Tag Archives: ldapmodify

LDAP: Administrative users

Introduction In an UnboundID LDAP directory server, the “Root DN” (root user) accounts have an extensive set of privileges in the default distribution of the server products; therefore the root DN account(s) should not be used in normal operation except … Continue reading

Posted in computing, LDAP, UnboundID | Tagged , , , , | Leave a comment

ldapmodify: be careful with attribute options

Clients must include the attribute options when using an attribute name following a mod-spec. Consider the following LDIF: # wrong dn: cn=test,c=us changetype: modify replace: your-attribute-name your-attribute-name;binary: binary-stuff your-attribute-name must contain the option (binary in this case). Here is the … Continue reading

Posted in computing, LDAP | Tagged , | Leave a comment

LDAP: Using parallel-update for concurrent multiple updates

For applying a small number of changes, ldapmodify is satisfactory. For a large number of changes, parallel-update has the capability of applying multiple changes simultaneously using an operator-provided number of threads. The following example uses 1024 threads to apply 1,000,000 … Continue reading

Posted in LDAP, UnboundID | Tagged , , , | Leave a comment

LDAP: Operations by Proxy

LDAP-compliant directory servers like the UnboundID Directory Server support the notion of allowing an authenticated connection to perform operations using the identity of another distinguished name. This is called “operation by proxy” or “Proxied Authorization”. This capability is specified in … Continue reading

Posted in LDAP | Tagged , , , , , , | Leave a comment

LDAP: Modify-Increment Extension

Modern, professional-quality directory servers support an LDAP extension called “Modify-Increment”. The extension, if supported, allows the developer or operator to increment an integer or other incrementable value by a specified increment in one operation. If this operation is not supported, … Continue reading

Posted in computing, LDAP | Tagged , , , , , , , , , | Leave a comment

LDAP: Moving and renaming entries and user data

Use ldapmodify with the moddn changetype keyword to move or rename entries in an LDAP database. The moddn request cannot be used to move entries between namingContexts or between servers. This article provides an example of moving an entry uid=user.0,ou=people,dc=example,dc=com … Continue reading

Posted in computing, Java, LDAP | Tagged , , , , , , , , , , , | Leave a comment

LDAP: Replace a value of a multi-valued attribute

create an entry add attributes delete all values of a multi-valued attribute example using Java This article describes how to replace values of a multi-valued attribute in a directory database using the ldapmodify tool. For more general information about ldapmodify … Continue reading

Posted in computing, Java, LDAP, UnboundID LDAP SDK | Tagged , , , , , , , | 1 Comment