Chapter 3   Delegated Administrator Command-line Utilities


The command-line utilities for iPlanet Delegated Administrator for Messaging manage domain administrators, users, and groups for iPlanet Messaging Server 5.0.

The commands are listed in Table 3-1.

Table 3-1    Delegated Administrator Command Line Interfaces 

Command	Description	Which administrator has permission to execute this command
imadmin admin add	Grants domain administrator privileges to a user.	Top-level Admin.
imadmin admin remove	Revokes domain administrator privileges from a user.	Top-level Admin.
imadmin admin search	Searches and displays users who have domain administrator privileges.	Anybody
imadmin domain create	Creates a domain.	Top-level Admin.
imadmin domain delete	Deletes a domain.	Top-level Admin.
imadmin domain modify	Modifies a domain.	Top-level Admin.
imadmin domain purge	Purges a domain.	Top-level Admin.
imadmin domain search	Searches for a domain.	Anybody
imadmin family create	Creates a family group.	Top-level, Domain Admins
imadmin family delete	Deletes a family group.	Top-level, Domain Admins.
imadmin family modify	Modifies a family group.	Top-level, Domain Admins.
imadmin family purge	Purges a family group.	Top-level Admin.
imadmin family search	Searches for a family group.	Anybody
imadmin family-admin add	Grants family administrator privileges to a user.	Top-level, Domain, Family Admins.
imadmin family-admin remove	Revokes family administrator privileges from a user.	Top-level, Domain, Family Admins.
imadmin family-admin search	Searches and displays users who have family administrator privileges.	Anybody
imadmin family-member create	Adds a member to a family group.	Top-level, Domain, Family Admins.
imadmin family-member delete	Marks a family group member for deletion from the directory.	Top-level, Domain, Family Admins.
imadmin family-member remove	Removes the membership of the specified user.	Top-level, Domain, Family Admins.
imadmin family-member search	Searches for a family group member.	Anybody
imadmin group create	Creates a group.	Top-level, Domain Admins and Mail list owner.
imadmin group delete	Deletes a group.	Top-level, Domain Admins and Mail list owner.
imadmin group modify	Modifies a group.	Top-level, Domain Admins and Mail list owner.
imadmin group purge	Purges a group.	Top-level Admin.
imadmin group search	Searches for a group.	Anybody
imadmin user create	Creates a user.	Top-level, Domain Admins.
imadmin user delete	Deletes a user.	Top-level, Domain Admins.
imadmin user modify	Modifies a user.	Top-level, Domain Admins.
imadmin user purge	Purges a user.	Top-level Admin.
imadmin user search	Searches for a user.	Anybody

Execution Modes

---

The command line execution has three possible modes:

• Interactive

     imadmin object task

  The administrator is queried for the remainder of the options and attributes.

• Execute with options specified in a file

     imadmin object task -i inputfile

  Analyzes inputfile and executes it.

• Immediate or shell execution

     imadmin object task [options]

Command File Format

---

Options can be specified within a file, using the -i option.

Within the file, option names are separated from option values by white space. The option value begins with the first non-white space character and extends to the end-of-line character. Option sets are separated by blank lines.

The general syntax is:

<option name><white space>[option value, if any] <option name><white space>[option value, if any] ... <option name><white space>[option value, if any] <blank line> <option name><white space>[option value, if any] <option name><white space>[option value, if any] ... <option name><white space>[option value, if any]

The command line values become the default for each option set. Alternatively, these options can be specified for each option set. The value then overrides any default specified on the command line.

The following shows an example of the format and syntax for the file specified by the -i option for the imadmin user add command.

l newuser1 F new L user1 W secret l newuser2 F new L user2 W secret l newuser3 F new L user3 W secret <and so on...>

Command Descriptions

---

This section provides descriptions, syntax, and examples for the Delegated Administrator commands.

imadmin admin add

The imadmin admin add command adds domain administrators for a particular domain.

The imadmin admin add command can also be used to grant Domain Administrator privileges to a user.

Syntax

imadmin admin add -D login -l login -n domain -w password [-d domain] [-h] [-i inputfile] [-p idaport] [-X idahost] [-s] [-v]

Options

The following options are mandatory:

Option	Description
-D login	The user id of the Top-level Administrator.
-l login	The uid of the user to whom you want to grant administrative privileges.The user should be present in the directory.
-n domain	The domain of the Top-level Administrator.
-w password	The password of the Top-level Administrator.

The following options are non-mandatory:

Options	Description
-d domain	The domain to which you want to grant administrative privileges. If not specified, the domain specified by the -n option is used.
-h	Prints command usage syntax.
-i inputfile	Reads the command information from a file instead of from the command line.
-p idaport	Use this option to specify an alternate TCP port where the iDA server is listening. If not specified, the default idaport will be used, or 80 if no default was configured at install time.
-X idahost	Specifies an alternate host on which the enterprise server is running. If the -X option is specified and that server does not respond, then the command will fail; it does not try to connect to the default server. If not specified, the default idahost will be used, or the localhost if no default was configured at install time.
-s	Use SSL (Secure Socket Layer) to connect to the iDA server.
-v	Enable debugging output.

Examples

The following grants domain administrator privileges to the user with userid admin1.

imadmin admin add -D chris -n siroe.com -w bolton -l admin1

The following grants domain administrator privileges to the user with userid admin2 for the domain acme2.com.

imadmin add admin -D chris -w bolton -l admin2 -n acme2.com

imadmin admin remove

The imadmin admin remove command removes domain administrator privileges from a user. To remove domain administrator privileges from multiple users, use the -i option.

Syntax

imadmin admin remove -D login -l userid -n domain -w password [-d domain] [-h] [-i inputfile] [-p idaport] [-X idahost] [-s] [-v]

Options

The following options are mandatory:

Option	Description
-D login	The user id of the Top-level Administrator.
-l userid	The user id of the user to whom administrator privileges are revoked.
-n domain	The domain of the Top-level Administrator.
-w password	The password of the Top-level Administrator.

The following options are non-mandatory:

Option	Description
-d domain	The domain to which administrator privileges are revoked.
-h	Prints command usage syntax.
-i inputfile	Reads the command information from a file instead of from the command line.
-p idaport	Use this option to specify an alternate TCP port where the iDA server is listening. If not specified, the default idaport will be used, or 80 if no default was configured at install time.
-X idahost	Specifies an alternate host on which the enterprise server is running. If the -X option is specified and that server does not respond, then the command will fail; it does not try to connect to the default server. If not specified, the default idahost will be used, or the localhost if no default was configured at install time.
-s	Use SSL (Secure Socket Layer) to connect to the iDA server.
-v	Enable debugging output.

