LDAP-UX Client Services B.04.15 Administrator's Guide

is used as a structural class for posixAccounts, then the sn
(surname) attribute must be specified in order to properly create
a new entry. This attribute needs to be defined in the template
file, and attribute/value pair needs to be specified at the end of
the ldapugadd command line. The<attr>=<value> parameter
is used to specify attributes required by the template file.
However, if an attribute is specified which is not defined in the
defined template file, that attribute/value pair is considered as
an optional attribute/value which will be added to the entry
exactly as specified. <attr>=<value> parameters are optional,
but you must specify them as the last parameters on the
command line.
6.3.5.4.3 Arguments Applicable to -t group
The following is a list of valid arguments for -t group:
<group_name>
Required argument. Specifies the POSIX textual style group name
for the new group entry. <group_name> is a required argument.
It must follow all command line options and must precede the
<atr>=<value> parameters if provided. This group name must
conform to HP-UX group name requirements. For more information,
refer to man page group(4) for group name requirements.
-g <gidNumber>
Optional. Specifies the group ID number. If the specified gidNumber
already exists in the directory server, ldapugadd does not add the
new entry and return an error status, unless the -F option is
specified.
If you do not specify this argument, ldapugadd provisions a new
group ID number by randomly selecting a value from the
gidNumber range specified by the ldapugadd -D -g
<min_gid>:<max_gid> command. If ldapugadd randomly
selects a gidNumber that is already in use on the LDAP directory
server, ldapugadd randomly selects another gidNumber and tries
again until it finds an unused gidNumber or exhausts retry attempts.
Retry attempts are limited to 90% of the range of available
gidNumbers (specified with -D -g <min_gid>:<max_gid>).
-x <domain>
Optional. Specifies the group's domain name. Use this option to
specify the ${domain} value that can be used in the template file.
If you do not specify this value, the domain name is created by
using the first dc component of the new group's distinguished
name. If the distinguished name does not contain any dc
components, and the ${domain} variable is specified in the
template file, ldapugadd generates an error.
-M <member>
Optional. Defines initial group membership by adding the specified
user accounts as members. If you specify more than one member,
you must separate each account name by a comma. No white space
is allowed between or within account names. Use of -M requires
that the specified user’s account is already defined in the LDAP
directory server, unless the -F option is specified. When you use
the -F option, the user's group membership is defined using the
memberUid attribute, regardless of the attribute mapping
configuration defined by the LDAP-UX configuration profile. Use
6.3 LDAP User and Group Management Tools 165