ldaphostmgr.1m (2010 09)

l
ldaphostmgr(1M) ldaphostmgr(1M)
objectClass: device
objectClass: iphost
objectClass: domainEntity
owner: uid=domadmin,ou=People,dc=cup,dc=hp,dc=com
entityRole: WebServer
entityRole: DBServer
Performing the following
ldaphostmgr:
ldaphostmgr chef "entityRole=NFSServer"
Replaces all instances of
cn:
dn: cn=chef,ou=Hosts,dc=cup,dc=hp,dc=com
cn: chef
ipHostNumber: 192.0.10.10
objectClass: top
objectClass: device
objectClass: iphost
objectClass: domainEntity
owner: uid=domadmin,ou=People,dc=cup,dc=hp,dc=com
entityRole: NFSServer
As a general rule, be cautious before using
ldaphostmgr to change multi-valued attributes. Also note,
use of the same attribute and value pair more than once, either specified as part of attr
=value, -R or -A,
or from other command-line options (for example
-i for ipAddress where ipAddress is mapped to some
other attribute) is not allowed. ldaphostmgr will exit with error status before sending any conflicting
modification request to the directory server.
ERRORS AND WARNINGS
Upon exit,
ldaphostmgr will return a 0 (zero) exit status if no errors or warnings were encountered. A
non-zero exit status will be returned if ldaphostmgr encounters an error or warning and one or more
messages will be logged to stderr. Messages will have the following format:
ERROR: code:
message
or
WARNING: code:
message
Leading extra white space may be inserted to improve readability and follow 80 column screen format-
ting.
code will be a programmatically parsable error key-string, while message will be human-readable.
Refer to the LDAP-UX Client Services Administrator’s Guide for a list of possible error codes generated
by the LDAP user and group management tools.
EXTERNAL INFLUENCES
Environmental Variables
LDAP_HOSTCRED When used in combination with the -PW option, LDAP_HOSTCRED
specifies the
proxy password newly created host. Also, if ldpux (5) attributed mapping for the
userPassword attribute has not been defined or set to "*NULL*",
ldaphostmgr
will create new passwords in the userPassword attribute.
LDAP_BINDDN Specifies the DN of a user with sufficient directory server privilege to create new
users and/or groups in the LDAP directory server. While this variable is optional, if
LDAP_BINDDN is specified, LDAP_BINDCRED must also be specified. Note also
that if ldaphostmgr is used to manage information about a remote host, and the
-k or -I option is specified, the specified LDAP_BINDDN must also represent a
POSIX account, such that ldaphostmgr can remotely connect to that host to
discover/modify that information on the remote host. When doing so, the POSIX ID
of the specified user will be used to remotely login to the host.
LDAP_BINDCRED A password or other type of credential used for the user specified by the
LDAP_BINDDN. While this variable is optional, if LDAP_BINDCRED is specified,
LDAP_BINDDN must also be specified.
HP-UX 11i v3: June 2010 Web Release − 9 − Hewlett-Packard Company 9