Novell EDIRECTORY 8.8 SP3, Administration Manual, Page: 333 / 634

Understanding LDAP Services for Novell eDirectory 333
n
ov
do
cx (e
n)
11
Ju
ly 20
08
By default, the eDirectory LDAP server loads all system extensions and selected optional extensions
and controls when the LDAP server starts up. The extensionInfo attribute of LDAP Server object for
optional extensions allows the system administrator to select or deselect the optional extensions and
controls.
To enable extended operations, LDAP 3 protocol requires servers to provide a list of supported
controls and extensions in the supportedControl attribute and supportedExtension attribute in the
rootDSE. RootDSE (DSA [Directory System Agent] Specific Entry) is an entry that is located at the
root of the Directory Information Tree (DIT). For more information, see
Section 14.10, “Getting
Information about the LDAP Server,” on page 385 .
For a list of supported LDAP controls and extensions, see LDAP Controls (http://
developer.novell.com/ndk/doc/ldapover/ldap_enu/data/cchbehhc.html) and LDAP Extensions
(http://developer.novell.com/ndk/doc/ldapover/ldap_enu/data/a6ik7oi.html) in the LDAP and NDS
Integration Guide .
13.3 Using LDAP Tools on Linux, Solaris, or AIX
eDirectory includes the following LDAP tools, stored in
/opt/novell/eDirectory/bin
, to
help you manage the LDAP directory sever.
For more information, see LDAP Tools (http://developer.novell.com/ndk/doc/cldap/ltoolenu/data/
hevgtl7k.html) in the LDAP Libraries for C Guide .
To perform secure LDAP tools operations, refer to “Ensuring Secure eDirectory Operations on
Linux, Solaris, and AIX Systems” on page 87 and include the DER file in all command line LDAP
operations that establish secure LDAP connections to eDirectory.
Tool Description
ice Imports entries from a file to an LDAP directory, modifies the entries in a
directory from a file, exports the entries to a file, and adds attribute and
class definitions from a file.
ldapadd Adds new entries to an LDAP directory.
ldapdelete Deletes entries from an LDAP directory server. The ldapdelete tool
opens a connection to an LDAP server, binds, and deletes one or more
entries.
ldapmodify Opens a connection to an LDAP server, binds, and modifies or adds
entries.
ldapmodrdn Modifies the relative distinguished name (RDN) of entries in an LDAP
directory server. Opens a connection to an LDAP server, binds, and
modifies the RDN of entries.
ldapsearch Searches entries in an LDAP directory server. Opens a connection to an
LDAP server, binds, and performs a search using the specified filter.
The filter should conform to the string representation for LDAP filters as
defined in
RFC 2254 (http://www.ietf.org/rfc/rfc2254.txt) .
ndsindex Creates, lists, suspends, resumes, or deletes indexes.