ldapmodify

Description

Apply a set of add, delete, modify, and/or modify DN operations to a directory server. Supply the changes to apply in LDIF format, either from standard input or from a file specified with the 'ldifFile' argument. Change records must be separated by at least one blank line.

Examples

ldapmodify --hostname ldap.example.com --port 389 \
     --bindDN uid=admin,dc=example,dc=com --bindPassword password --defaultAdd

ldapmodify --hostname ds1.example.com --port 636 --hostname ds2.example.com \
     --port 636 --useSSL --bindDN uid=admin,dc=example,dc=com \
     --bindPassword password --filename changes.ldif \
     --modifyEntriesMatchingFilter "(objectClass=person)" --searchPageSize 100

Arguments

-H
--help

--help-ldap

--help-sasl

--help-debug

-h {host}
--hostname {host}

-p {port}
--port {port}

-D {dn}
--bindDN {dn}

-w {password}
--bindPassword {password}

-j {path}
--bindPasswordFile {path}

--promptForBindPassword

-Z
--useSSL

-q
--useStartTLS

-X
--trustAll

-K {path}
--keyStorePath {path}

-W {password}
--keyStorePassword {password}

-u {path}
--keyStorePasswordFile {path}

--promptForKeyStorePassword

--keyStoreFormat {format}

-P {path}
--trustStorePath {path}

-T {password}
--trustStorePassword {password}

-U {path}
--trustStorePasswordFile {path}

--promptForTrustStorePassword

--trustStoreFormat {format}

-N {nickname}
--certNickname {nickname}

--enableSSLDebugging

-o {name=value}
--saslOption {name=value}

--useSASLExternal

--helpSASL

-f {path}
--ldifFile {path}

--encryptionPassphraseFile {path}

-i {charset}
--characterSet {charset}

-R {path}
--rejectFile {path}

-v
--verbose

--modifyEntriesMatchingFilter {filter}

--modifyEntriesMatchingFiltersFromFile {path}

--modifyEntryWithDN {dn}

--modifyEntriesWithDNsFromFile {path}

--searchPageSize {value}

--retryFailedOperations

-n
--dryRun

-a
--defaultAdd

-c
--continueOnError

--stripTrailingSpaces

--followReferrals

-Y {authzID}
--proxyAs {authzID}

--proxyV1As {dn}

--useAdministrativeSession

--operationPurpose {purpose}

--useManageDsaIT

--useTransaction

--multiUpdateErrorBehavior {atomic|abort-on-error|continue-on-error}

--assertionFilter {filter}

-E
--authorizationIdentity

--generatePassword

--getAuthorizationEntryAttribute {attr}

--getBackendSetID

--getServerID

--getUserResourceLimits

--ignoreNoUserModification

--preReadAttribute {attr}

--postReadAttribute {attr}

--routeToBackendSet {entry-balancing-processor-id:backend-set-id}

--routeToServer {id}

--useAssuredReplication

--assuredReplicationLocalLevel {level}

--assuredReplicationRemoteLevel {level}

--assuredReplicationTimeout {timeout}

--replicationRepair

--nameWithEntryUUID

--noOperation

--passwordUpdateBehavior {name=value}

--getPasswordValidationDetails

--permissiveModify

--clientSideSubtreeDelete

--serverSideSubtreeDelete

-s
--softDelete

--hardDelete

--allowUndelete

--retireCurrentPassword

--purgeCurrentPassword

--suppressOperationalAttributeUpdates {attr}

--suppressReferentialIntegrityUpdates

--usePasswordPolicyControl

--uniquenessAttribute {attr}

--uniquenessFilter {filter}

--uniquenessBaseDN {dn}

--uniquenessMultipleAttributeBehavior {behavior}

--uniquenessPreCommitValidationLevel {level}

--uniquenessPostCommitValidationLevel {level}

-J {oid}[:{criticality}[:{stringValue}|::{base64Value}]]
--control {oid}[:{criticality}[:{stringValue}|::{base64Value}]]

--addControl {oid}[:{criticality}[:{stringValue}|::{base64Value}]]

--bindControl {oid}[:{criticality}[:{stringValue}|::{base64Value}]]

--deleteControl {oid}[:{criticality}[:{stringValue}|::{base64Value}]]

--modifyControl {oid}[:{criticality}[:{stringValue}|::{base64Value}]]

--modifyDNControl {oid}[:{criticality}[:{stringValue}|::{base64Value}]]

-r {num}
--ratePerSecond {num}

--version

--interactive

--outputFile {path}

--appendToOutputFile

--teeOutput

--propertiesFilePath {path}

--generatePropertiesFile {path}

--noPropertiesFile

--suppressPropertiesFileComment