Adding Directory Entries

You can add one or more entries to a directory server by using the ldapmodify command. ldapmodify opens a connection to the directory server, binds to it, and performs the modification to the database (in this case, an "add") as specified by the command-line options.

ldapmodify enables you to add entries in one of two ways:

• Using the --defaultAdd option. Use the --defaultAdd option to add new entries to the directory when data is entered on the command line. Press Ctrl-D (UNIX, Linux) or Ctrl-Z (Windows) when finished, or use an input file with your changes.

• Using LDIF update statements. LDIF update statements define how ldapmodify changes the directory entry. LDIF update statements contain the DN of the entry to be modified, changetype that defines how a specific entry is to be modified (add, delete, modify, modrdn), and a series of attributes and their changed values.

Note - Any newly added entry must conform to the directory's schema. If you add any entry that does not conform to the schema, the server responds with an Object Class Violation error. You can view the details of the error in the errors log.

To Create a Root Entry

The root entry is the topmost entry in the directory and must contain the naming context, or root suffix. You can set up the root entry when you first install the directory server using the graphical user interface (GUI) or the command-line. If you install the directory without any data, create a root entry using the ldapmodify command with the --defaultAdd option.

1. Create the root entry using ldapmodify.

   $ ldapmodify --hostname localhost --port 1389 --defaultAdd \
     --bindDN "cn=Directory Manager" --bindPassword password
   dn: dc=example,dc=com
   objectclass: domain
   objectclass: top
   dc: example
   (Press Ctrl-D on Unix, Linux)
   (Press Ctrl-Z on Windows), then press ENTER.
   
   Processing ADD request for dc=example,dc=com
   ADD operation successful for DN dc=example,dc=com

   ---

   Note - The --bindDN and --bindPassword options specify the bind DN and password, respectively, of the user with permissions to add new entiries. You can provide the clear-text version of the password. The server encrypts this value and store only the encrypted one. Be sure to limit read permissions to protect clear passwords that appear in LDIF files. To avoid this security issue, use SSL or startTLS.

   ---

2. Verify the change by using the ldapsearch command.

   $ ldapsearch --hostname localhost --port 1389 --baseDN "dc=example,dc=com" \
     --searchScope base --bindDN "cn=Directory Manager" --bindPassword password \
     "(objectclass=*)"
   dn: dc=example,dc=com
   objectClass: domain
   objectClass: top
   dc: example

To Add an Entry Using the --defaultAdd Option With ldapmodify

1. Create your directory entry in LDIF format.

   Before you add an entry, ensure that the suffix to which you want to add the entry exists in your database (for example, ou=People,dc=example,dc=com).

   For this example, create an input file called new.ldif with the following contents:

   dn: uid=Marcia Garza,ou=People,dc=example,dc=com
   cn: Marcia Garza
   sn: Garza
   givenName: Marcia
   objectClass: top
   objectClass: person
   objectClass: organizationalPerson
   objectClass: inetOrgPerson
   ou: Accounting
   ou: People
   l: Santa Clara
   uid: mgarza
   mail: mgarza@example.com
   roomnumber: 5484
   userpassword: donuts

2. Add the entry using ldapmodify with the --defaultAdd option.

   $ ldapmodify --hostname localhost --port 1389 --bindDN "cn=Directory Manager" \
     --bindPassword password --defaultAdd --filename /tmp/new.ldif

To Add Entries Using an LDIF Update Statement With ldapmodify

1. Create the entry in LDIF format with the changetype:add element.

   Make sure that there are no trailing spaces after add. If a space exists after add, the server base-64 encodes the value to represent the space, which can cause problems.

   For this example, create an input LDIF file named new.ldif.

   dn: uid=Marcia Garza,ou=People,dc=example,dc=com
   changetype: add
   cn: Marcia Garza
   sn: Garza
   givenName: Marcia
   objectClass: top
   objectClass: person
   objectClass: organizationalPerson
   objectClass: inetOrgPerson
   ou: Accounting
   ou: People
   l: Santa Clara
   uid: mgarza
   mail: mgarza@example.com
   roomnumber: 5484
   userpassword: donuts

2. Add the entry using ldapmodify.

   Do not include the -a option as the changetype attribute specifies the action.

   $ ldapmodify --hostname localhost --port 1389 --bindDN "cn=Directory Manager" \
     --bindPassword password --filename /tmp/new.ldif
   
   Processing ADD request for uid=Marcia Garza,ou=People,dc=example,dc=com
   ADD operation successful for DN uid=Marcia Garza,ou=People,dc=example,dc=com