dsidm(8) · carta

Usage

dsidm [-h] [-v] [-j] [-b BASEDN] [-D BINDDN] [-w BINDPW] [-W] [-y PWDFILE] [-Z] instance account,group,initialise,init,organizationalunit,ou,posixgroup,user,client_config,role,service,uniquegroup ...

Positional arguments

dsidm account: Manage generic accounts, with tasks like modify, locking and unlocking. To create an account, see "user" subcommand instead.

dsidm group: Manage groups. The organizationalUnit (by default "ou=groups") needs to exist prior to managing groups. Groups uses the objectclass "groupOfNames" and the grouping attribute "member"

dsidm initialise: Initialise a backend with domain information and sample entries

dsidm organizationalunit: Manage organizational units

dsidm posixgroup: Manage posix groups The organizationalUnit (by default ou=groups") needs to exist prior to managing posix groups.

dsidm user: Manage posix users. The organizationalUnit (by default "ou=people") needs to exist prior to managing users.

dsidm client_config: Display and generate client example configs for this LDAP server

dsidm role: Manage roles.

dsidm service: Manage service accounts. The organizationalUnit (by default "ou=Services") needs to exist prior to managing service accounts.

dsidm uniquegroup: Manage groups. The organizationalUnit (by default "ou=groups") needs to exist prior to managing groups. Unique groups uses the objectclass "groupOfUniqueNames" and the grouping attribute "uniquemember"

COMMAND 'dsidm account'

usage: dsidm instance account [-h]
{list,get-by-dn,modify-by-dn,rename-by-dn,delete,lock,unlock,entry-status,subtree-status,reset_password,change_password,bulk_update} ...

POSITIONAL ARGUMENTS 'dsidm account'

dsidm account list: list accounts that could login to the directory (returns the full DN of the entry)

dsidm account get-by-dn: get-by-dn <dn>

dsidm account modify-by-dn: modify-by-dn <dn> <add|delete|replace>:<attribute>:<value> ...

dsidm account rename-by-dn: rename the object

dsidm account delete: deletes the account

dsidm account lock: lock

dsidm account unlock: unlock

dsidm account entry-status: status of a single entry

dsidm account subtree-status: status of a subtree

dsidm account reset_password: Reset the password of an account. This should be performed by a directory admin.

dsidm account change_password: Change the password of an account. This can be performed by any user (with correct rights)

dsidm account bulk_update: Perform a common operation to a set of entries

COMMAND 'dsidm account list'

usage: dsidm [-v] [-j] instance account list [-h]

COMMAND 'dsidm account get-by-dn'

usage: dsidm [-v] [-j] instance account get-by-dn [-h] [dn]

dn: The dn to get and display

COMMAND 'dsidm account modify-by-dn'

usage: dsidm [-v] [-j] instance account modify-by-dn [-h] dn changes [changes ...]

dn: The dn to get and display

changes: A list of changes to apply in format: <add|delete|replace>:<attribute>:<value>

COMMAND 'dsidm account rename-by-dn'

usage: dsidm [-v] [-j] instance account rename-by-dn [-h] [--keep-old-rdn] dn new_dn

dn: The dn to rename

new_dn: A new role dn

OPTIONS 'dsidm account rename-by-dn'

--keep-old-rdn: Specify whether the old RDN (i.e. 'cn: old_role') should be kept as an attribute of the entry or not

COMMAND 'dsidm account delete'

usage: dsidm [-v] [-j] instance account delete [-h] [dn]

dn: The dn of the account to delete

COMMAND 'dsidm account lock'

usage: dsidm [-v] [-j] instance account lock [-h] [dn]

dn: The dn to lock

COMMAND 'dsidm account unlock'

usage: dsidm [-v] [-j] instance account unlock [-h] [dn]

dn: The dn to unlock

COMMAND 'dsidm account entry-status'

usage: dsidm [-v] [-j] instance account entry-status [-h] [-V] [dn]

dn: The single entry dn to check

OPTIONS 'dsidm account entry-status'

-V, --details: Print more account policy details about the entry

COMMAND 'dsidm account subtree-status'

usage: dsidm [-v] [-j] instance account subtree-status [-h] [-V] [-f FILTER]
[-s {one,sub}] [-i]
[-o BECOME_INACTIVE_ON]
basedn

basedn: Search base for finding entries

OPTIONS 'dsidm account subtree-status'

