Novell EDIRECTORY 8.8 - GUIDE, Manual

Page: 320 / 574

Understanding LDAP Services for Novell eDirectory 321
no
vd
ocx (
E
NU)
01
F
ebr
ua
ry
200
6
For example, a client can include a control that specifies a sort with the search request that it sends
to the server. When the server receives the search request, it sorts the search results before sending
the search results back to the client. Servers can also send controls to clients. For example, a server
can send a control with the authentication request that informs the client about password expiration.
By default, the eDirectory LDAP server loads all system extensions and selected optional extensions
and controls when the LDAP server starts up. The extensionInfo attribute of LDAP Server object for
optional extensions allows the system administrator to select or deselect the optional extensions and
controls.
To enable extended operations, LDAP 3 protocol requires servers to provide a list of supported
controls and extensions in the supportedControl attribute and supportedExtension attribute in the
rootDSE. RootDSE (DSA [Directory System Agent] Specific Entry) is an entry that is located at the
root of the Directory Information Tree (DIT). For more information, see
Section 13.11, “Getting
Information about the LDAP Server,” on page 370 .
For a list of supported LDAP controls and extensions, see LDAP Controls (http://
developer.novell.com/ndk/doc/ldapover/ldap_enu/data/cchbehhc.html) and LDAP Extensions
(http://developer.novell.com/ndk/doc/ldapover/ldap_enu/data/a6ik7oi.html) in the LDAP and NDS
Integration Guide .
12.3 Using LDAP Tools on Linux, Solaris, AIX, or
HP-UX
eDirectory includes the following LDAP tools, stored in
/opt/novell/eDirectory/bin
, to
help you manage the LDAP directory sever.
For more information, see LDAP Tools (http://developer.novell.com/ndk/doc/cldap/ltoolenu/data/
hevgtl7k.html) in the LDAP Libraries for C Guide .
Tool Description
ice Imports entries from a file to an LDAP directory, modifies the entries in a
directory from a file, exports the entries to a file, and adds attribute and
class definitions from a file.
ldapadd Adds new entries to an LDAP directory.
ldapdelete Deletes entries from an LDAP directory server. The ldapdelete tool
opens a connection to an LDAP server, binds, and deletes one or more
entries.
ldapmodify Opens a connection to an LDAP server, binds, and modifies or adds
entries.
ldapmodrdn Modifies the relative distinguished name (RDN) of entries in an LDAP
directory server. Opens a connection to an LDAP server, binds, and
modifies the RDN of entries.
ldapsearch Searches entries in an LDAP directory server. Opens a connection to an
LDAP server, binds, and performs a search using the specified filter.
The filter should conform to the string representation for LDAP filters as
defined in
RFC 2254 (http://www.ietf.org/rfc/rfc2254.txt) .
ndsindex Creates, lists, suspends, resumes, or deletes indexes.