Example

The following command removes domain administrator privileges from the administrator with user id admin5:

imadmin admin remove -D chris -n siroe.com -w bolton \ -l admin5 -d test.com

imadmin admin search

The imadmin admin search command searches and displays users who have domain administrator privileges.

Syntax

imadmin admin search -D login -n domain -w password [-d domain] [-h] [-i inputfile] [-p idaport] [-X idahost] [-s] [-v]

Options

The following options are mandatory:

Option	Description
-D login	The user id of the user with permission to execute this command.
-n domain	The domain of the user specified with the -D option.
-w password	The password of the user specified with the -D option.

The following options are non-mandatory:

Option	Description
-d domain	Searches for users who have domain administrator privileges for the specified domain. If -d is not specified, the domain specified by -n is used.
-h	Prints command usage syntax.
-i inputfile	Reads the command information from a file instead of from the command line.
-p idaport	Use this option to specify an alternate TCP port where the iDA server is listening. If not specified, the default idaport will be used, or 80 if no default was configured at install time.
-X idahost	Specifies an alternate host on which the enterprise server is running. If the -X option is specified and that server does not respond, then the command will fail; it does not try to connect to the default server. If not specified, the default idahost will be used, or the localhost if no default was configured at install time.
-s	Use SSL (Secure Socket Layer) to connect to the iDA server.
-v	Enable debugging output.

Example

To search for all domain administrators of the test.com domain:

imadmin admin search -D chris -n siroe.com -w bolton \ -d test.com

imadmin domain create

The imadmin domain create command creates a single domain in the iMS 5.0 system. To create multiple domains, use the -i option.

Syntax

imadmin domain create -D login -d domain -H mailhost -n domain -w password [-A [+|-]attributename:value] [-h] [-i inputfile] [-p idaport] [-t domaincontainer] [-X idahost] [-s] [-v]

Options

The following options are mandatory:

Option	Description
-D login	The user id of the Top-level Administrator.
-d domain	The name of the domain that is being created.
-H mailhost	The mail host to which this domain responds (for example, mailhost.bavo.com).
-n domain	The domain of the Top-level Administrator.
-w password	The password of the Top-level Administrator.

The following options are non-mandatory:

Option	Description
-A [+ | -]attributename:value	An attribute to modify. The attributename is defined in the LDAP schema and value replaces any and all current values for this attribute in the directory. You can repeat this option to modify multiple attributes at the same time, or to specify multiple values for the same attribute. A "+" before the attributename indicates adding the value to the current list of attributes. A "-" indicates removing the value.
-h	Prints command usage syntax.
-i inputfile	Reads the command information from a file instead of from the command line.
-t domaincontainer	The domain container DN for the domain. This is the pointer into the tree where the domain's users and groups are stored. If this option is not specified then a domain container is created under the osisuffix specified in the iDA servlet properties.
-p idaport	Use this option to specify an alternate TCP port where the iDA server is listening. If not specified, the default idaport will be used, or 80 if no default was configured at install time.
-X idahost	Specifies an alternate host on which the enterprise server is running. If the -X option is specified and that server does not respond, then the command will fail; it does not try to connect to the default server. If not specified, the default idahost will be used, or the localhost if no default was configured at install time.
-s	Use SSL (Secure Socket Layer) to connect to the iDA server.
-v	Enable debugging output.

Example

To create a new domain, enter:

imadmin domain create -D chris -d test.com -n siroe.com \ -w bolton

imadmin domain delete

The imadmin domain delete command deletes a single hosted domain from the iMS 5.0 system and sets inetdomainstatus to "delete." To delete multiple hosted domains, use the -i option.

No undelete utility exists. However, the administrator can use the ldapmodify command to change the status attribute of a domain entry to active at any time before the purge grace period has expired and a purge is set to run against the entry.

Syntax

imadmin domain delete -D login -d domain -n domain -w password [-h] [-i inputfile] [-p idaport] [-X idahost] [-s] [-v]

Options

The following options are mandatory:

Option	Description
-D login	The user id of the Top-level Administrator.
-d domain	The domain that is being deleted.
-n domain	The domain of the Top-level Administrator.
-w password	The password of the Top-level Administrator.

The following options are non-mandatory:

Option	Description
-h	Prints command usage syntax.
-i inputfile	Reads the command information from a file instead of from the command line.
-p idaport	Use this option to specify an alternate TCP port where the iDA server is listening. If not specified, the default idaport will be used, or 80 if no default was configured at install time.
-X idahost	Specifies an alternate host on which the enterprise server is running. If the -X option is specified and that server does not respond, then the command will fail; it does not try to connect to the default server. If not specified, the default idahost will be used, or the localhost if no default was configured at install time.
-s	Use SSL (Secure Socket Layer) to connect to the iDA server.
-v	Enable debugging output.

Example

To delete an existing domain:

imadmin domain delete -D chris -d test.com -n siroe.com \ -w bolton

imadmin domain modify

The imadmin domain modify command modifies attributes of a single domain's directory entry. To modify multiple domains, use the -i option.

Syntax

imadmin domain modify -D login -d domain -n domain -w password [-A [+|-]attributename:value] [-h] [-i inputfile] [-p idaport] [-X idahost] [-s] [-v]

Options

The following options are mandatory:

Option	Description
-D login	The user id of the Top-level Administrator.
-d domain	The domain to be modified.
-n domain	The domain of the Top-level Administrator.
-w password	The password of the Top-level Administrator.

The following options are non-mandatory:

Option	Description
-A [+ | -]attributename:value	An attribute to modify. The attributename is defined in the LDAP schema and value replaces any and all current values for this attribute in the directory. You can repeat this option to modify multiple attributes at the same time, or to specify multiple values for the same attribute. A "+" before the attributename indicates adding the value to the current list of attributes. A "-" indicates removing the value.
-h	Prints command usage syntax.
-i inputfile	Reads the command information from a file instead of from the command line.
-p idaport	Use this option to specify an alternate TCP port where the iDA server is listening. If not specified, the default idaport will be used, or 80 if no default was configured at install time.
-X idahost	Specifies an alternate host on which the enterprise server is running. If the -X option is specified and that server does not respond, then the command will fail; it does not try to connect to the default server. If not specified, the default idahost will be used, or the localhost if no default was configured at install time.
-s	Use SSL (Secure Socket Layer) to connect to the iDA server.
-v	Enable debugging output.

Example

To modify an existing domain:

imadmin domain modify -D chris -w bolton -n siroe.com \ -d domain1.com -A mailhosts:test.sun.com

imadmin domain purge

The imadmin domain purge command permanently removes all deleted domains from the iMS 5.0 system.

As part of periodic maintenance operations, use the imadmin domain purge command to remove all domains that have been deleted for a time period that is longer than the specified grace period.

You can perform a purge at any time by invoking the command manually.

When you invoke the command, these actions occur in the following order:

1. The directory is searched and a list of iMS 5.0 domains is created whose entries include domains that have been marked for deletion longer than the specified grace period. (The default value for the grace period is initially set to 10 days at the time of installation.)

2. Each domain's entire directory entry is removed if the inetdomainstatus attribute is deleted. Each domain is stripped of mail related attributes if the maildomainstatus attribute is deleted.

3. All users and mail lists within each domain are also removed or stripped.

No undelete utility exists. However, the administrator can use the ldapmodify command to change the status attribute of a domain entry to active at any time before the purge grace period has expired and a purge is set to run against the entry.

Syntax

imadmin domain purge -D login -d domain -n domain -w password [-g grace] [-h] [-i inputfile] [-P] [-p idaport] [-r] [-X idahost] [-s] [-v]

Options

The following options are mandatory:

Option	Description
-D login	The user id of the Top-level Administrator.
-d domain	The domain to be purged.
-n domain	Domain of the Top-level Administrator.
-w password	Password of the Top-level Administrator.

The following options are non-mandatory:

Option	Description
-g grace	Grace period in days before the domain is purged. Domains marked for deletion for less than grace days will not be purged. A 0 indicates purge immediately. The default value is read from the configuration file on the server. At installation time the default value is set to 10 days.
-h	Prints command usage syntax.
-i inputfile	Reads the command information from a file instead of from the command line.
-r	Removes the entire subtree rooted at the domain entry's node.
-P	Preview only. Does not perform the purge.
-p idaport	Use this option to specify an alternate TCP port where the iDA server is listening. If not specified, the default idaport will be used, or 80 if no default was configured at install time.
-X idahost	Specifies an alternate host on which the enterprise server is running. If the -X option is specified and that server does not respond, then the command will fail; it does not try to connect to the default server. If not specified, the default idahost will be used, or the localhost if no default was configured at install time.
-s	Use SSL (Secure Socket Layer) to connect to the iDA server.
-v	Enable debugging output.

Example

To purge an existing domain:

imadmin domain purge -D chris -d test.com -n siroe.com \ -w bolton

imadmin domain search

The imadmin domain search command obtains all the directory properties associated with a single domain. To obtain all the directory properties for multiple domains, use the -i option.

Syntax

imadmin domain search -D domain -n domain -w password [-d domain] [-h] [-i inputfile] [-p idaport] [-X idahost] [-s] [-v]

Options

The following options are mandatory:

Option	Description
-D login	The user id of the user with permission to execute this command.
-n domain	The domain of the user specified with the -D option.
-w password	The password of the user specified with the -D option.

The following options are non-mandatory:

Option	Description
-d domain	Search for this domain.
-h	Prints command usage syntax.
-i inputfield	Reads the command information from a file instead of from the command line.
-p idaport	Use this option to specify an alternate TCP port where the iDA server is listening. If not specified, the default idaport will be used, or 80 if no default was configured at install time.
-X idahost	Specifies an alternate host on which the enterprise server is running. If the -X option is specified and that server does not respond, then the command will fail; it does not try to connect to the default server. If not specified, the default idahost will be used, or the localhost if no default was configured at install time.
-s	Use SSL (Secure Socket Layer) to connect to the iDA server.
-v	Enable debugging output.

imadmin family create

The imadmin family create command creates a single family group in the iMS 5.0 system. To add multiple family groups, use the -i option.

Syntax

imadmin family create -D login -m familyname -n domain -u userid -w password [-A [+|-]attributename:value] [-d familydomain] [-h] [-i inputfile] [-p idaport] [-X idahost] [-s] [-v]

Options

The following options are mandatory:

Option	Description
-D login	The user id of the user with permission to execute this command.
-m familyname	The name of the family group. familyname must be a single word without any spaces.
-n domain	The domain of the user specified with the -D option.
-u userid	The userid of the person to whom billing information is sent.
-w password	The password of the user specified with the -D option.

The following options are non-mandatory:

Option	Description
-A [+ | -]attributename:value	An attribute to modify. The attributename is defined in the LDAP schema and value replaces any and all current values for this attribute in the directory. You can repeat this option to modify multiple attributes at the same time, or to specify multiple values for the same attribute. A "+" before the attributename indicates adding the value to the current list of attributes. A "-" indicates removing the value.
-d familydomain	Domain of the family group.
-h	Prints command usage syntax.
-i inputfile	Reads the command information from a file instead of from the command line.
-p idaport	Use this option to specify an alternate TCP port where the iDA server is listening. If not specified, the default idaport will be used, or 80 if no default was configured at install time.
-X idahost	Specifies an alternate host on which the enterprise server is running. If the -X option is specified and that server does not respond, then the command will fail; it does not try to connect to the default server. If not specified, the default idahost will be used, or the localhost if no default was configured at install time.
-s	Use SSL (Secure Socket Layer) to connect to the iDA server.
-v	Enable debugging output.

Example

To create a new family group, smith, enter:

imadmin family create -D chris -n siroe.com -w secret \ -m smith -u john

imadmin family delete

The imadmin family delete command deletes a single family group from the iMS 5.0 system and sets the mnggrpstatus to "deleted." To delete multiple family groups, use the -i option.

Members of the family group are deleted when a family group is deleted.

No undelete utility exists. However, you can use the ldapmodify command to change the status attribute of a family group entry to active at any time before the purge grace period has expired and a purge is set to run against the entry.

Syntax

imadmin family delete -D login -m familyname -n domain -w password [-d familydomain] [-h] [-i inputfile] [-p idaport] [-X idahost] [-s] [-v]

Options

The following options are mandatory:

Option	Description
-D login	The user id of the user with the permission to execute this command.
-m familyname	The name of the family group. familyname must be a single word without any spaces.
-n domain	Domain of the user specified with the -D option.
-w password	The password of the user specified with the -D option.

The following options are non-mandatory:

Option	Description
-d familydomain	Domain of the family group.
-h	Prints command usage syntax.
-i inputfile	Reads the command information from a file instead of from the command line.
-p idaport	Use this option to specify an alternate TCP port where the iDA server is listening. If not specified, the default idaport will be used, or 80 if no default was configured at install time.
-X idahost	Specifies an alternate host on which the directory server is running. If the -X option is specified and that server does not respond, then the command will fail; it does not try to connect to the default server. If not specified, the default idahost will be used, or the localhost if no default was configured at install time.
-s	Use SSL (Secure Socket Layer) to connect to the iDA server.
-v	Enable debugging output.

Example

To delete an existing family group:

imadmin family delete -D chris -n siroe.com -w bolton -w smith

imadmin family modify

The imadmin family modify command modifies attributes of a single family group's directory entry. To modify multiple family groups, use the -i option.

Syntax

imadmin family modify -D login -m familyname -n domain -w password [-A [+|-]attributename:value] [-d familydomain] [-h] [-i inputfile] [-p idaport] [-X idahost] [-s] [-v]

Options

The following options are mandatory:

Option	Description
-D login	The user id of the user with permission to execute this command.
-m familyname	The name of the family group. familyname must be a single word without any spaces.
-n domain	Domain of the user specified with the -D option.
-w password	The password of user specified with the -D option.

The following options are non-mandatory:

Option	Description
-A [+ | -]attributename:value	An attribute to modify. The attributename is defined in the LDAP schema and value replaces any and all current values for this attribute in the directory. You can repeat this option to modify multiple attributes at the same time, or to specify multiple values for the same attribute. A "+" before the attributename indicates adding the value to the current list of attributes. A "-" indicates removing the value.
-d familydomain	Domain of the family group.
-h	Prints command usage syntax.
-i inputfile	Reads the command information from a file instead of from the command line.
-p idaport	Use this option to specify an alternate TCP port where the iDA server is listening. If not specified, the default idaport will be used, or 80 if no default was configured at install time.
-X idahost	Specifies an alternate host on which the enterprise server is running. If the -X option is specified and that server does not respond, then the command will fail; it does not try to connect to the default server. If not specified, the default idahost will be used, or the localhost if no default was configured at install time.
-s	Use SSL (Secure Socket Layer) to connect to the iDA server.
-v	Enable debugging output.

Example

To modify an existing family group:

imadmin family modify -D chris -m smith -n siroe.com \ -w bolton -A description:"new family"

imadmin family purge

The imadmin family purge command permanently removes all deleted family groups from the iMS 5.0 system.

As part of periodic maintenance operations, use the imadmin family purge command to remove all family groups that have been deleted for a time period that is longer than the specified grace period.

You can perform a purge at any time by invoking the command manually.

When you invoke the command, the following actions occur:

1. The directory is searched and a list of iMS 5.0 family groups is created whose entries include family groups that have been marked for deletion longer than the specified grace period. (The default value for the grace period is initially set to 10 days at the time of installation.)

2. Each family group's entire directory entry is removed.

3. All the users in the family group are also purged when the family group is purged.

No undelete utility exists. However, you can use the ldapmodify command to change the status attribute of a family group entry to active at any time before the purge grace period has expired and a purge is set to run against the entry.

Syntax

imadmin family purge -D login -m familyname -n domain -w password [-d familydomain] [-g grace] [-h] [-i inputfield] [-P] [-p idaport] [-X idahost] [-s] [-v

Options

The following options are mandatory:

Option	Description
-D login	The user id of the user with permission to execute this command.
-m familyname	The name of the family group. familyname must be a single word without any spaces.
-n domain	The domain of the user specified with the -D option.
-w password	The password of the user specified with the -D option.

The following options are non-mandatory:

Option	Description
-d familydomain	The domain of the family group to be purged.
-g grace	The grace period in days before the family group is purged. Family groups marked for deletion for less than grace days will not be purged. A 0 indicates purge immediately. The default value is read from the configuration file on the server. At installation time the default value is set to 10 days.
-h	Prints command usage syntax.
-i inputfield	Reads the command information from a file instead of from the command line.
-P	Preview only, without performing any action.
-p idaport	Use this option to specify an alternate TCP port where the iDA server is listening. If not specified, the default idaport will be used, or 80 if no default was configured at install time.
-X idahost	Specifies an alternate host on which the enterprise server is running. If the -X option is specified and that server does not respond, then the command will fail; it does not try to connect to the default server. If not specified, the default idahost will be used, or the localhost if no default was configured at install time.
-s	Use SSL (Secure Socket Layer) to connect to the iDA server.
-v	Enable debugging output.

Example

To purge an existing family group:

imadmin family purge -D chris -n siroe.com -w bolton \ -d domain.com -m familyname

imadmin family search

The imadmin family search command obtains all the directory properties associated with a single family group. To obtain all the directory properties for multiple family groups, use the -i option.

Syntax

imadmin family search -D login -n domain -w password [-d familydomain] [-h] [-i inputfile] [-m familyname] [-p idaport] [-X idahost] [-s] [-v]

Options

The following options are mandatory:

Option	Description
-D login	The user id of the user with permission to execute this command.
-n domain	The domain of the user specified with the -D option.
-w password	The password of the user specified with the -D option.

The following options are non-mandatory:

Option	Description
-d familydomain	The domain of the family group
-h	Prints command usage syntax.
-i inputfield	Reads the command information from a file instead of from the command line.
-m familyname	Name of the family group.
-p idaport	Use this option to specify an alternate TCP port where the iDA server is listening. If not specified, the default idaport will be used, or 80 if no default was configured at install time.
-X idahost	Specifies an alternate host on which the enterprise server is running. If the -X option is specified and that server does not respond, then the command will fail; it does not try to connect to the default server. If not specified, the default idahost will be used, or the localhost if no default was configured at install time.
-s	Use SSL (Secure Socket Layer) to connect to the iDA server.
-v	Enable debugging output.

Example

The following example searches for family groups in the domain1.com domain:

imadmin family search -D chris -w bolton -d domain1.com \ -n siroe.com

imadmin family-admin add

The imadmin family-admin add command grants a user family administrator privileges.

Syntax

imadmin family-admin add -D login -l login -m familyname -n domain -w password [-d familydomain] [-h] [-i inputfile] [-p idaport] [-X idahost] [-s] [-v]

Options

The following options are mandatory:

Option	Description
-D login	The user id of the user with permission to execute this command.
-l login	User id of the family administrator.
-m familyname	Name of the family group.
-n domain	Domain of the user specified with the -D option.
-w password	Password of the user specified with the -D option.

The following options are non-mandatory:

Option	Description
-d familydomain	Domain of the family group.
-h	Prints command usage syntax.
-i inputfile	Reads the command information from a file instead of the command line.
-p idaport	Use this option to specify an alternate TCP port where the iDA server is listening. If not specified, the default idaport will be used, or 80 if no default was configured at install time.
-X idahost	Specifies an alternate host on which the enterprise server is running. If the -X option is specified and that server does not respond, then the command will fail; it does not try to connect to the default server. If not specified, the default idahost will be used, or the localhost if no default was configured at install time.
-s	Use SSL (Secure Socket Layer) to connect to the iDA server.
-v	Enable debugging output.

Example

To grant family administrator privileges to a user with userid parent1 to the family group Smith:

imadmin family-admin add -D chris -n siroe.com -w bolton \ -d test1.com -l parent1 -m Smith

imadmin family-admin remove

The imadmin family-admin remove command revokes Family Administrator privileges from a user.

