Novell EDIRECTORY 8.8 - GUIDE, Manual

Page: 322 / 574

Understanding LDAP Services for Novell eDirectory 323
no
vd
ocx (
E
NU)
01
F
ebr
ua
ry
200
6
Examples
Assume that the file /tmp/entrymods exists and has the following contents:
dn: cn=Modify Me, o=University of Michigan, c=US
changetype: modify
-D binddn Uses binddn to bind to the LDAP directory. binddn should be a string-
represented DN as defined in RFC 1779.
-e key filename Files the certificate filename for SSL bind.
-f file Reads a series of lines from file, performing one LDAP search for each line. In
this case, the filter given on the command line is treated as a pattern, where
the first occurrence of %s is replaced with a line from the file. If the file is a
single hyphen (-) character, then the lines are read from standard input.
-h ldaphost Specifies an alternate host on which the ldap server is running.
-l limit Specifies the connection timeout (in seconds).
-M Enables Manage DSA IT control. (non-critical)
-MM Enables Manage DSA IT control. (critical)
-n Shows what would be done, but does not actually modify entries. Useful for
debugging in conjunction with -v.
-p ldapport Specifies an alternate TCP
TM
port where the ldap server is listening.
-P version Specifies the LDAP version (2 or 3).
-v Uses verbose mode with many diagnostics written to standard output.
-w passwd Uses passwd as the password for simple authentication.
-W Prompts for simple authentication. This option is used instead of specifying the
password on the command line.
-Z Starts TLS before binding to perform the operation. If an error occurs during
the Start TLS operation the error is ignored and the operation continues. It is
recommended that the -ZZ option be used in place of this option to cause the
operation to abort if an error occurs.
If a port is specified with this option, it must accept clear text connections.
To verify the server identity, this option should be used in conjunction with the -
e option to specify a server certificate file. This validates the server trusted root
certificate when TLS is started. If the -e option is not specified, any certificate
from the server is accepted.
-ZZ Starts TLS before binding to perform the operation. If an error occurs during
the Start TLS operation, the operation is aborted.
If a port is specified with this option, it must accept clear text connections.
To verify server identity, this option should be used in conjunction with the -e
option to specify a server certificate file. This validates the server trusted root
certificate when TLS is started. If the -e option is not specified, any certificate
from the server is accepted.
Option Description