LDAP-UX Client Services B.04.15 Administrator's Guide
Table 6-7 Return Codes for ldapugadd (continued)
Failed to update the default value in /etc/opt/
ldapuux_ldapug.conf.
ADD_FAIL_TO_UPDATE
The LDAP add operation failed.
ADD_FAILED
6.3.5.9 Limitations
The following are limitations of ldapugadd:
• Because LDAP directory servers require data to be stored according to the UTF-8 (RFC3629)
character encoding method, all characters passed into ldapugadd are assumed to UTF-8,
and part of the ISO-10646 character set. ldapugadd does not perform conversion of the
locale character set to and from the UTF-8 character set.
• Because ldapugadd calls functions to discover if the group exists before adding a user to
a group, it is possible to encounter timing issues with cached information. For example, if
an administrator uses the grget command to see if a group exists, this group information
is cached by both ldapclientd (1M) and pwgrd(1M). If the group does not exist when
calling grget, and the administrator shortly creates this group with ldapugadd, the
information that the group still does not exist will still be cached. Then, when adding a new
user and specifying that this user is a member of the just created group, ldapugadd generates
an error to indicate that the user cannot be added to the group. To resolve this, you must
flush the pwgrd and ldapclientd caches.
6.3.5.10 Examples
This section provides examples of using the ldapugadd tool:
The following commands specify the LDAP_BINDDN and LDAP_BINDCRED environment variables:
export LDAP_BINDDN = "cn=Jane Admin,ou=admins,dc=example,dc=com" export LDAP_BINDCRED
= "Jane's Password"
The following command specifies the LDAP_URCRED environment variable:
export LDAP_UGCRED = "user_password"
Run the following commands to discover what non-POSIX attributes defined in the default
template file are required to create the new user entry:
cd /opt/ldapux/bin ./ldapcfinfo
-t passwd -R
The output of the commands is as follows:
Surname
The following commands add an account entry for the user, alam, with the user's primary login
group id, 300, and the surname, Lam. The ldapugadd tool creates the password for new user,
alam, using the user password specified in the LDAP_UGCRED environment variable. After
creating the user entry, ldapugadd attempts to add this user as a member of the group number
300. The uidNumber value is assigned dynamically from the pre-configured range.
cd /opt/ldapux/bin ./ldapugadd -t passwd -PW -f "Adrian Lam" -g 300 alam
surname="Lam"
Run the following command to display the new user entry, alam:
./ldapuglist -t passwd -n alam sn
Below is the user entry:
dn: cn=Adrian
Lam,ou=people,dc=example,dc=com cn: Adrian Lam uid: alam uidNumber:
2200 gidNumber: 300 homeDirectory: /home/alam loginShell: /usr/bin/ksh
sn: Lam
The following command adds an account entry for the user, mscott, with the user's primary
login group id, 200, and gecos field information. In this example, the gecos attribute has been
172 Command and Tool Reference