Syntax

imadmin family-admin remove -D login -l login -m familyname -n domain -w password [-d familydomain] [-h] [-i inputfile] [-p idaport] [-X idahost] [-s] [-v]

Options

The following options are mandatory:

Option	Description
-D login	The user id of the user with permission to execute this command.
-l login	User id of the family administrator.
-m familyname	Name of the family group.
-n domain	Domain of the user specified with the -D option.
-w password	Password of the user specified with the -D option.

The following options are non-mandatory:

Option	Description
-d familydomain	Domain of the family group.
-h	Prints command usage syntax.
-i inputfile	Reads the command information from a file instead of the command line.
-p idaport	Use this option to specify an alternate TCP port where the iDA server is listening. If not specified, the default idaport will be used, or 80 if no default was configured at install time.
-X idahost	Specifies an alternate host on which the enterprise server is running. If the -X option is specified and that server does not respond, then the command will fail; it does not try to connect to the default server. If not specified, the default idahost will be used, or the localhost if no default was configured at install time.
-s	Use SSL (Secure Socket Layer) to connect to the iDA server.
-v	Enable debugging output.

Example

To remove family administrator privileges to a user with userid parent1 to the family group Smith:

imadmin family-admin remove -D chris -n siroe.com -w bolton \ -d test1.com -l parent1 -m Smith

imadmin family-admin search

The imadmin family-admin search command searches for and displays users who have Family Administrator privileges for a particular family group.

Syntax

imadmin family-admin search -D login -m familyname -n domain -w password [-d familydomain] [-h] [-i inputfile] [-p idaport] [-X idahost] [-s] [-v]

Options

The following options are mandatory:

Option	Description
-D login	The user id of the user with permission to execute this command.
-m familyname	Name of the family group.
-n domain	Domain of the user specified with the -D option.
-w password	Password of the user specified with the -D option.

The following options are non-mandatory:

Option	Description
-d familydomain	Domain of the family group.
-h	Prints command usage syntax.
-i inputfile	Reads the command information from a file instead of the command line.
-p idaport	Use this option to specify an alternate TCP port where the iDA server is listening. If not specified, the default idaport will be used, or 80 if no default was configured at install time.
-X idahost	Specifies an alternate host on which the enterprise server is running. If the -X option is specified and that server does not respond, then the command will fail; it does not try to connect to the default server. If not specified, the default idahost will be used, or the localhost if no default was configured at install time.
-s	Use SSL (Secure Socket Layer) to connect to the iDA server.
-v	Enable debugging output.

Example

imadmin family-admin search -D chris -w bolton -n siroe.com \ -m MyFamily

imadmin family-member create

The imadmin family-member create command adds a user to a particular family group.

Syntax

imadmin family-member create -D login -F firstname -H mailhost -L lastname -l login -m familyname -n domain -w password -W password [-A [+|-]attributename:value] [-d familydomain] [-h] [-I initial] [-i inputfile] [-p idaport] [-X idahost] [-s] [-v]

Options

The following options are mandatory:

Option	Description
-D login	The user id of the user with permission to execute this command.
-F firstname	The first name of the family member.
-H mailhost	Family member's mail host.
-L lastname	Last name of the family member.
-l login	User id of the family member.
-m familyname	Name of the family group.
-n domain	Domain of the user specified with the -D option.
-w password	Password of the user specified with the -D option.

-W password

Password of the family member.

The following options are non-mandatory:

Option	Description
-A [+ | -]attributename:value	An attribute to modify. The attributename is defined in the LDAP schema and value replaces any and all current values for this attribute in the directory. You can repeat this option to modify multiple attributes at the same time, or to specify multiple values for the same attribute. A "+" before the attributename indicates adding the value to the current list of attributes. A "-" indicates removing the value.
-d familydomain	Domain of the family group.
-h	Prints command usage syntax.
-I initial	Middle initial of the family member.
-i inputfile	Reads the command information from a file instead of from the command line.
-p idaport	Use this option to specify an alternate TCP port where the iDA server is listening. If not specified, the default idaport will be used, or 80 if no default was configured at install time.
-X idahost	Specifies an alternate host on which the enterprise server is running. If the -X option is specified and that server does not respond, then the command will fail; it does not try to connect to the default server. If not specified, the default idahost will be used, or the localhost if no default was configured at install time.
-s	Use SSL (Secure Socket Layer) to connect to the iDA server.
-v	Enable debugging output.

Example

To create a family member with userid peter to the family group Athens4:

imadmin family-member create -D chris -n siroe.com -w bolton \ -d test.com -l peter -m Athens4 -F Peter -L Beck -W secret

imadmin family-member delete

The imadmin family-member delete command marks a family group member as deleted. To remove the entry from the directory, use the imadmin user purge command.

Syntax

imadmin family-member delete -D login -l login -n domain -w password [-d familydomain] [-h] [-i inputfile] [-p idaport] [-X idahost] [-s] [-v]

Options

The following options are mandatory:

Option	Description
-D login	The user id of the user with permission to execute this command.
-l login	User id of the family member.
-m familyname	Name of the family group.
-n domain	Domain of the user specified with the -D option.
-w password	Password of the user specified with the -D option.

The following options are non-mandatory:

Option	Description
-d familydomain	Domain of the family group.
-h	Prints command usage syntax.
-i inputfile	Reads the command information from a file instead of from the command line.
-p idaport	Use this option to specify an alternate TCP port where the iDA server is listening. If not specified, the default idaport will be used, or 80 if no default was configured at install time.
-X idahost	Specifies an alternate host on which the enterprise server is running. If the -X option is specified and that server does not respond, then the command will fail; it does not try to connect to the default server. If not specified, the default idahost will be used, or the localhost if no default was configured at install time.
-s	Use SSL (Secure Socket Layer) to connect to the iDA server.
-v	Enable debugging output.

Example

To mark a family member with userid bill as deleted from the family group Athens4:

imadmin family-member delete -D chris -n siroe.com -w bolton \ -l bill -m Athens4

imadmin family-member remove

The imadmin family-member remove command removes the membership of the specified user.

Syntax

imadmin family-member remove -D login -l login -n domain -w password [-d familydomain] [-h] [-i inputfile] [-p idaport] [-X idahost] [-s] [-v]

Options

The following options are mandatory:

Option	Description
-D login	The user id of the user with permission to execute this command.
-l login	User id of the family member.
-n domain	Domain of the user specified with the -D option.
-w password	Password of the user specified with the -D option.

The following options are non-mandatory:

Option	Description
-d familydomain	Domain of the family group.
-h	Prints command usage syntax.
-i inputfile	Reads the command information from a file instead of from the command line.
-p idaport	Use this option to specify an alternate TCP port where the iDA server is listening. If not specified, the default idaport will be used, or 80 if no default was configured at install time.
-X idahost	Specifies an alternate host on which the enterprise server is running. If the -X option is specified and that server does not respond, then the command will fail; it does not try to connect to the default server. If not specified, the default idahost will be used, or the localhost if no default was configured at install time.
-s	Use SSL (Secure Socket Layer) to connect to the iDA server.
-v	Enable debugging output.

