LDAP-UX Client Services B.05.00 Administrator's Guide

that points to /etc/opt/ldapux/ug_templates/ug_group_std.tmpl for a standard LDAP
directory server.
For detailed information on how to use the correct format to define template files, see
Section 7.3.5.6.3 (page 244).
7.3.5.6.3 Defining template files
Pre-defined substitution constructs
Each template file must follow the LDIF data format and also permit substitution of values from
the ldapugadd command. Each template file can be built using custom RFC 2307–type attributes
and values. Customized attribute values are defined using the ${<name>} construct. The
LDAP-UX supports several pre-defined substitution constructs, ${<name>}, where <name>
represents:
posixProfile
Represents all RFC 2307-type attributes and values for the particular name
service (either passwd or group). If LDAP-UX configuration has defined
attribute mapping for particular attributes, the mapped attributes are
substituted in its place. When you use the posixProfile construct for
posixAccount-type entries, LDAP-UX will add the following attributes and
values to the new user entry:
• cn
• uid
• userPassword
• uidNumber
• gidNumber
• gecos
• homeDirectory
• loginShell
When you use the posixProfile construct with posixGroup-type entries,
LDAP-UX will add the following attributes and values to the new group
entry:
• cn
• userPassword
• gidNumber
• memberUid
NOTE: Because use of posixProfile supports attribute mapping, if the
above attributes have been mapped as configured in the LDAP-UX
configuration profile, the mapped attributes and values are added to the
entry instead of the RFC 2307–defined attributes. For example, if the
posixAccount attribute gecos has been mapped to cn, l and
telephoneNumber then LDAP-UX adds cn, l and telephoneNumber
information to the entry instead of gecos. If the posixGroup attribute
memberUid has been mapped to uniqueMember, then LDAP-UX adds
uniqueMember information to the entry instead of memberUid.
basedn
Represents the substitution of the distinguished name of the default search
base (defaultSearchBase) as defined in the LDAP-UX configuration profile.
uid Represents the user’s account name when used in a passwd template file.
uidNumber Represents the user’s account ID number when you define it in a passwd
template file for the new user entry.
244 Command and tool reference