leave-lockdown-mode

Description

Request that the Synchronization Server leave lockdown mode and resume normal operation.

While in lockdown mode, the Synchronization Server rejects all requests from users that do not hold the lockdown-mode privilege.

Note that the Synchronization Server may place itself in lockdown mode under certain conditions (for example, if it detects a security problem like a malformed access control rule that may have otherwise resulted in exposure of sensitive data).

Examples

leave-lockdown-mode --hostname 127.0.0.1 --port 389 \
     --bindDN "cn=Directory Manager" --bindPassword password \
     --reason "Finished with configuration maintenance"

Arguments

-V
--version

-H
--help

--help-ldap

--help-sasl

--help-debug

-h {host}
--hostname {host}

-p {port}
--port {port}

-D {bindDN}
--bindDN {bindDN}

-w {bindPassword}
--bindPassword {bindPassword}

-j {bindPasswordFile}
--bindPasswordFile {bindPasswordFile}

-Z
--useSSL

-q
--useStartTLS

-X
--trustAll

-K {keyStorePath}
--keyStorePath {keyStorePath}

-W {keyStorePassword}
--keyStorePassword {keyStorePassword}

-u {keyStorePasswordFile}
--keyStorePasswordFile {keyStorePasswordFile}

-P {trustStorePath}
--trustStorePath {trustStorePath}

-T {trustStorePassword}
--trustStorePassword {trustStorePassword}

-U {path}
--trustStorePasswordFile {path}

-N {nickname}
--certNickname {nickname}

-o {name=value}
--saslOption {name=value}

--propertiesFilePath {propertiesFilePath}

--noPropertiesFile

--script-friendly

-r {message}
--reason {message}