-V, --details: Print more account policy details about the entries

-f FILTER, --filter FILTER: Search filter for finding entries

-s {one,sub}, --scope {one,sub}: Search scope (one, sub - default is sub

-i, --inactive-only: Only display inactivated entries

-o BECOME_INACTIVE_ON, --become-inactive-on BECOME_INACTIVE_ON: Only display entries that will become inactive before specified date (in a format 2007-04-25T14:30)

COMMAND 'dsidm account reset_password'

usage: dsidm [-v] [-j] instance account reset_password [-h] [dn] [new_password]

dn: The dn to reset the password for

new_password: The new password to set

COMMAND 'dsidm account change_password'

usage: dsidm [-v] [-j] instance account change_password [-h]
[dn] [new_password]
[current_password]

dn: The dn to change the password for

new_password: The new password to set

current_password: The accounts current password

COMMAND 'dsidm account bulk_update'

usage: dsidm [-v] [-j] instance account bulk_update [-h] [-f FILTER] [-s {one,sub}] [-x]
basedn changes [changes ...]

basedn: Search base for finding entries, only the children of this DN are processed

changes: A list of changes to apply in format: <add|delete|replace>:<attribute>:<value>

OPTIONS 'dsidm account bulk_update'

-f FILTER, --filter FILTER: Search filter for finding entries, default is '(objectclass=*)'

-s {one,sub}, --scope {one,sub}: Search scope (one, sub - default is sub

-x, --stop: Stop processing updates when an error occurs. Default is False

COMMAND 'dsidm group'

usage: dsidm instance group [-h]
{list,get,get_dn,create,delete,modify,rename,members,add_member,remove_member} ...

POSITIONAL ARGUMENTS 'dsidm group'

dsidm group list: list

dsidm group get: get

dsidm group get_dn: get_dn

dsidm group create: create

dsidm group delete: deletes the object

dsidm group modify: modify <add|delete|replace>:<attribute>:<value> ...

dsidm group rename: rename the object

dsidm group members: List member dns of a group

dsidm group add_member: Add a member to a group

dsidm group remove_member: Remove a member from a group

COMMAND 'dsidm group list'

usage: dsidm [-v] [-j] instance group list [-h] [--full-dn]

OPTIONS 'dsidm group list'

--full-dn: Return the full DN of the entry instead of the RDN value

COMMAND 'dsidm group get'

usage: dsidm [-v] [-j] instance group get [-h] [selector]

selector: The term to search for

COMMAND 'dsidm group get_dn'

usage: dsidm [-v] [-j] instance group get_dn [-h] [dn]

dn: The dn to get

COMMAND 'dsidm group create'

usage: dsidm [-v] [-j] instance group create [-h] [--cn [CN]]
[--description [DESCRIPTION]]

OPTIONS 'dsidm group create'

--cn [CN]: Value of cn

--description [DESCRIPTION]: Value of description

COMMAND 'dsidm group delete'

usage: dsidm [-v] [-j] instance group delete [-h] [dn]

dn: The dn to delete

COMMAND 'dsidm group modify'

usage: dsidm [-v] [-j] instance group modify [-h] selector changes [changes ...]

selector: The cn to modify

changes: A list of changes to apply in format: <add|delete|replace>:<attribute>:<value>

COMMAND 'dsidm group rename'

usage: dsidm [-v] [-j] instance group rename [-h] [--keep-old-rdn] selector new_name

selector: The cn to rename

new_name: A new group name

OPTIONS 'dsidm group rename'

--keep-old-rdn: Specify whether the old RDN (i.e. 'cn: old_group') should be kept as an attribute of the entry or not

COMMAND 'dsidm group members'

usage: dsidm [-v] [-j] instance group members [-h] [cn]

cn: cn of group to list members of

COMMAND 'dsidm group add_member'

usage: dsidm [-v] [-j] instance group add_member [-h] [cn] [dn]

cn: cn of group to add member to

dn: dn of object to add to group as member

COMMAND 'dsidm group remove_member'

usage: dsidm [-v] [-j] instance group remove_member [-h] [cn] [dn]

cn: cn of group to remove member from

dn: dn of object to remove from group as member

COMMAND 'dsidm initialise'

usage: dsidm [-v] [-j] instance initialise [-h] [--version VERSION]

OPTIONS 'dsidm initialise'

--version VERSION: The version of entries to create.

