Red Hat 8.1, Справочник по командам, Страница: 272 / 372

Chapter 6. Command-Line Utilities
258
Option Description
• authid, the user who is binding to the server
(Kerberos principal)
• authzid, a proxy authorization (ignored by
the server since proxy authorization is not
supported)
• secProp, the security properties
• realm, the Kerberos realm
• flags
The expected values depend on the supported
mechanism. The
-o
can be used multiple times
to pass all of the required SASL information for
the mechanism. For example:
-o "mech=DIGEST-MD5" -o "authzid=test_user" -
o "authid=test_user"
Table 6.13. SASL Options
See
SASL Options
for
ldapsearch
for information on how to use SASL options with
ldapmodify
.
Additional ldapmodify Options
Option Description
-b
Causes the utility to check every attribute value
to determine whether the value is a valid file
reference. If the value is a valid file reference,
then the content of the referenced file is used
as the attribute value. This is often used for
specifying a path to a file containing binary data,
such as JPEG.
For example, to add a
jpegPhoto
attribute,
specify the
-b
option on the
ldapmodify
call. In
the LDIF provided to
ldapmodify
, include a line
like the following:
jpegPhoto: /tmp/photo.jpeg
ldapmodify
reads the contents of the
photo.jpeg
file into the
jpegPhoto
attribute
being added to the entry.
As an alternative to the
-b
option, use the
:<
URL specifier notation, which is simpler. For
example: