LDAP-UX Client Services B.04.15 with Microsoft Windows Active Directory Server Administrator's Guide (edition 8)

ldapsearch
You use the ldapsearch command-line utility to locate and retrieve LDAP directory entries.
This utility opens a connection to the specified server using the specified distinguished name
and password, and locates entries based on the specified search filter. Search results are returned
in LDIF format. For detailed information, refer to the Microsoft Windows Active Directory Server
Administrator' s Guide available at the following web site:
http://docs.hp.com/en/internet.html
Syntax
ldapsearch -b basedn [optional_options][filter]
[optional_list_of_attributes]
where
filter Specifies an LDAP search filter. Do not specify a search
filter if you supply search filters in a file using the -f option.
optional_options Specifies a series of command-line options. These must be
specified before the search filter, if used.
optional_list_of_attributes are spaces-separated attributes that specifies the scope of
the attributes returned in the search results. This list of
attributes must appear after the search filter. Refer to the
Microsoft Windows Active Directory Server Administrator's
Guide for details.
ldapsearch Options
The section lists the most commonly used ldapsearch command-line options. For more
information, refer to Red Hat Directory Server for HP-UX Configuration, Command and File Reference
for more information.
-b Specifies the starting point for the search. The value specified here must be a distinguished
name that currently exits in the database.
-D Specifies the distinguished name (DN) with which to authenticate to the server. If specified,
this value must be a DN recognized by the Directory Server, and it must also have the
authority to search for the entries.
-h Specifies the hostname or IP address of the Directory Server. If you do not specify a host,
ldapsearch uses the local host.
-l Specifies the maximum number of seconds to wait for a search request to complete.
-P Specifies the TCP port number that the Directory Server uses. The default is 389.
-s Specifies the scope of the search. The scope can be one of the following:
• base: Search only the entry specified in the —b option or defined by the LDAP_BASEDN
environment variable.
• one: Search only the immediate children of the entry specified in the -b option.
• sub: Search the entry specified in the -b option and all of its descendants. Perform a
subtree search starting at the point identified in the -b option. This is the default.
-w Specifies the password associated with the distinguished name that is specified in the -D
option.
-x Specifies that the search results are sorted on the server rather than on the client. In general,
it is faster to sort on the server rather than on the client.
-f Specifies the file containing the search filter(s) to be used in the search. Omit this opiton if
you want to supply a search filter directly to the command-line.
ldapmodify
You use the ldapmodify command-line utility to add or modify entries in an existing LDAP
directory. ldapmodify opens a connection to the specified server using the distinguished name
and password you supply, and adds or modifies the entries based on the LDIF update statements
226 Command, Tool, Schema Extension Utility, and Migration Script Reference