export-reversible-passwords

Description

Requests that the server export entries from a specified backend in LDIF form, including clear-text representations of any passwords encoded with a reversible storage scheme. This tool may only be used over a secure connection and when authenticated as a user with the permit-export-reversible-passwords privilege. The output will be encrypted using a key generated from either a user-supplied passphrase or an encryption settings definition.

Examples

export-reversible-passwords --port 636 --useSSL \
     --trustStorePath /ds/config/truststore \
     --bindDN uid=pwexport,dc=example,dc=com --backendID userRoot \
     --ldifFile /ds/ldif/exported-passwords.ldif

export-reversible-passwords --port 636 --useSSL \
     --trustStorePath /ds/config/truststore \
     --bindDN uid=pwexport,dc=example,dc=com \
     --bindPassword pwexport-user-password.txt --backendID userRoot \
     --filter "(objectClass=person)" --exportNonReversiblePasswords \
     --exportEntriesWithoutPasswords --includeAdditionalAttribute '*' \
     --includeAdditionalAttribute "+" \
     --ldifFile /ds/ldif/exported-passwords.ldif \
     --encryptionPassphraseFile encryption-passphrase.txt

Arguments

-V
--version

-H
--help

--help-ldap

--help-sasl

--help-debug

-p {port}
--port {port}

-D {dn}
--bindDN {dn}

-w {password}
--bindPassword {password}

-j {path}
--bindPasswordFile {path}

--promptForBindPassword

-Z
--useSSL

-q
--useStartTLS

-X
--trustAll

-K {path}
--keyStorePath {path}

-W {password}
--keyStorePassword {password}

-u {path}
--keyStorePasswordFile {path}

--promptForKeyStorePassword

--keyStoreFormat {format}

-P {path}
--trustStorePath {path}

-T {password}
--trustStorePassword {password}

-U {path}
--trustStorePasswordFile {path}

--promptForTrustStorePassword

--trustStoreFormat {format}

-N {nickname}
--certNickname {nickname}

-o {name=value}
--saslOption {name=value}

--useSASLExternal

--helpSASL

-n {id}
--backendID {id}

-l {path}
--ldifFile {path}

--encryptionPassphraseFile {path}

--promptForEncryptionPassphrase

--encryptionSettingsDefinitionID {ID}

-f {filter}
--filter {filter}

--exportNonReversiblePasswords

--exportEntriesWithoutPasswords

-A {attr}
--includeAdditionalAttribute {attr}

--includeVirtualAttributes

--interactive

--outputFile {path}

--appendToOutputFile

--teeOutput