Example

To remove a family member, execute:

imadmin family-member remove -D chris -n siroe.com -w bolton \ -d test.com -l john -m Family1

imadmin family-member search

The imadmin family-member search command searches for a member of a family group.

Syntax

imadmin family-member search -D login -m familyname -n domain -w password [-d familydomain] [-h] [-i inputfile] [-p idaport] [-X idahost] [-s] [-v]

Options

The following options are mandatory:

Option	Description
-D login	The user id of the user with the permission to execute this command.
-m familyname	Name of the family group.
-n domain	Domain of the user specified with the -D option.
-w password	Password of the user specified with the -D option.

The following options are non-mandatory:

Option	Description
-d familydomain	Domain of the family group.
-h	Prints command usage syntax.
-i inputfile	Reads the command information from a file instead of from the command line.
-p idaport	Use this option to specify an alternate TCP port where the iDA server is listening. If not specified, the default idaport will be used, or 80 if no default was configured at install time.
-X idahost	Specifies an alternate host on which the enterprise server is running. If the -X option is specified and that server does not respond, then the command will fail; it does not try to connect to the default server. If not specified, the default idahost will be used, or the localhost if no default was configured at install time.
-s	Use SSL (Secure Socket Layer) to connect to the iDA server.
-v	Enable debugging output.

imadmin group create

The imadmin group create command adds a single group to the iMS 5.0 system. To create multiple groups, use the -i option.

An email distribution list is one type of group. When a message is sent to the group address, iMS 5.0 sends the message to all members in the group.

Syntax

imadmin group create -D login -G groupname -n domain -w password [-A [+|-]attributename:value] [-d groupdomain] [-h] [-H mailhost] [-i inputfile] [-m user] [-o owner] [-p idaport] [-r moderator] [-X idahost] [-s] [-v]

Options

The following options are mandatory:

Option	Description
-D login	The user id of the user who has permission to execute this command.
-n domain	The domain of the user specified by the -D option.
-G groupname	The name of the group (for example, mktg-list).
-w password	The password of the user specified by the -D option.

The following options are non-mandatory:

Option	Description
-A [+ | -]attributename:value	An attribute to modify. The attributename is defined in the LDAP schema and value replaces any and all current values for this attribute in the directory. You can repeat this option to modify multiple attributes at the same time, or to specify multiple values for the same attribute. A "+" before the attributename indicates adding the value to the current list of attributes. A "-" indicates removing the value.
-d groupdomain	The fully qualified domain name (for example, bravo.com). The default is the local domain.
-h	Prints command usage syntax.
-H mailhost	The mail host to which this group responds (for example, mailhost.bavo.com). The default is the local mail host.
-i inputfile	Reads the command information from a file instead of from the command line.
-m user	User id of the members. If more than one member, use multiple -m options.
-o owner	The group owner's email address. An owner is the individual responsible for the distribution list. An owner can add or delete distribution list members.
-r moderator	The moderator's email address.
-p idaport	Use this option to specify an alternate TCP port where the iDA server is listening. If not specified, the default idaport will be used, or 80 if no default was configured at install time.
-X idahost	Specifies an alternate host on which the enterprise server is running. If the -X option is specified and that server does not respond, then the command will fail; it does not try to connect to the default server. If not specified, the default idahost will be used, or the localhost if no default was configured at install time.
-s	Use SSL (Secure Socket Layer) to connect to the iDA server.
-v	Enable debugging output.

Example

To create a group testgroup to the domain domain1.com:

imadmin group create -D chris -n siroe.com -w bolton \ -G testgroup -d domain1.com

imadmin group delete

The imadmin group delete command deletes a single group from the iMS 5.0 system. To delete multiple groups, use the -i option.

When you invoke the imadmin group delete command, the inetmailgroupstatus attribute of the group is set to deleted.

No undelete utility exists. However, you can use the ldapmodify command to change the status attribute of a group entry to active at any time before the purge grace period has expired and a purge is set to run against the entry.

Syntax

imadmin group delete -D login -G groupname -n domain -w password [-d groupdomain] [-h] [-i inputfile] [-p idaport] [-X idahost] [-s] [-v]

Options

The following are mandatory options:

Option	Description
-D login	The user id of the user who has permission to execute this command.
-G groupname	The name of the group to be deleted. For example, mktg-list.
-n admindomain	The domain of the user specified by the -D option.
-w password	The password of the user specified by the -D option.

The following are non-mandatory options:

Option	Description
-d groupdomain	The domain of the group. If -d is not specified, the domain specified by the -n option is used.
-h	Prints command usage syntax.
-i inputfile	Reads the command information from a file instead of from the command line.
-p idaport	Use this option to specify an alternate TCP port where the iDA server is listening. If not specified, the default idaport will be used, or 80 if no default was configured at install time.
-X idahost	Specifies an alternate host on which the enterprise server is running. If the -X option is specified and that server does not respond, then the command will fail; it does not try to connect to the default server. If not specified, the default idahost will be used, or the localhost if no default was configured at install time.
-s	Use SSL (Secure Socket Layer) to connect to the iDA server.
-v	Enable debugging output.

Example

To delete the group testgroup@domain1.com:

imadmin group delete -D chris -G testgroup@domain1.com \ -n siroe.com -w bolton

imadmin group modify

The imadmin group modify command changes the attributes of a single group that already exists in the iMS 5.0 system. To change multiple groups, use the -i option.

A mailing list is one type of group. When a message is sent to the group address, iMS 5.0 sends the message to all members in the group.

Syntax

imadmin group modify -D login -G groupname -n domain -w password [-A [+|-]attributename:value] [-d groupdomain] [-h] [-i inputfile] [-p idaport] [-X idahost] [-s] [-v]

Options

The following are mandatory options:

Option	Description
-D login	The user id of the user with permission to execute this command.
-G groupname	The name of the group to be modified. For example, mktg-list. The name of the group cannot be modified.
-n admindomain	The domain of the user specified by the -D option.
-w password	The password of the user specified by the -D option.

