Red Hat Directory Server 8.0 Configuration, Command, and File Reference

Option Description
/client-cert.db
-Q Specifies the token and certificate name,
which is separated by a semicolon (:) for
PKCS11.
-W Specifies the password for the certificate
database identified on the -P option. For
example:
-W serverpassword
-Z Specifies that SSL is to be used for the
directory request.
-ZZ Specifies the Start TLS request. Use this
option to make a cleartext connection into a
secure one. If the server does not support
Start TLS, the command does not need
aborted; it will continue in cleartext.
-ZZZ Enforces the Start TLS request. The server
must respond that the request was
successful. If the server does not support
Start TLS, such as Start TLS is not enabled or
the certificate information is incorrect, the
command is aborted immediately.
Table 6.11. ldapmodify SSL Options
SASL Options.
SASL mechanisms can be used to authenticate a user, using the -o the required SASL
information.
To learn which SASL mechanisms are supported, search the root DSE. See the -b option in
Table 6.3, “Commonly-Used ldapsearch Options”.
Option Description
-o Specifies SASL options. The format is -o
saslOption=value. saslOption can have one of
six values:
• mech
Chapter 6. Command-Line Utilities
218