LDAP-UX Client Services B.05.00 Administrator's Guide

When you specify the -t passwd option, ldapuglist displays the following fields for a user
entry:
• cn
• uid
• userPassword
• uidNumber
• gidNumber
• homeDirectory
• loginShell
• gecos
When you specify the -t group option, ldapuglist displays the following fields for a group
entry:
• cn
• userPassword
• gidNumber
• memberUid
When you specify the -m option, the output format for both users and groups is changed to the
following:
dn: dn1
field1[attribute1]: value1
field2[attribute2]: value2
field3[attribute3]:: base64-encodeded-value3
...
7.3.4.5 Special considerations for output format
This section describes special considerations for the output format from ldapuglist that you
may need to be aware of.
7.3.4.5.1 Multi-values attributes
Although some of the attributes used in LDAP directory servers are multi-valued attributes, the
ldapuglist tool displays only the first value discovered for each RFC 2307 attribute for each
entry, because these fields appear only once in a POSIX account or group. For non-RFC 2307
attributes (those specified via the <attr> argument list), if the attribute is multi-valued,
ldapuglist displays multiple values. This rule does not apply to the memberUid field because
POSIX groups can have multiple members.
Because the gecos attribute can be mapped to multiple attributes, the gecos field can appear
multiple times in an entry if you use the -m option, once for each mapped attribute. For example,
if the gecos attribute is mapped to cn, l and telephoneNumber, ldapuglist displays once
for each mapped attribute as follows:
gecos[cn]: Bill Hu
gecos[l]: Building 6A
gecos[telephoneNUmber]: [phone]
7.3.4.5.2 Non-POSIX accounts and groups
If you use ldapuglist with the -F option, ldapuglist displays users and groups that are
not posixAccounts or posixGroups. Thus, these entries may not contain the required fields that
store POSIX account and group information (such as the uidNumber attribute). When displaying
these entries, the specified fields are missing from the output. As non-POSIX accounts and groups
are not required to contain POSIX attributes, use of the -L option may result in unexpected
output. Data between the “:” characters may be empty, such as ”::x:::”.
228 Command and tool reference