LDAP-UX Client Services B.04.15 Administrator's Guide

NOTE: Although the ldapentry tool will allow the users to modify any information on the
EDITOR window, the directory server has the final decision on accepting the modification. If
the user makes an invalid LDIF syntax, violates the directory's schema or does not have the
priviledge to perform the modificaiton, the ldapentry tool will report the error after the EDITOR
window is closed when it tries to update the directory server with the information. The user will
be given the option to re-enter the EDITOR and correct the error.
6.4.2 ldappasswd
This section describes the ldappasswd command and its parameters. The ldappasswd
command, installed in /opt/ldapux/bin, is needed on clients that use an LDAP directory
replica because the replica cannot be modified by the passwd(1) command, or any other
command.
6.4.2.1 Syntax
ldappasswd [options]
where options can be any of the following:
-b basedn specifies basedn as the base distinguished name of where to start searching.
-h host specifies host as the LDAP server name or IP address.
-c
generates an encrypted password on the client. Use this parameter for directories
that do not automatically encrypt passwords. The default is to send the new
password in plain text to the directory. Netscape/Red Hat Directory Server for
HP-UX supports automatic encryption of passwords.
-v
prints the software version and exits.
-p port specifies port as the LDAP server TCP port number.
-D binddn specifies binddn as the bind distinguished name.
-w passwd specifies passwd as the bind password (for simple authentication).
-l login specifies login as the uid of the account to change; defaults to the current user.
6.4.2.2 Examples
The following is a command the directory administrator can use to change the password in the
directory for the user steves:
ldappasswd -h sys001.hp.com -p 389 -b
"ou=people,o=hp.com" -D "cn=Jane Admin,ou=admins,dc=hp,dc=com"
-w passwd -l steves
198 Command and Tool Reference