HP-UX Directory Server 8.1 administrator guide

3 Creating directory entries
This chapter discusses how to use the Directory Server Console and the ldapmodify and
ldapdelete command line utilities to modify the contents of your directory.
Entries stored in Active Directory can be added to the Directory Server through Windows Sync;
For more information on adding or modifying synchronized entries through Windows User
Sync, see Chapter 9 “Synchronizing Directory Server with Microsoft Active Directory”.
The topics include:
• “Managing entries from the directory console” (page 99)
• “Managing entries from the command line” (page 114)
• “Tracking modifications to directory entries” (page 118)
• “LDIF update statements” (page 120)
• “Maintaining referential integrity” (page 126)
• “Assigning and managing unique numeric attribute values” (page 132)
• “Enforcing attribute uniqueness” (page 138)
3.1 Managing entries from the directory console
You can use the Directory tab and the Property Editor on the Directory Server Console to add,
modify, or delete entries individually.
To add several entries simultaneously, use the command line utilities described in “Managing
entries from the directory console”.
• “Creating a root entry”
• “Creating directory entries”
• “Modifying directory entries”
• “Deleting directory entries”
NOTE:
You cannot modify your directory unless the appropriate access control rules have been set. For
information on creating access control rules for your directory, see Chapter 6 “Managing access
control”.
3.1.1 Creating a root entry
Each time a new database is created, it is associated with the suffix that will be stored in the
database. The directory entry representing that suffix is not automatically created.
To create a root entry for a database:
1. In the Directory Server Console, select the Configuration tab.
2. Right-click on the Data entry in the left menu, and select New Root Suffix from the menu.
3.1 Managing entries from the directory console 99