leave-lockdown-mode

Description

Request that the Directory Proxy Server leave lockdown mode and resume normal operation.

While in lockdown mode, the Directory Proxy Server rejects all requests from users that do not hold the lockdown-mode privilege.

Note that the Directory Proxy Server may place itself in lockdown mode under certain conditions (for example, if it detects a security problem like a malformed access control rule that may have otherwise resulted in exposure of sensitive data).

Examples

leave-lockdown-mode --hostname 127.0.0.1 --port 389 \
     --bindDN "cn=Directory Manager" --bindPassword password \
     --reason "Finished with configuration maintenance"

Arguments

-V
--version

-H
--help

--help-ldap

--help-sasl

--help-debug

-h {host}
--hostname {host}

-p {port}
--port {port}

-D {bindDN}
--bindDN {bindDN}

-w {bindPassword}
--bindPassword {bindPassword}

-j {bindPasswordFile}
--bindPasswordFile {bindPasswordFile}

-Z
--useSSL

-q
--useStartTLS

-X
--trustAll

-K {keystorePath}
--keyStorePath {keystorePath}

-W {keystorePassword}
--keyStorePassword {keystorePassword}

-u {keystorePasswordFile}
--keyStorePasswordFile {keystorePasswordFile}

-P {truststorePath}
--trustStorePath {truststorePath}

-T {truststorePassword}
--trustStorePassword {truststorePassword}

-U {path}
--trustStorePasswordFile {path}

-N {nickname}
--certNickname {nickname}

-o {name=value}
--saslOption {name=value}

--propertiesFilePath {propertiesFilePath}

--noPropertiesFile

--script-friendly

-r {message}
--reason {message}