The following are non-mandatory options:

Option	Description
-A [+ | -]attributename:value	An attribute to modify. The attributename is defined in the LDAP schema and value replaces any and all current values for this attribute in the directory. You can repeat this option to modify multiple attributes at the same time, or to specify multiple values for the same attribute. A "+" before the attributename indicates adding the value to the current list of attributes. A "-" indicates removing the value.
-d groupdomain	The domain of the group. If -d is not specified, the domain specified by the -n option is used.
-h	Prints command usage syntax.
-i inputfile	Reads the command information from a file instead of from the command line.
-p idaport	Use this option to specify an alternate TCP port where the iDA server is listening. If not specified, the default idaport will be used, or 80 if no default was configured at install time.
-X idahost	Specifies an alternate host on which the enterprise server is running. If the -X option is specified and that server does not respond, then the command will fail; it does not try to connect to the default server. If not specified, the default idahost will be used, or the localhost if no default was configured at install time.
-s	Use SSL (Secure Socket Layer) to connect to the iDA server.
-v	Enable debugging output.

Example

To modify the group testgroup@domain1.com:

imadmin group modify -D chris -G testgroup@domain1.com \ -n siroe.com -w bolton

imadmin group purge

The imadmin group purge command permanently removes all deleted groups from the iMS 5.0 system.

As part of periodic maintenance operations, use the imadmin group purge command to permanently remove all groups that have been deleted for a time period that is longer than the specified grace period.

You can perform a purge at any time by invoking the command manually.

When you invoke the command, the following actions occur:

1. The directory is searched and a list of iMS 5.0 groups is created whose entries include groups that have been marked for deletion longer than the specified grace period. (The default value for the grace period is initially set to 10 days at the time of installation.)

2. Each group's entire directory entry is removed or stripped of all mail related attributes if the -S option is specified.

No undelete utility exists. However, you can use the ldapmodify command to change the status attribute of a group entry to active at any time before the purge grace period has expired and a purge is set to run against the entry.

Syntax

imadmin group purge -D login -G groupname -n domain -w password [-d groupdomain] [-g grace] [-h] [-i inputfield] [-P] [-p idaport] [-S] [-s] [-v] [-X idahost]

Options

The following options are mandatory:

Option	Description
-D login	The user id of the user with permission to execute this command.
-G groupname	The name of the group to be modified. For example, mktg-list. The name of the group cannot be modified.
-n domain	The domain of the user specified with the -D option.
-w password	The password of the user specified with the -D option.

The following options are non-mandatory:

Option	Description
-d groupdomain	The domain of the group to be purged. If -d is not specified, the domain of -n is used.
-g grace	The grace period in days before the group is purged. Groups marked for deletion for less than grace days will not be purged. A 0 indicates purge immediately. The default value is read from the configuration file on the server. At installation time the default value is set to 10 days.
-h	Prints command usage syntax.
-i inputfile	Reads the command information from a file instead of from the command line.
-P	Preview only.
-p idaport	Use this option to specify an alternate TCP port where the iDA server is listening. If not specified, the default idaport will be used, or 80 if no default was configured at install time.
-X idahost	Specifies an alternate host on which the enterprise server is running. If the -X option is specified and that server does not respond, then the command will fail; it does not try to connect to the default server. If not specified, the default idahost will be used, or the localhost if no default was configured at install time.
-S	Strip mail attributes only.
-s	Use SSL (Secure Socket Layer) to connect to the iDA server.
-v	Enable debugging output.

Example

To purge an existing group:

imadmin group purge -D chris -n siroe.com -w bolton \ -G groupname

imadmin group search

The imadmin group search command obtains all the directory properties associated with a single group. To obtain all the directory properties for multiple groups, use the -i option.

Syntax

imadmin group search -D login -n domain -w password [-d groupdomain] [-G groupname] [-h] [-i inputfile] [-p idaport] [-X idahost] [-s] [-v]

Options

The following options are mandatory:

Option	Description
-D login	The user id of the user with permission to execute this command.
-n domain	The domain of the user specified by the -D option.
-w password	The password of the user specified by the -D option.

The following options are non-mandatory:

Option	Description
-d groupdomain	The domain of the group to be searched. If -d is not specified, the domain of -n is used.
-G groupname	The name of the group to be searched. For example, mktg-list. The name of the group cannot be modified.
-h	Prints command usage syntax.
-i inputfile	Reads the command information from a file instead of from the command line.
-p idaport	Use this option to specify an alternate TCP port where the iDA server is listening. If not specified, the default idaport will be used, or 80 if no default was configured at install time.
-X idahost	Specifies an alternate host on which the enterprise server is running. If the -X option is specified and that server does not respond, then the command will fail; it does not try to connect to the default server. If not specified, the default idahost will be used, or the localhost if no default was configured at install time.
-s	Use SSL (Secure Socket Layer) to connect to the iDA server.
-v	Enable debugging output.

Example

To search new groups:

imadmin group search -D chris -n siroe.com -w password \ -G=newgroup

imadmin user create

The imadmin user create command creates a single user to the iMS 5.0 system. To create multiple users, use the -i option.

Syntax

imadmin user create -D login -F firstname -L lastname -l userid -n domain -W password -w password [-A [+|-]attributename:value] [-d userdomain] [-H hostname] [-h] [-I initial] [-i inputfile] [-p idaport] [-X idahost] [-s] [-v]

Options

The following options are mandatory:

Option	Description
-D login	The user id of the user with permission to execute this command.
-F firstname	The user's first name.
-L lastname	The user's last name.
-l userid	The user's login name.
-n domain	The domain of the user specified by the -D option.
-W password	The user's password.
-w password	The password of the user specified by the -D option.

The following options are non-mandatory:

Option	Description
-A [+ | -]attributename:value	An attribute to modify. The attributename is defined in the LDAP schema and value replaces any and all current values for this attribute in the directory. You can repeat this option to modify multiple attributes at the same time, or to specify multiple values for the same attribute. A "+" before the attributename indicates adding the value to the current list of attributes. A "-" indicates removing the value.
-d userdomain	The domain of the user. If -d is not specified, the value of -n is used.
-H mailhost	The mail host to which this user responds (for example, mailhost.bavo.com). The default is the local mail host.
-h	Prints command usage syntax.
-I initial	The user's middle initial.
-i inputfile	Reads the command information from a file instead of from the command line.
-p idaport	Use this option to specify an alternate TCP port where the iDA server is listening. If not specified, the default idaport will be used, or 80 if no default was configured at install time.
-X idahost	Specifies an alternate host on which the enterprise server is running. If the -X option is specified and that server does not respond, then the command will fail; it does not try to connect to the default server. If not specified, the default idahost will be used, or the localhost if no default was configured at install time.
-s	Use SSL (Secure Socket Layer) to connect to the iDA server.
-v	Enable debugging output.

Example

The following command creates a user:

imadmin user create -D chris -n siroe.com -w bolton -F Rachel \ -L Smith -l rsmith -W secret

imadmin user delete

The imadmin user delete command deletes a single user from the iMS 5.0 system and sets the inetuserstatus to "deleted." To delete multiple users, use the -i option.

No undelete utility exists. However, you can use the ldapmodify command to change the status attribute of a user entry to active at any time before the purge grace period has expired and a purge is set to run against the entry.

