NIS/LDAP Gateway Administrator's Guide

See also “Starting and Stopping the NIS/LDAP Gateway”.
The ldappasswd Command
This section describes the ldappasswd command and its parameters.
The ldappasswd program, installed in /opt/ldapux/bin, allows users to change their passwords
in the directory. Changing a user's password with ldappasswd marks the cache entry for that
user as stale, if caching is enabled. ldappasswd assumes an LDAP directory server that supports
{crypt} format. (For more information, see passwd(1) and crypt(3C).)
Syntax
ldappasswd [options]
where options can be any of the following:
-b basedn specifies basedn as the base distinguished name of where to start searching. If
ypldapd is running, then this is not required.
-h host specifies host as the LDAP server name or IP address. If ypldapd is running,
then this is not required.
-c
generates an encrypted password on the client. Use this parameter for directories
that do not automatically encrypt passwords. The default is to send the new
password in plain text to the directory. Netscape/Red Hat Directory Server for
HP-UX supports automatic encryption of passwords.
-v
prints the software version and exits.
-p port specifies port as the LDAP server TCP port number.
-D binddn specifies binddn as the bind distinguished name.
-w passwd specifies passwd as the bind password (for simple authentication).
-l login specifies login as the uid of the account to change; defaults to the current user.
If the NIS client is configured to an NIS/LDAP Gateway server, the -b, -h, -p, -D, -w, and -l options
are not required. These options are useful for changing a password from a system that is not an
NIS client or for changing another user's password.
Examples
The following command changes the password in the directory for the currently logged in user:
ldappasswd
The following command changes the password in the directory for the user steves:
ldappasswd -l steves
LDAP Directory Tools
This section briefly describes the tools ldapsearch, ldapmodify, and ldapdelete. These tools are
described in detail in the Netscape Directory Server for HP-UX Administrator's Guide available at
http://docs.hp.com/hpux/internet.
Additional tools are available in the directory /opt/ldapux/contrib/bin, however these tools are
unsupported. See the file /opt/ldapux/contrib/bin/README for more information.
ldapsearch
You use the ldapsearch command-line utility to locate and retrieve LDAP directory entries. This
utility opens a connection to the specified server using the specified distinguished name and
password, and locates entries based on the specified search filter. Search results are returned in
LDIF format. For details, see the Netscape Directory Server for HP-UX Administrator's Guide available
at http://docs.hp.com/hpux/internet.
34 Command and Tool Reference