LDAP-UX Client Services B.04.15 with Microsoft Windows Active Directory Server Administrator's Guide (edition 8)

Limitations
The following are limitations of ldapugadd:
• Because LDAP directory servers require data to be stored according to the UTF-8 (RFC3629)
character encoding method, all characters passed into ldapugadd are assumed to UTF-8,
and part of the ISO-10646 character set. ldapugadd does not perform conversion of the
locale character set to and from the UTF-8 character set.
• Because ldapugadd calls functions to discover if the group exists before adding a user to
a group, it is possible to encounter timing issues with cached information. For example, if
an administrator uses the grget command to see if a group exists, this group information
is cached by both ldapclientd (1M) and pwgrd(1M). If the group does not exist when
calling grget, and the administrator shortly creates this group with ldapugadd, the
information that the group still does not exist will still be cached. Then, when adding a new
user and specifying that this user is a member of the just created group, ldapugadd generates
an error to indicate that the user cannot be added to the group. To resolve this, you must
flush the pwgrd and ldapclientd caches.
Examples
This section provides examples of using the ldapugadd tool.
The following commands specify the LDAP_BINDDN and LDAP_BINDCRED environment variables:
export LDAP_BINDDN = "cn=Jane Admin,ou=admins,dc=org,dc=example,dc=com"
export LDAP_BINDCRED = "Jane's password"
The following command specifies the LDAP_URCRED environment variable. You must specify
the -PW option in the ldapugadd command line when using LDAP_UGCRED.
export LDAP_UGCRED = "user_password"
The following commands add an account entry for the user, alam, with the user's primary login
group id, 300. ldapugadd creates the password for new user, alam, using the user password
specified in the LDAP_UGCRED environment variable. After creating the user entry, ldapugadd
attempts to add this user as a member of the group member 300. The ldapugadd tool dynamically
assigns the uidNumber value from the pre-configured range.
cd /opt/ldapux/bin
./ldapugadd -t passwd -PW -f "Adrian Lam" -g 300 alam
Run the following command to display the new user entry, alam:
./ldapuglist -t passwd -n alam
Below is the user entry:
dn: cn=Adrian Lam,ou=users,dc=org,dc=example,dc=com
cn: Adrian Lam
uid: alam
uidNumber: 2200
gidNumber: 300
homeDirectory: /home/alam
loginShell: /usr/bin/ksh
The following command adds an account entry for the user, mscott, with the user's primary
login group id, 200, and gecos field information. In this example, the gecos attribute has been
mapped to cn, l and telephoneNumber in the LDAP-UX configuration profile. ldapugadd
creates the password for new user, mscott, using the password specified in the LDAP_UGCRED
environment variable. After creating the user entry, ldapugadd attempts to add this user as a
member of the group number 200.
./ldapugadd -t passwd -PW -g 200 -I "Mike Scott,Building-6A,555-555-5555" mscott
LDAP User and Group Management Tools 199