System Administration Guide: Naming and Directory Services (DNS, NIS, and LDAP)

LDAP Commands

There are two sets of LDAP related commands in Solaris. One set is the general LDAP tools which do not require the client to be configured with the LDAP naming service. The second set use the common LDAP configuration on the client and therefore can only be used if the client is configured to use LDAP as its naming service.

General LDAP Tools

LDAP command line tools support a common set of options, including authentication and bind parameters.

These commands can be used to manipulate directory entries directly. The ldapsearch, ldapadd, and ldapmodify tools support a common text-based format for representing directory information called the LDAP Data Interchange Format (LDIF).

Table 18–3 LDAP Tools


Tool	Function
ldapsearch(1)	Use to search for directory entries in the namespace. Displays attributes and values found.
ldapmodify(1)	Use to modify, or add directory entry.
ldapadd(1)	Use to add new directory entry.
ldapdelete(1)	Use to delete existing directory entry.

LDAP Tools Requiring LDAP Naming Services

Table 18–4 Tools (from Section 1 Man Pages)


Tool	Function
ldapaddent(1M)	Used to create entries in LDAP containers from their corresponding `/etc` files. This tool allows populating the directory from files. For example it reads `/etc/passwd` format file and populate `passwd` entries in the directory.
`ldaplist`	Used to list contents of various services from the directory.
`idsconfig`	Used to set up iPlanet Directory Server 5.1 to serve LDAP naming service clients.