LDAP-UX Client Services B.04.15 with Microsoft Windows Active Directory Server Administrator's Guide (edition 8)

Table Of Contents
-n <new_name> Specifies the new name of the user or group. This option replaces the uid
attribute for user entries or the cn attribute for group entries with the new
name, or the mapped attribute if attribute mapping has been specified for
that attribute. The <new_name> argument specifies the new name of the
user or group. Using -n is the same as replacing the corresponding attribute.
For example, the following two commands perform the same operation,
replacing old uid with new uid for a user entry (assuming no attribute
mapping) :
ldapugmod -t passwd -n newuid olduid
Is the same as:
ldapugmod -t passwd olduid "uid=newuid"
Options Applicable to -t passwd
The following is a list of valid options for -t passwd:
<uid_name>
Required. Specifies the POSIX style login name of the user entry
to modify. You must specify the <uid_name> parameter unless
you specify the -D option. This user name must conform to HP-UX
login name requirements. Refer to man page passwd(4) for login
name requirements.
-f <full_name>
Replaces the users full name. If is an empty string (a pair of double
quotes: ""), ldapugmod removes the cn (or mapped) attribute.
See the “WARNING” section below for impacts when using this
option.
-u <uidNumber> Replaces the users numeric ID number. If uidNumber is an empty
string (a pair of double quotes: ""), ldapugmod removes the
uidNumber or mapped attribute. If the specified uidNumber
value already exists in the directory server, ldapugmod does not
modify the entry and returns an error exit status, unless you
specify the -F option.
-g <group/gid>
Replaces the user's primary login group ID number. If
<group/gid> is an empty string (a pair of double quotes: ""),
ldapugmod will remove the gidNumber or mapped attribute. In
order to support numeric group names, ldapugmod treats the -g
argument as a group name. If ldapugmod cannot find a matched
numeric group name in the directory server, it checks to see if the
value is numeric and then checks to see if the specified group ID
number exists. If it does not exist, ldapugmod exits with an error,
unless you specify the -F option.
NOTE: The dapugmod tool does not modify the users group
membership when chaining the primary group ID. Adding the
user as a member of the new group and possibly removing the
member from the previous group must be done with separate
ldapudmod operations.
-s <login_shell>
Replaces the full path name to the executable that is used to handle
login sessions for this user.
If the <login_shell> argument is an empty string (a pair of
double quotes: ""), ldapugmod removes the loginShell or
mapped attribute.
The ldapudmod tool issues a WARNING if the specified login
shell does not exist on the local system. See the “WARNING”
section below for impacts when using this option.
LDAP User and Group Management Tools 205