Red Hat 8.1, Command Reference Manual

Page: 275 / 372

ldapdelete
261
Option Description
-g
Specifies that the password policy request
control not be sent with the bind request.
By default, the new LDAP password policy
request control is sent with bind requests.
The
ldapdelete
tool can parse and display
information from the response control if it is
returned by a server; that is, the tool will print
an appropriate error or warning message when
a server sends the password policy response
control with the appropriate value. The criticality
of the request control is set to
false
to ensure
that all LDAPv3 servers that do not understand
the control can ignore it. To suppress sending of
the request control with the bind request, include
-g
on the command-line.
-h
Specifies the name of the host on which the
server is running. For example:
-h cyclops
The default is
localhost
.
-p
Specifies the port number that the server uses.
The default is
389
. If
-Z
is used, the default is
636
.
-w
Specifies the password associated with the
distinguished name specified in the
-D
option.
For example:
-w mypassword
The default is
""
, or anonymous. If a password
is not sent on the command line and the server
requires one, the command prompts for one.
It is more secure not to provide a password on
the command line so that it does not show up in
clear text in a listing of commands.
Table 6.15. Commonly-Used ldapdelete Options
SSL Options
Use the following options to specify that
ldapdelete
use LDAPS when communicating with the
Directory Server or to use certificate-based authentication. These options are valid only when LDAPS
has been turned on and configured for the Directory Server. For more information on certificate-based
authentication and how to create a certificate database for use with LDAP clients, see the "Managing
SSL" and "Managing SASL" chapters in the
Directory Server Administrator's Guide
.
Ensure that the Directory Server's encrypted port is set when using these options.