2.4.1.6.5 Targeting Specific Servers

The ldapCliAuthentication.sh script includes a --hostnames flag that allows running specific actions such as --add-user-to-group, --remove-user-from-group, or --add only on the specified servers, rather than applying changes to all the servers.

To apply an action only to certain servers, run the below command as admusr on Active NOAM (Network Operations, Administration, and Maintenance) server of the DSR topology.

/usr/TKLC/appworks/bin/ldapCliAuthentication.sh --add --ldap-uri "<LDAP_SERVER_URI>" --port "389" --base-dn "<BASE_DN>" --hostnames '<HOSTNAME1>,<HOSTNAME2>'

The above command performs LDAP configuration only on the specified hostnames, without this flag, the action applies to all the servers.

The --hostnames flag is supported for all the actions supported by the ldapCliAuthentication.sh script except the --delete flag.

Note:

  • Recommended practice: Run commands without the --hostnames flag to ensure all servers remain consistent in their LDAP configuration, user permissions, and /etc/hosts entries.
  • This flag is primarily provided to accommodate newly added servers to the topology.