LDAP-UX Client Services B.04.15 with Microsoft Windows Active Directory Server Administrator's Guide (edition 8)

server. Instead use the -R option to remove arbitrary attributes.
See the “WARNING” section below for impacts when using this
option
Options Applicable to -t group
The following is a list of valid options for -t group:
<group_name>
Required. Specifies the POSIX style textual group name for the group
entry to modify. You must specify the group name if you do not
specify the -D option. This group name must conform to HP-UX
group name requirements. Refer to man page group(4) for group
name requirements.
-g <gidNumber> Replaces the group’s numeric ID number. If the specified gidNumber
value already exists in the directory server, ldapugmod does not
modify the group entry and return an error status, unless you specify
the -F option.
-a <member>[,...]
Adds one or more members to the specified group.
The ldapugmod tool follows the same membership syntax defined
by the LDAP-UX configuration profile attribute mapping. Specifically,
if LDAP-UX has mapped the RFC 2307 group membership attribute,
memberUid, to a DN-based membership attribute such as member
or uniqueMember, then ldapugmod defines membership using the
DN of the specified user. When specifying a list of members, you
must use a comma with no white space to separate each member. If
the memberUid attribute has been mapped to more than one attribute
type, ldapugmod uses the first attribute defined by the mapping. If
the specified <member> does not exist in the LDAP directory, you
must use -F to define the member, and only use the memberUid
attribute syntax.
NOTE: The ldapugmod tool can add members only to a group that
follow a static membership syntax (such as memberUid, member and
uniqueMember). If the only membership mapping defined in the
LDAP-UX configuration profile uses a dynamic group membership
syntax (such as memberURL), ldapugmod fails to add a member to
a group.
-r <member>[,...]
Removes one or more members from the specified group.
The ldapugmod tool searches for membership in the group using
the memberUid, member, uniqueMember, and
msSFU30posixMember attributes and removes all values that
represent the specified user (either DN or uid name). The ldapugmod
tool consults the LDAP-UX configuration profile for attribute
mappings to determine which attributes need to be modified to
remove the user membership. When specifying a list of members,
you must use a comma with no white space to separate each member.
-c <comment> Replaces a comment that is stored in the description attribute as
defined by RFC 2307. LDAP-UX does not support attribute mappings
for the description attribute. If <comment> is an empty string,
ldapugmod removes the description or mapped attribute.
<attr>=<value>>
Enables modification of arbitrary LDAP attributes and values. The
<value> parameter may be an empty string. However this usage
does not remove attributes and their values from the directory server.
Instead, use the -R option to remove arbitrary attributes. See the
“WARNING” section below for impacts when using this option
LDAP User and Group Management Tools 207