HP-UX Reference (11i v2 07/12) - 1M System Administration Commands A-M (vol 3)

l
ldapugmod(1M) ldapugmod(1M)
When the attr=value parameter is used to modify an existing attribute, the
ldapugmod command will
also use the LDAP replace operation. The replace operation will remove all occurrences of the specified
attribute for an entry and replace it with the value specified. If there are multiple values for a single attri-
bute in an entry, the use of a single attr
=value parameter will replace all values with the single value
specified on the command line.
Note that it is possible to specify more than one occurrence of the same attribute on the command line, if
that attribute is multi-valued. In which case, both values will be created in the entry.
Use of
-A or -R changes this behavior (for both the above-listed command arguments and the attr
=value
parameters).
Any attribute specified as an argument to the
-A or -R option will cause ldapugmod to perform an LDAP
add operation instead of an LDAP replace operation. Example: Suppose an entry in an LDAP directory
appears as follows:
dn: uid=mwolters,ou=people,ou=IT,dc=FutureWidget,dc=com
cn: Manuel Wolters
cn: Manny Wolters
uid: mwolters
uidNumber: 2284
gidNumber: 212
homeDirectory: /home/mwolters
loginShell: /usr/bin/ksh
gecos: Manuel Wolters,San Francisco, [phone]
Performing the following
ldapugmod:
ldapugmod -t passwd mwolters "cn=M. Wolters"
replaces all instances of cn:
dn: uid=mwolters,ou=people,ou=IT,dc=FutureWidget,dc=com
cn: M. Wolters
uid: mwolters
uidNumber: 2284
gidNumber: 212
homeDirectory: /home/mwolters
loginShell: /usr/bin/ksh
gecos: Manuel Wolters,San Francisco, [phone]
Assuming the entry as originally specified, if the following ldapugmod command is issued:
ldapugmod -t passwd -R "cn=Manny Wolters" mwolters "cn=M Wolters"
The resulting entry would be:
dn: uid=mwolters,ou=people,ou=IT,dc=FutureWidget,dc=com
cn: Manuel Wolters
cn: M. Wolters
uid: mwolters
uidNumber: 2284
gidNumber: 212
homeDirectory: /home/mwolters
loginShell: /usr/bin/ksh
gecos: Manuel Wolters,San Francisco,[phone]
As a general rule, be cautions before using ldapugmod to change multi-valued attributes.
Also note, use of the same attribute and value pair more than once, either specified as part of attr=value,
-R or -A, or from other command line options (for example -I gecos where gecos is mapped to some other
attributes) is not allowed. ldapugmod will exit with error status before send any conflicting modification
request to the directory server.
LIMITATIONS
Since LDAP directories require data be stored according to the UTF-8 (RFC3629) character encoding
method, all characters displayed by ldapugmod will be UTF-8, and assumed to be part of the ISO-10646
character set. ldapugmod will not perform conversion of the locale character set to/from the UTF-8 char-
acter set.
496 Hewlett-Packard Company − 8 − HP-UX 11i Version 2: December 2007 Update