Syntax

imadmin user delete -D login -l username -n domain -w password [-d userdomain] [-h] [-i inputfile] [-p idaport] [-X idahost] [-s] [-v]

Options

The following options are mandatory:

Option	Description
-D login	The user id of the user with permission to execute this command.
-l username	The user's user id.
-n admindomain	The domain of the user specified by the -D option.
-w password	The password of the user specified by the -D option.

The following options are non-mandatory:

Option	Description
-d userdomain	The domain of the user. If -d is not specified, the domain of -n is assumed.
-h	Prints command usage syntax.
-i inputfile	Reads the command information from a file instead of from the command line.
-p idaport	Use this option to specify an alternate TCP port where the iDA server is listening. If not specified, the default idaport will be used, or 80 if no default was configured at install time.
-X idahost	Specifies an alternate host on which the enterprise server is running. If the -X option is specified and that server does not respond, then the command will fail; it does not try to connect to the default server. If not specified, the default idahost will be used, or the localhost if no default was configured at install time.
-s	Use SSL (Secure Socket Layer) to connect to the iDA server.
-v	Enable debugging output.

Example

To delete a user:

imadmin user delete -D chris -l user1 -n siroe.com -w bolton

imadmin user modify

The imadmin user modify command changes the attributes of a single user that already exists in the iMS 5.0 system. To change multiple users, use the -i option.

Syntax

imadmin user modify -D login -l userid -n domain -w password [-A [+|-]attributename:value] [-d userdomain] [-h] [-i inputfile] [-p idaport] [-X idahost] [-s] [-v]

Options

The following are mandatory options:

Option	Description
-D login	The user id of the user with permission to execute this command.
-l userid	The userid of the user to be modified.
-n domain	The domain of the user specified by the -D option.
-w password	The password of the user specified by the -D option.

The following are non-mandatory options:

Option	Description
-A [+ | -]attributename:value	An attribute to modify. The attributename is defined in the LDAP schema and value replaces any and all current values for this attribute in the directory. You can repeat this option to modify multiple attributes at the same time, or to specify multiple values for the same attribute. A "+" before the attributename indicates adding the value to the current list of attributes. A "-" indicates removing the value.
-d userdomain	The domain of the user. If -d is not specified, the domain specified by the -n option is used.
-h	Prints command usage syntax.
-i inputfile	Reads the command information from a file instead of from the command line.
-p idaport	Use this option to specify an alternate TCP port where the iDA server is listening. If not specified, the default idaport will be used, or 80 if no default was configured at install time.
-X idahost	Specifies an alternate host on which the enterprise server is running. If the -X option is specified and that server does not respond, then the command will fail; it does not try to connect to the default server. If not specified, the default idahost will be used, or the localhost if no default was configured at install time.
-s	Use SSL (Secure Socket Layer) to connect to the iDA server.
-v	Enable debugging output.

Example

To modify the user user1@domain1.com:

imadmin user modify -D chris -l user1@domain1.com \ -n siroe.com -w bolton

imadmin user purge

The imadmin user purge command permanently deletes a single user from the iMS 5.0 system. To permanently delete multiple users, use the -i option.

As part of periodic maintenance operations, use the imadmin user purge command to permanently delete all users that have been deleted by the status attribute for a time period that is longer than the specified grace period.

You can perform a purge at any time by invoking the command manually.

When you invoke the command, the following actions occur:

1. The directory is searched and a list of iMS 5.0 users is created whose entries include users that have been marked for deletion longer than the specified grace period. (The default value for the grace period is initially set to 10 days at the time of installation.)

2. The mboxutil utility is invoked to delete each user's store mailbox.

3. Each user's entire directory entry is removed if the inetuserstatus is deleted. Each user is stripped of mail related attributes if the mailuserstatus attribute is deleted.

No undelete utility exists. However, you can use the ldapmodify command to change the status attribute of a user entry to active at any time before the purge grace period has expired and a purge is set to run against the entry.

Syntax

imadmin user purge -D login -l userid -n domain -w password [-d userdomain] [-g grace] [-h] [-i inputfield] [-P] [-p idaport] [-X idahost] [-s] [-v]

Options

The following options are mandatory:

Option	Description
-D login	The user id of the user with permission to execute this command.
-l userid	The user id of the user to be purged.
-n domain	The domain of the user specified by the -D option.
-w password	The password of the user specified by the -D option.

The following options are non-mandatory:

Option	Description
-d userdomain	The domain of the user to be purged. If -d is not specified, the domain of -n is used.
-g grace	The grace period in days before the user is purged. Users marked for deletion for less than grace days will not be purged. A 0 indicates purge immediately. The default value is read from the configuration file on the server. At installation time the default value is set to 10 days.
-h	Prints command usage syntax.
-i inputfield	Reads the command information from a file instead of from the command line.
-p idaport	Use this option to specify an alternate TCP port where the iDA server is listening. If not specified, the default idaport will be used, or 80 if no default was configured at install time.
-X idahost	Specifies an alternate host on which the enterprise server is running. If the -X option is specified and that server does not respond, then the command will fail; it does not try to connect to the default server. If not specified, the default idahost will be used, or the localhost if no default was configured at install time.
-s	Use SSL (Secure Socket Layer) to connect to the iDA server.
-v	Enable debugging output.

Example

To purge an existing user:

imadmin user purge -D chris -n siroe.com -w bolton -l scott

imadmin user search

The imadmin user search command obtains all the directory properties associated with a single user. To obtain all the directory properties for multiple users, use the -i option.

Syntax

imadmin user search -D login -n domain -w password [-d userdomain] [-F firstname] [-h] [-i inputfile] [-L lastname] [-l userid] [-p idaport] [-X idahost] [-s] [-v]

Options

The following options are mandatory:

Option	Description
-D login	The user id of the user with permission to execute this command.
-n domain	The domain of the user specified with the -D option.
-w password	The password of the user specified with the -D option.

The following options are non-mandatory:

Option	Description
-F firstname	The user's first name.
-L lastname	The user's last name
-l userid	The user's user id.
-h	Prints command usage syntax.
-i inputfield	Reads the command information from a file instead of from the command line.
-p idaport	Use this option to specify an alternate TCP port where the iDA server is listening. If not specified, the default idaport will be used, or 80 if no default was configured at install time.
-X idahost	Specifies an alternate host on which the enterprise server is running. If the -X option is specified and that server does not respond, then the command will fail; it does not try to connect to the default server. If not specified, the default idahost will be used, or the localhost if no default was configured at install time.
-s	Use SSL (Secure Socket Layer) to connect to the iDA server.
-v	Enable debugging output.

Example

To search for a user with the login testuser:

imadmin user search -D chris -n siroe.com -w bolton \ -l testuser