LDAP-UX Client Services B.05.01 Administrator Guide for HP directory servers and Windows ADS

information about impacts when using this option, see
Section 9.3.6.4 (page 320).
9.3.6.3.2 Options applicable to -t group
The following is a list of valid options for -t group:
<group_name> Required. Specifies the POSIX style textual group name for the group
entry to modify. You must specify the group name if you do not specify
the -D option. This group name must conform to HP-UX group name
requirements. For more information about group name requirements,
see the group(4)manpage.
-g <gidNumber> Replaces the group’s numeric ID number. If the specified gidNumber
value already exists in the directory server, ldapugmod does not
modify the group entry and return an error status, unless you specify
the -F option.
-a <member>[,...] Adds one or more members to the specified group.
The ldapugmod tool follows the same membership syntax defined by
the LDAP-UX configuration profile attribute mapping. Specifically, if
LDAP-UX has mapped the RFC 2307 group membership attribute,
memberUid, to a DN-based membership attribute such as member
or uniqueMember, then ldapugmod defines membership using the
DN of the specified user. When specifying a list of members, you must
use a comma with no white space to separate each member. If the
memberUid attribute has been mapped to more than one attribute
type, ldapugmod uses the first attribute defined by the mapping. If
the specified <member> does not exist in the LDAP directory, you must
use -F to define the member, and only use the memberUid attribute
syntax.
NOTE: The ldapugmod tool can add members only to a group that
follow a static membership syntax (such as memberUid, member and
uniqueMember). If the only membership mapping defined in the
LDAP-UX configuration profile uses a dynamic group membership
syntax (such as memberURL), ldapugmod fails to add a member to
a group.
-r <member>[,...] Removes one or more members from the specified group.
The ldapugmod tool searches for membership in the group using the
memberUid, member, uniqueMember, and msSFU30posixMember
attributes and removes all values that represent the specified user (either
DN or UID name). The ldapugmod tool consults the LDAP-UX
configuration profile for attribute mappings to determine which
attributes need to be modified to remove the user membership. When
specifying a list of members, you must use a comma with no white
space to separate each member.
-c <comment> Replaces a comment that is stored in the description attribute as
defined by RFC 2307. LDAP-UX does not support attribute mappings
for the description attribute. If <comment> is an empty string,
ldapugmod removes the description or mapped attribute.
<attr>=<value>> Enables modification of arbitrary LDAP attributes and values. The
<value> parameter may be an empty string. However this usage
does not remove attributes and their values from the directory server.
9.3 LDAP user and group management tools 319