ldapschema.1 (2010 09)

l
ldapschema(1) ldapschema(1)
NAME
ldapschema - determines the status of an LDAP schema on the LDAP directory server and extends the
LDAP directory server schema with new attribute types and object classes.
SYNOPSIS
ldapschema -q schema -T ds_type -V
ds_version [options ]
ldapschema -e schema -T ds_type -V
ds_version [options ]
DESCRIPTION
The
ldapschema utility allows schema developers to define LDAP schemas using a universal XML syn-
tax, greatly simplifying the ability to support different directory server variations. It can be used to query
the current status of the LDAP schema on the LDAP directory server, as well as extend the LDAP direc-
tory server schema with new attribute types and object classes. The
ldapschema utility was designed
to support directory servers from several vendors and is currently supported with HP-UX Directory
Server, Red Hat Directory Server and Microsoft Windows Active Directory Server.
ldapschema supports two modes of operation:
1. Query mode determines the current status of the LDAP schema on the LDAP directory server.
ldapschema checks if any attribute types and object classes of the LDAP schema are already
installed on the LDAP server. Also, it determines if definitions installed on the LDAP server match
definitions specified in the schema definition file being queried.
2. Extend mode adds definitions of attribute types and object classes that are not yet installed on the
LDAP server to that LDAP server’s schema. Only new valid attribute types and object classes can be
added to the LDAP server schema. To execute the
ldapschema utility in the Extend mode
, most
LDAP directory servers require specifying the distinguished name and password of an administrator
who has permissions to modify the schema on that server.
ldapschema uses the following XML files:
• LDAP schema definition files (see the SCHEMA DEFINITION FILE section below).
• Files containing matching rules and syntaxes supported on the LDAP server in case the LDAP server
does not provide them directly (see the LDAP DIRECTORY SERVER DEFINTION FILE section
below).
• Mapping rules for unsupported matching rules and syntaxes file (see the MAPPING UNSUPPORTED
MATCHING RULES AND LDAP SYNTAXES section below).
This manpage describes the use of
ldapschema, including the command line, environment variables
and the XML files format.
Required Command Options
ldapschema requires these options:
-q schema Queries schema status on the LDAP directory server without applying any changes to the
LDAP directory server. Schema definition is obtained from the specified schema file. See
the SCHEMA DEFINITION FILE section for details.
-e schema Extends the LDAP directory server schema with attribute types and object classes defined in
the specified schema . Schema definition is obtained from the schema file. See the SCHEMA
DEFINITION FILE section for details. On most LDAP directory servers this option requires
specifying the -D binddn option and either the -j filename or the -w - option to
specify the credentials of an administrator who has permissions to modify the schema on the
directory server.
-T ds_type Specifies the type of LDAP directory server. The following types of LDAP directory servers
are fully supported by ldapschema:
Type of Directory Server ds_type
Active Directory Server ads
Red Hat Directory Server rhds
HP-UX Directory Server hpds
The
ldapschema utility may work with other types of LDAPv3 directory servers, although
its behavior has not been fully validated.
HP-UX 11i v3: June 2010 Web Release − 1 − Hewlett-Packard Company 1