LDAP-UX Client Services B.05.01 Administrator Guide for HP directory servers and Windows ADS

Table 28 Return codes for ldapuglist (continued)
One or more of the attributes specified in the search filter
is not mapped or mapped to *NULL*, cannot create search
filter. For example,
ldapuglist -t passwd -f “(userpassword=userp)”
The output of the preceding command displays the
“LST_ATTR_MAP_NULL” error because the
userpassword attribute is mapped to *NULL* in the
LDAP-UX configuration profile.
LST_ATTR_MAP_NULL
The attribute is not allowed when bind to the directory
server with the LDAP-UX proxy user.
LST_ATTR_NOT_ALLOWD
9.3.4.7 Limitations
The ldapuglist tool has the following limitations:
• The ldapuglist tool does not support enumeration of members of a dynamic group, such
as those defined by the dynamic group attributes, memberURL or msDS-AzLDAPQuery.
• The ldapuglist tool does not perform conversion of the locale character set to and from
the UTF-8 character set.
9.3.4.8 Examples
This section provides examples of using ldapuglist:
While use of LDAP_BINDDN is not typically required to use ldapuglist, the LDAP_BINDDN
and LDAP_BINDCRED environment variables can be used to specify the distinguished name (DN)
and password of a user with sufficient directory server privilege to display protected attributes.
Setting the LDAP_BINDDN and LDAP_BINDCRED environment variables is optional when using
ldapuglist.
The following commands specify the LDAP_BINDDN and LDAP_BINDCRED environment variables:
export LDAP_BINDDN = "cn=Jane Admin,ou=admins,dc=example,dc=com"
export LDAP_BINDDN = "Jane_password"
Run the following command to go to the /opt/ldapux/bin directory where ldapuglist
resides:
cd /opt/ldapux/bin
Run the following command to display the account entry for the user name, ascott:
./ldapuglist -t passwd -L -n ascott
The output of the preceding command displays the /etc/passwd format as follows:
ascott:x:125:250:ascott:/home/ascott:/usr/bin/sh
Run the following command to list an account entry that contains uid=mlee:
./ldapuglist -t passwd -f "(uid=mlee)"
The output is as follows:
dn: cn=Michael Lee,ou=people,dc=example,dc=com
cn: Michael Lee
uid: mlee
uidNumber: 2201
gidNumber: 318
homeDirectory: /home/mlee
loginShell: /usr/bin/ksh
gecos: mlee,San Francisco,555-555-5555
Run the following command to list an account entry that contains uid=jscott:
294 Command and tool reference