Backport CR-4936 OPENDJ-1593 Fix problems in Understanding LDAP chapters
| | |
| | | '\" t |
| | | .\" Title: ldapsearch |
| | | .\" Author: |
| | | .\" Generator: DocBook XSL-NS Stylesheets v1.76.1 <http://docbook.sf.net/> |
| | | .\" Date: 10/23/2013 |
| | | .\" Generator: DocBook XSL Stylesheets v1.78.1 <http://docbook.sf.net/> |
| | | .\" Date: 10/22/2014 |
| | | .\" Manual: Tools Reference |
| | | .\" Source: OpenDJ 2.7.0-SNAPSHOT |
| | | .\" Source: OpenDJ 3.0.0 |
| | | .\" Language: English |
| | | .\" |
| | | .TH "LDAPSEARCH" "1" "10/23/2013" "OpenDJ 2\&.7\&.0\-SNAPSHOT" "Tools Reference" |
| | | .TH "LDAPSEARCH" "1" "10/22/2014" "OpenDJ 3\&.0\&.0" "Tools Reference" |
| | | .\" ----------------------------------------------------------------- |
| | | .\" * Define some portability stuff |
| | | .\" ----------------------------------------------------------------- |
| | |
| | | \fIobjectclass\fR |
| | | is one of the object classes on the entries returned by the search\&. |
| | | .RE |
| | | .PP |
| | | 1\&.1 |
| | | .RS 4 |
| | | Return no attributes, only the DNs of matching entries\&. |
| | | .RE |
| | | .SH "EXIT CODES" |
| | | .PP |
| | | 0 |
| | |
| | | ldapmodify\&.port=1389 |
| | | ldappasswordmodify\&.port=1389 |
| | | ldapsearch\&.port=1389 |
| | | |
| | | .fi |
| | | .if n \{\ |
| | | .RE |
| | |
| | | .RS 4 |
| | | .\} |
| | | .nf |
| | | $ ldapsearch \-p 1389 \-b dc=example,dc=com "(uid=*jensen*)" uid |
| | | $ \fBldapsearch \-p 1389 \-b dc=example,dc=com "(uid=*jensen*)" uid\fR |
| | | dn: uid=ajensen,ou=People,dc=example,dc=com |
| | | uid: ajensen |
| | | |
| | |
| | | |
| | | |
| | | Result Code: 0 (Success) |
| | | |
| | | .fi |
| | | .if n \{\ |
| | | .RE |
| | |
| | | .RS 4 |
| | | .\} |
| | | .nf |
| | | $ ldapsearch \-p 1389 \-b dc=example,dc=com "(uid=bjensen)" @inetorgperson |
| | | $ \fBldapsearch \-p 1389 \-b dc=example,dc=com "(uid=bjensen)" @inetorgperson\fR |
| | | dn: uid=bjensen,ou=People,dc=example,dc=com |
| | | givenName: Barbara |
| | | objectClass: person |
| | |
| | | ou: Product Development |
| | | ou: People |
| | | facsimileTelephoneNumber: +1 408 555 1992 |
| | | |
| | | .fi |
| | | .if n \{\ |
| | | .RE |
| | |
| | | .RS 4 |
| | | .\} |
| | | .nf |
| | | $ ldapsearch \-p 1389 \-b dc=example,dc=com "(uid=bjensen)" + |
| | | $ \fBldapsearch \-p 1389 \-b dc=example,dc=com "(uid=bjensen)" +\fR |
| | | dn: uid=bjensen,ou=People,dc=example,dc=com |
| | | numSubordinates: 0 |
| | | structuralObjectClass: inetOrgPerson |
| | |
| | | hasSubordinates: false |
| | | entryDN: uid=bjensen,ou=people,dc=example,dc=com |
| | | entryUUID: fc252fd9\-b982\-3ed6\-b42a\-c76d2546312c |
| | | |
| | | .fi |
| | | .if n \{\ |
| | | .RE |
| | | .\} |
| | | .SH "COPYRIGHT" |
| | | .br |
| | | Copyright \(co 2011-2013 ForgeRock AS |
| | | Copyright \(co 2011-2014 ForgeRock AS |
| | | .br |
| | |
| | | '\" t |
| | | .\" Title: ldifsearch |
| | | .\" Author: |
| | | .\" Generator: DocBook XSL-NS Stylesheets v1.76.1 <http://docbook.sf.net/> |
| | | .\" Date: 10/16/2012 |
| | | .\" Generator: DocBook XSL Stylesheets v1.78.1 <http://docbook.sf.net/> |
| | | .\" Date: 10/22/2014 |
| | | .\" Manual: Tools Reference |
| | | .\" Source: OpenDJ 2.5.0 |
| | | .\" Source: OpenDJ 3.0.0 |
| | | .\" Language: English |
| | | .\" |
| | | .TH "LDIFSEARCH" "1" "10/16/2012" "OpenDJ 2\&.5\&.0" "Tools Reference" |
| | | .TH "LDIFSEARCH" "1" "10/22/2014" "OpenDJ 3\&.0\&.0" "Tools Reference" |
| | | .\" ----------------------------------------------------------------- |
| | | .\" * Define some portability stuff |
| | | .\" ----------------------------------------------------------------- |
| | |
| | | \fIobjectclass\fR |
| | | is one of the object classes on the entries returned by the search\&. |
| | | .RE |
| | | .PP |
| | | 1\&.1 |
| | | .RS 4 |
| | | Return no attributes, only the DNs of matching entries\&. |
| | | .RE |
| | | .SH "EXIT CODES" |
| | | .PP |
| | | 0 |
| | |
| | | .RS 4 |
| | | .\} |
| | | .nf |
| | | $ ldifsearch \-l /path/to/Example\&.ldif \-b dc=example,dc=com uid=bjensen |
| | | $ \fBldifsearch \-l /path/to/Example\&.ldif \-b dc=example,dc=com uid=bjensen\fR |
| | | dn: uid=bjensen,ou=People,dc=example,dc=com |
| | | objectClass: person |
| | | objectClass: organizationalPerson |
| | |
