LDAP-UX Client Services B.04.15 with Microsoft Windows Active Directory Server Administrator's Guide (edition 8)

The ldapugadd Tool
You can use the ldapugadd tool to add new POSIX accounts and groups to an LDAP directory
server (as noted by the first and second syntaxes in “Synopsis” (page 186) below). You can use
ldapugadd to modify the /etc/opt/ldapux/ldapug.conf file to set defaults for creation
of new users or groups (as noted by the third syntax “Synopsis” (page 186) below).
The ldapugadd tool uses user and group template files that allow ldapugadd to conform to
the information model used for the types of entries being created. To use ldapugadd, you must
provide LDAP administrator credentials that have sufficient privilege to perform the user or
group add operation in the LDAP directory server.
This tool provides command-line options that enable you to add the following information to
the user or group entry:
For POSIX Accounts
• User's full name
• User ID (account name)
• User ID number
• User password
• Primary group membership
• Home directory
• Login shell
• Gecos
• Comments
For POSIX Groups
• Group ID (group name)
• Group ID number
• Group members
LDAP-UX supports a local LDAP UG configuration file, /etc/opt/ldapux/ldapug.conf.
The ldapugadd tool uses the ldapug.conf file to manage the default values for the
configuration parameters, uidNumber_range, gidNumber_range, user_gidNumber,
default_homeDirectory and default_loginShell. The ldapugadd tool uses these values
when creating new user and group entries in an LDAP directory server if a command-line option
is not provided for that specific value. You can use the ldapugadd -D command to change the
value defined in the ldapug.conf file. See “LDAP UG Tool Configuration File” (page 193) for
more information.
Template files are required by the ldapugadd tool. These template files define what data is
required to create new user and group entries and allow ldapugadd to discover required
attributes. Because each organization may have different required data models for user and
group entries (LDAP directory servers allow for a variety of attributes to be stored in user and
group entries), these templates may define arbitrary data models beyond just the required POSIX
attributes. Before creating new entries, applications can use the ldapcfinfo tool to discover
the attributes required by the templates that are not part of the standard POSIX data model. For
more information, see “Template Files” (page 194) .
Syntax Translation
LDAP-UX supports syntax translation for the memberUid and gecos attributes. This translation
allows storage of this information in a format more interoperable with other directory-enabled
applications. The LDAP user and group tools allow creation and modification of these attributes
in the LDAP-native syntaxes, even when specified using POSIX syntaxes.
For example, if the LDAP-UX configuration profile indicates the gecos attribute has been mapped
to cn, l and telephoneNumber attributes, then when you specify the GECOS values separated
by a comma for each mapped attribute in the ldapugadd command, the comma-separated list
is parsed and each comma-separated component is placed in the cn, l and telephoneNumber
LDAP User and Group Management Tools 185