utility returns an exit code greater than 0.
For a description of the options you can use with this utility, see Table 4-2.
For example, to add one or more users to a group:
ldap_mod_group group logname [ logname ...]
To remove one or more users from a group:
ldap_mod_group -r group logname [ logname ...]
To remove a user from all groups:
ldap_mod_group -R logname
4.4.9 Deleting a Group Entry
Use the ldap_del_group utility to delete one or more groups from the LDAP directory server.
The ldap_del_group utility works in a similar fashion to ldap_add_group, except that groups
are removed, rather than added, to the directory server.
If a problem is encountered when deleting a group from the LDAP directory server, the
ldap_del_group utility returns an exit code greater than 0.
For a description of the options you can use with this utility, see Table 4-2.
For example, to delete groups from the command line:
ldap_del_group groupname [ groupname ... ]
To remove groups specified in a file:
ldap_del_group -f filename
To remove groups specified by stdin:
cat filename | ldap_del_group -f -
Notes:
The input must be in group(4) format, but only the group name will be used.
A list of group names (one per line) is also acceptable as input.
4.4.10 Retrieving a Group Entry
Use the ldap_get_group utility to retrieve group(4) entries for selected groups in the LDAP
directory server. Unless otherwise specified, the ldap_get_group utility selects all groups on
the default group branch or search base. Use the -s option to select a subset of users (see
Table 4-2).
If a problem is encountered when retrieving a group from the LDAP directory server, the
ldap_get_group utility returns an exit code greater than 0.
For a description of the options you can use with this utility, see Table 4-2.
For example, to retrieve all groups:
ldap_get_group [ -b branch ] [ -f input-file ]
88 User Authentication