COMMAND 'dsidm organizationalunit'

usage: dsidm [-v] [-j] instance organizationalunit [-h]
{list,get,get_dn,create,delete,modify,rename} ...

POSITIONAL ARGUMENTS 'dsidm organizationalunit'

dsidm organizationalunit list: list

dsidm organizationalunit get: get

dsidm organizationalunit get_dn: get_dn

dsidm organizationalunit create: create

dsidm organizationalunit delete: deletes the object

dsidm organizationalunit modify: modify <add|delete|replace>:<attribute>:<value> ...

dsidm organizationalunit rename: rename the object

COMMAND 'dsidm organizationalunit list'

usage: dsidm [-v] [-j] instance organizationalunit list [-h] [--full-dn]

OPTIONS 'dsidm organizationalunit list'

--full-dn: Return the full DN of the entry instead of the RDN value

COMMAND 'dsidm organizationalunit get'

usage: dsidm [-v] [-j] instance organizationalunit get [-h] [selector]

selector: The term to search for

COMMAND 'dsidm organizationalunit get_dn'

usage: dsidm [-v] [-j] instance organizationalunit get_dn [-h] [dn]

dn: The dn to get

COMMAND 'dsidm organizationalunit create'

usage: dsidm [-v] [-j] instance organizationalunit create [-h] [--ou [OU]]

OPTIONS 'dsidm organizationalunit create'

--ou [OU]: Value of ou

COMMAND 'dsidm organizationalunit delete'

usage: dsidm [-v] [-j] instance organizationalunit delete [-h] [dn]

dn: The dn to delete

COMMAND 'dsidm organizationalunit modify'

usage: dsidm [-v] [-j] instance organizationalunit modify [-h]
selector
changes [changes ...]

selector: The ou to modify

changes: A list of changes to apply in format: <add|delete|replace>:<attribute>:<value>

COMMAND 'dsidm organizationalunit rename'

usage: dsidm [-v] [-j] instance organizationalunit rename [-h]
[--keep-old-rdn]
selector new_name

selector: The ou to rename

new_name: A new organizational unit name

OPTIONS 'dsidm organizationalunit rename'

--keep-old-rdn: Specify whether the old RDN (i.e. 'ou: old_ou') should be kept as an attribute of the entry or not

COMMAND 'dsidm posixgroup'

usage: dsidm instance posixgroup [-h]
{list,get,get_dn,create,delete,modify,rename} ...

POSITIONAL ARGUMENTS 'dsidm posixgroup'

dsidm posixgroup list: list

dsidm posixgroup get: get

dsidm posixgroup get_dn: get_dn

dsidm posixgroup create: create

dsidm posixgroup delete: deletes the object

dsidm posixgroup modify: modify <add|delete|replace>:<attribute>:<value> ...

dsidm posixgroup rename: rename the object

COMMAND 'dsidm posixgroup list'

usage: dsidm [-v] [-j] instance posixgroup list [-h] [--full-dn]

OPTIONS 'dsidm posixgroup list'

--full-dn: Return the full DN of the entry instead of the RDN value

COMMAND 'dsidm posixgroup get'

usage: dsidm [-v] [-j] instance posixgroup get [-h] [selector]

selector: The term to search for

COMMAND 'dsidm posixgroup get_dn'

usage: dsidm [-v] [-j] instance posixgroup get_dn [-h] [dn]

dn: The dn to get

COMMAND 'dsidm posixgroup create'

usage: dsidm [-v] [-j] instance posixgroup create [-h] [--cn [CN]]
[--gidNumber [GIDNUMBER]]

OPTIONS 'dsidm posixgroup create'

--cn [CN]: Value of cn

--gidNumber [GIDNUMBER]: Value of gidNumber

COMMAND 'dsidm posixgroup delete'

usage: dsidm [-v] [-j] instance posixgroup delete [-h] [dn]

dn: The dn to delete

COMMAND 'dsidm posixgroup modify'

usage: dsidm [-v] [-j] instance posixgroup modify [-h] selector changes [changes ...]

selector: The cn to modify

changes: A list of changes to apply in format: <add|delete|replace>:<attribute>:<value>

COMMAND 'dsidm posixgroup rename'

usage: dsidm [-v] [-j] instance posixgroup rename [-h] [--keep-old-rdn]
selector new_name

selector: The cn to rename

new_name: A new posix group name

OPTIONS 'dsidm posixgroup rename'

--keep-old-rdn: Specify whether the old RDN (i.e. 'cn: old_group') should be kept as an attribute of the entry or not

COMMAND 'dsidm user'

usage: dsidm instance user [-h]
[--user-type {basic,posix,service,traditional}]
{list,get,get-pwp,get_dn,create,modify,rename,delete} ...