| | | ou: People |
| | | uidNumber: 1076 |
| | | gidNumber: 1000 |
| | | |
| | | .fi |
| | | .if n \{\ |
| | | .RE |
| | |
| | | .RS 4 |
| | | .\} |
| | | .nf |
| | | $ ldifsearch \-\-ldifFile /path/to/Example\&.ldif |
| | | \-\-baseDN dc=example,dc=com "(uid=bjensen)" @posixaccount |
| | | $ \fBldifsearch \-\-ldifFile /path/to/Example\&.ldif \e |
| | | \-\-baseDN dc=example,dc=com "(uid=bjensen)" @posixaccount\fR |
| | | dn: uid=bjensen,ou=People,dc=example,dc=com |
| | | objectClass: person |
| | | objectClass: organizationalPerson |
| | |
| | | homeDirectory: /home/bjensen |
| | | uidNumber: 1076 |
| | | gidNumber: 1000 |
| | | |
| | | .fi |
| | | .if n \{\ |
| | | .RE |
| | | .\} |
| | | .SH "COPYRIGHT" |
| | | .br |
| | | Copyright \(co 2011-2012 ForgeRock AS |
| | | Copyright \(co 2011-2014 ForgeRock AS |
| | | .br |
| | |
| | | for words in the dictionary, or for subscriber names in the phone book. |
| | | A sample entry follows.</para> |
| | | |
| | | <programlisting language="LDIF"> |
| | | <programlisting language="ldif"> |
| | | dn: uid=bjensen,ou=People,dc=example,dc=com |
| | | uid: bjensen |
| | | cn: Babs Jensen |
| | |
| | | <literal>""</literal> (the empty string), is called the root DSE, and |
| | | contains information about what the server supports, including the other |
| | | base DNs it serves.</para></footnote></para> |
| | | |
| | | <para> |
| | | A directory server stores two kinds of attributes in a directory entry: |
| | | <firstterm>user attributes</firstterm> |
| | | and <firstterm>operational attributes</firstterm>. |
| | | User attributes hold the information for users of the directory. |
| | | All of the attributes shown in the entry at the outset of this section |
| | | are user attributes. |
| | | Operational attributes hold information used by the directory itself. |
| | | Examples of operational attributes include |
| | | <literal>entryUUID</literal>, <literal>modifyTimestamp</literal>, |
| | | and <literal>subschemaSubentry</literal>. |
| | | When an LDAP search operation finds an entry in the directory, |
| | | the directory server returns all the visible user attributes |
| | | unless the search request restricts the list of attributes |
| | | by specifying those attributes explicitly. |
| | | The directory server does not however return any operational attributes |
| | | unless the search request specifically asks for them. |
| | | Generally speaking, applications should change only user attributes, |
| | | and leave updates of operational attributes to the server, |
| | | relying on public directory server interfaces to change server behavior. |
| | | An exception is access control instruction (<literal>aci</literal>) attributes, |
| | | which are operational attributes used to control access to directory data. |
| | | </para> |
| | | </section> |
| | | |
| | | <section xml:id="ldap-client-server-communication"> |
| | |
| | | else, her DN would have to change. For another example, if you decide |
| | | to consolidate <literal>ou=Customers</literal> and |
| | | <literal>ou=Employees</literal> under <literal>ou=People</literal> |
| | | instead, all the entries underneath much change distinguished names. |
| | | instead, all the entries underneath must change distinguished names. |
| | | <footnote><para>Renaming entire branches of entries can be a major |
| | | operation for the directory, so avoid moving entire branches if you |
| | | can.</para></footnote></para> |
| | |
| | | on the entries returned by the search.</para> |
| | | </listitem> |
| | | </varlistentry> |
| | | |
| | | <varlistentry> |
| | | <term><literal>1.1</literal></term> |
| | | <listitem> |
| | | <para> |
| | | Return no attributes, only the DNs of matching entries. |
| | | </para> |
| | | </listitem> |
| | | </varlistentry> |
| | | |
| | | </variablelist> |
| | | </refsect1> |
| | | <refsect1> |
| | |
| | | on the entries returned by the search.</para> |
| | | </listitem> |
| | | </varlistentry> |
| | | |
| | | <varlistentry> |
| | | <term><literal>1.1</literal></term> |
| | | <listitem> |
| | | <para> |
| | | Return no attributes, only the DNs of matching entries. |
| | | </para> |
| | | </listitem> |
| | | </varlistentry> |
| | | |
| | | </variablelist> |
| | | </refsect1> |
| | | <refsect1> |