Validate the contents of an LDIF file against the server schema.
validate-ldif --hostname server.example.com --port 389 --ldifFile data.ldif \ --rejectFile rejects.ldif --numThreads 4
validate-ldif --schemaDirectory /ds/config/schema --ldifFile data.ldif \ --rejectFile rejects.ldif --ignoreStructuralObjectClasses \ --ignoreAttributeSyntax
-V
--version
Description | Display Synchronization Server version information |
-H
--help
Description | Display general usage information |
--help-ldap
Description | Display help for using LDAP options |
--help-sasl
Description | Display help for using SASL options |
--help-debug
Description | Display help for using debug options |
Advanced | Yes |
-h {host}
--hostname {host}
Description | The IP address or resolvable name to use to connect to the directory server. If this is not provided, then a default value of 'localhost' will be used. |
Default Value | localhost |
Required | Yes |
Multi-Valued | No |
-p {port}
--port {port}
Description | The port to use to connect to the directory server. If this is not provided, then a default value of 389 will be used. |
Default Value | 389 |
Required | Yes |
Multi-Valued | No |
-D {dn}
--bindDN {dn}
Description | The DN to use to bind to the directory server when performing simple authentication. |
Required | No |
Multi-Valued | No |
-w {password}
--bindPassword {password}
Description | The password to use to bind to the directory server when performing simple authentication or a password-based SASL mechanism. |
Required | No |
Multi-Valued | No |
-j {path}
--bindPasswordFile {path}
Description | The path to the file containing the password to use to bind to the directory server when performing simple authentication or a password-based SASL mechanism. |
Required | No |
Multi-Valued | No |
-Z
--useSSL
Description | Use SSL when communicating with the directory server. |
-q
--useStartTLS
Description | Use StartTLS when communicating with the directory server. |
-X
--trustAll
Description | Trust any certificate presented by the directory server. |
-K {path}
--keyStorePath {path}
Description | The path to the file to use as the key store for obtaining client certificates when communicating securely with the directory server. |
Required | No |
Multi-Valued | No |
-W {password}
--keyStorePassword {password}
Description | The password to use to access the key store contents. |
Required | No |
Multi-Valued | No |
-u {path}
--keyStorePasswordFile {path}
Description | The path to the file containing the password to use to access the key store contents. |
Required | No |
Multi-Valued | No |
--keyStoreFormat {format}
Description | The format (e.g., jks, jceks, pkcs12, etc.) for the key store file. |
Required | No |
Multi-Valued | No |
-P {path}
--trustStorePath {path}
Description | The path to the file to use as trust store when determining whether to trust a certificate presented by the directory server. |
Required | No |
Multi-Valued | No |
-T {password}
--trustStorePassword {password}
Description | The password to use to access the trust store contents. |
Required | No |
Multi-Valued | No |
-U {path}
--trustStorePasswordFile {path}
Description | The path to the file containing the password to use to access the trust store contents. |
Required | No |
Multi-Valued | No |
--trustStoreFormat {format}
Description | The format (e.g., jks, jceks, pkcs12, etc.) for the trust store file. |
Required | No |
Multi-Valued | No |
-N {nickname}
--certNickname {nickname}
Description | The nickname (alias) of the client certificate in the key store to present to the directory server for SSL client authentication. |
Required | No |
Multi-Valued | No |
-o {name=value}
--saslOption {name=value}
Description | A name-value pair providing information to use when performing SASL authentication. |
Required | No |
Multi-Valued | Yes |
-f {path}
--ldifFile {path}
Description | The path to the LDIF file to process. |
Required | Yes |
Multi-Valued | No |
-c
--isCompressed
Description | Indicates that the specified LDIF file is compressed using gzip compression. |
-R {path}
--rejectFile {path}
Description | The path to the file to which rejected entries should be written. |
Required | No |
Multi-Valued | No |
--schemaDirectory {path}
Description | The path to a directory containing one or more LDIF files with the schema information to use. If this is provided, then no LDAP communication will be performed. |
Required | No |
Multi-Valued | No |
-t {num}
--numThreads {num}
Description | The number of threads to use when processing the LDIF file. |
Upper Bound | 2147483647 |
Default Value | 1 |
Required | Yes |
Multi-Valued | No |
--ignoreDuplicateValues
Description | Ignore validation failures due to entries containing duplicate values for the same attribute. |
--ignoreUndefinedObjectClasses
Description | Ignore validation failures due to object classes not defined in the schema. |
--ignoreUndefinedAttributes
Description | Ignore validation failures due to attributes not defined in the schema. |
--ignoreMalformedDNs
Description | Ignore validation failures due to entries with malformed DNs. |
--ignoreStructuralObjectClasses
Description | Ignore validation failures due to entries without exactly structural object class. |
--ignoreProhibitedObjectClasses
Description | Ignore validation failures due to entries with object classes that are not allowed. |
--ignoreMissingSuperiorObjectClasses
Description | Ignore validation failures due to entries that are one or more superior object classes. |
--ignoreProhibitedAttributes
Description | Ignore validation failures due to entries with attributes that are not allowed. |
--ignoreMissingAttributes
Description | Ignore validation failures due to entries missing required attributes. |
--ignoreSingleValuedAttributes
Description | Ignore validation failures due to entries with multiple values for single-valued attributes. |
--ignoreAttributeSyntax
Description | Ignore validation failures due to entries with attribute values that violate their associated syntax. |
--ignoreNameForms
Description | Ignore validation failures due to entries with RDNs that violate the associated name form definition. |