POSITIONAL ARGUMENTS 'dsidm user'

dsidm user list: list

dsidm user get: get

dsidm user get-pwp: Show the effective password policy for a user

dsidm user get_dn: get_dn

dsidm user create: create

dsidm user modify: modify <add|delete|replace>:<attribute>:<value> ...

dsidm user rename: rename the object

dsidm user delete: deletes the object

COMMAND 'dsidm user list'

usage: dsidm [-v] [-j] instance user list [-h] [--full-dn]

OPTIONS 'dsidm user list'

--full-dn: Return the full DN of the entry instead of the RDN value

COMMAND 'dsidm user get'

usage: dsidm [-v] [-j] instance user get [-h] [selector]

selector: The term to search for

COMMAND 'dsidm user get-pwp'

usage: dsidm [-v] [-j] instance user get-pwp [-h] [--parent-dn PARENT_DN] [selector]

Resolve and display the password policy (global, user local, or subtree local) that applies to the user, including all effective settings.

selector: The user identifier to look up (same as user get, typically uid)

OPTIONS 'dsidm user get-pwp'

--parent-dn PARENT_DN: A base DN to use for user lookups. Default is "ou=people,$SUFFIX" for users, or "ou=services,$SUFFIX" for service accounts

COMMAND 'dsidm user get_dn'

usage: dsidm [-v] [-j] instance user get_dn [-h] [dn]

dn: The dn to get

COMMAND 'dsidm user create'

usage: dsidm [-v] [-j] instance user create [-h] [--uid [UID]] [--cn [CN]]
[--displayName [DISPLAYNAME]]
[--uidNumber [UIDNUMBER]]
[--gidNumber [GIDNUMBER]]
[--homeDirectory [HOMEDIRECTORY]]

OPTIONS 'dsidm user create'

--uid [UID]: Value of uid

--cn [CN]: Value of cn

--displayName [DISPLAYNAME]: Value of displayName

--uidNumber [UIDNUMBER]: Value of uidNumber

--gidNumber [GIDNUMBER]: Value of gidNumber

--homeDirectory [HOMEDIRECTORY]: Value of homeDirectory

COMMAND 'dsidm user modify'

usage: dsidm [-v] [-j] instance user modify [-h] selector changes [changes ...]

selector: The uid to modify

changes: A list of changes to apply in format: <add|delete|replace>:<attribute>:<value>

COMMAND 'dsidm user rename'

usage: dsidm [-v] [-j] instance user rename [-h] [--keep-old-rdn] selector new_name

selector: The uid to modify

new_name: A new user name

OPTIONS 'dsidm user rename'

--keep-old-rdn: Specify whether the old RDN (i.e. 'cn: old_user') should be kept as an attribute of the entry or not

COMMAND 'dsidm user delete'

usage: dsidm [-v] [-j] instance user delete [-h] [dn]

dn: The dn to delete

OPTIONS 'dsidm user'

--user-type {basic,posix,service,traditional}: The type of user to manage. "basic" is an entry based off of objectclasses: nsPerson, nsAccount, and nsOrgPerson. "posix" is based off of objectclasses: nsPerson, nsAccount, nsOrgPerson, and posixAccount. "service" is based off of objectclasses: nsAccount and applicationProcess. "traditional", aka legacy, is based off of objectclasses: person, organizationalPerson, and inetOrgPerson. The default user type is "posix"

COMMAND 'dsidm client_config'

usage: dsidm instance client_config [-h] {sssd.conf,ldap.conf,display} ...

POSITIONAL ARGUMENTS 'dsidm client_config'

dsidm client_config sssd.conf: Generate a SSSD configuration for this LDAP server

dsidm client_config ldap.conf: Generate an OpenLDAP ldap.conf configuration for this LDAP server

dsidm client_config display: Display generic application parameters for LDAP connection

COMMAND 'dsidm client_config sssd.conf'

usage: dsidm instance client_config sssd.conf [-h] [allowed_group]

allowed_group: The name of the group allowed access to this system

COMMAND 'dsidm client_config ldap.conf'

usage: dsidm instance client_config ldap.conf [-h]

COMMAND 'dsidm client_config display'

usage: dsidm instance client_config display [-h]

COMMAND 'dsidm role'

usage: dsidm [-v] [-j] instance role [-h]
{list,get,get-by-dn,create-managed,create-filtered,create-nested,modify-by-dn,rename-by-dn,delete,lock,unlock,entry-status,subtree-status} ...

POSITIONAL ARGUMENTS 'dsidm role'

dsidm role list: list roles that could login to the directory

dsidm role get: get

dsidm role get-by-dn: get-by-dn <dn>

dsidm role create-managed: create

dsidm role create-filtered: create

dsidm role create-nested: create

dsidm role modify-by-dn: modify-by-dn <dn> <add|delete|replace>:<attribute>:<value> ...

dsidm role rename-by-dn: rename the object

dsidm role delete: deletes the role

dsidm role lock: lock

dsidm role unlock: unlock

dsidm role entry-status: status of a single entry

dsidm role subtree-status: status of a subtree

COMMAND 'dsidm role list'

usage: dsidm [-v] [-j] instance role list [-h] [--full-dn]

OPTIONS 'dsidm role list'

--full-dn: Return the full DN of the entry instead of the RDN value

COMMAND 'dsidm role get'

usage: dsidm [-v] [-j] instance role get [-h] [selector]

selector: The term to search for

COMMAND 'dsidm role get-by-dn'

usage: dsidm [-v] [-j] instance role get-by-dn [-h] [dn]

dn: The dn to get and display

COMMAND 'dsidm role create-managed'

usage: dsidm [-v] [-j] instance role create-managed [-h] [--cn [CN]]

OPTIONS 'dsidm role create-managed'

--cn [CN]: Value of cn

COMMAND 'dsidm role create-filtered'

usage: dsidm [-v] [-j] instance role create-filtered [-h] [--cn [CN]]

OPTIONS 'dsidm role create-filtered'

--cn [CN]: Value of cn

COMMAND 'dsidm role create-nested'

usage: dsidm [-v] [-j] instance role create-nested [-h] [--cn [CN]]
[--nsroledn [NSROLEDN]]

OPTIONS 'dsidm role create-nested'

--cn [CN]: Value of cn

--nsroledn [NSROLEDN]: Value of nsroledn

COMMAND 'dsidm role modify-by-dn'

usage: dsidm [-v] [-j] instance role modify-by-dn [-h]
dn changes [changes ...]

dn: The dn to modify

changes: A list of changes to apply in format: <add|delete|replace>:<attribute>:<value>

COMMAND 'dsidm role rename-by-dn'

usage: dsidm [-v] [-j] instance role rename-by-dn [-h] [--keep-old-rdn]
dn new_dn

dn: The dn to rename

new_dn: A new account dn

OPTIONS 'dsidm role rename-by-dn'

--keep-old-rdn: Specify whether the old RDN (i.e. 'cn: old_account') should be kept as an attribute of the entry or not

COMMAND 'dsidm role delete'

usage: dsidm [-v] [-j] instance role delete [-h] [dn]

dn: The dn of the role to delete

COMMAND 'dsidm role lock'

usage: dsidm [-v] [-j] instance role lock [-h] [dn]

dn: The dn to lock

COMMAND 'dsidm role unlock'

usage: dsidm [-v] [-j] instance role unlock [-h] [dn]

dn: The dn to unlock

COMMAND 'dsidm role entry-status'

usage: dsidm [-v] [-j] instance role entry-status [-h] [dn]

dn: The single entry dn to check

COMMAND 'dsidm role subtree-status'

usage: dsidm [-v] [-j] instance role subtree-status [-h] [-f FILTER]
[-s {base,one,sub}]
basedn

basedn: Search base for finding entries

OPTIONS 'dsidm role subtree-status'

-f FILTER, --filter FILTER: Search filter for finding entries

-s {base,one,sub}, --scope {base,one,sub}: Search scope (base, one, sub - default is sub

COMMAND 'dsidm service'

usage: dsidm [-v] [-j] instance service [-h]
{list,get,get_dn,create,modify,rename,delete} ...

POSITIONAL ARGUMENTS 'dsidm service'

dsidm service list: list

dsidm service get: get

dsidm service get_dn: get_dn

dsidm service create: create

dsidm service modify: modify <add|delete|replace>:<attribute>:<value> ...

dsidm service rename: rename the object

dsidm service delete: deletes the object

COMMAND 'dsidm service list'

usage: dsidm [-v] [-j] instance service list [-h] [--full-dn]

OPTIONS 'dsidm service list'

--full-dn: Return the full DN of the entry instead of the RDN value

COMMAND 'dsidm service get'

usage: dsidm [-v] [-j] instance service get [-h] [selector]

selector: The term to search for

COMMAND 'dsidm service get_dn'

usage: dsidm [-v] [-j] instance service get_dn [-h] [dn]

dn: The dn to get

COMMAND 'dsidm service create'

usage: dsidm [-v] [-j] instance service create [-h] [--cn [CN]]
[--description [DESCRIPTION]]

OPTIONS 'dsidm service create'

--cn [CN]: Value of cn

--description [DESCRIPTION]: Value of description

COMMAND 'dsidm service modify'

usage: dsidm [-v] [-j] instance service modify [-h]
selector changes [changes ...]

selector: The cn to modify

changes: A list of changes to apply in format: <add|delete|replace>:<attribute>:<value>

COMMAND 'dsidm service rename'

usage: dsidm [-v] [-j] instance service rename [-h] [--keep-old-rdn]
selector new_name

selector: The cn to modify

new_name: A new service name

OPTIONS 'dsidm service rename'

--keep-old-rdn: Specify whether the old RDN (i.e. 'cn: old_service') should be kept as an attribute of the entry or not

COMMAND 'dsidm service delete'

usage: dsidm [-v] [-j] instance service delete [-h] [dn]

dn: The dn to delete

COMMAND 'dsidm uniquegroup'

usage: dsidm instance uniquegroup [-h]
{list,get,get_dn,create,delete,modify,rename,members,add_member,remove_member} ...

POSITIONAL ARGUMENTS 'dsidm uniquegroup'

dsidm uniquegroup list: list

dsidm uniquegroup get: get

dsidm uniquegroup get_dn: get_dn

dsidm uniquegroup create: create

dsidm uniquegroup delete: deletes the object

dsidm uniquegroup modify: modify <add|delete|replace>:<attribute>:<value> ...

dsidm uniquegroup rename: rename the object

dsidm uniquegroup members: List member dns of a group

dsidm uniquegroup add_member: Add a member to a group

dsidm uniquegroup remove_member: Remove a member from a group

COMMAND 'dsidm uniquegroup list'

usage: dsidm [-v] [-j] instance uniquegroup list [-h] [--full-dn]

OPTIONS 'dsidm uniquegroup list'

--full-dn: Return the full DN of the entry instead of the RDN value

COMMAND 'dsidm uniquegroup get'

usage: dsidm [-v] [-j] instance uniquegroup get [-h] [selector]

selector: The term to search for

COMMAND 'dsidm uniquegroup get_dn'

usage: dsidm [-v] [-j] instance uniquegroup get_dn [-h] [dn]

dn: The dn to get

COMMAND 'dsidm uniquegroup create'

usage: dsidm [-v] [-j] instance uniquegroup create [-h] [--cn [CN]]

OPTIONS 'dsidm uniquegroup create'

--cn [CN]: Value of cn

COMMAND 'dsidm uniquegroup delete'

usage: dsidm [-v] [-j] instance uniquegroup delete [-h] [dn]

dn: The dn to delete

COMMAND 'dsidm uniquegroup modify'

usage: dsidm [-v] [-j] instance uniquegroup modify [-h] selector changes [changes ...]

selector: The cn to modify

changes: A list of changes to apply in format: <add|delete|replace>:<attribute>:<value>

COMMAND 'dsidm uniquegroup rename'

usage: dsidm [-v] [-j] instance uniquegroup rename [-h] [--keep-old-rdn]
selector new_name

selector: The cn to rename

new_name: A new group name

OPTIONS 'dsidm uniquegroup rename'

--keep-old-rdn: Specify whether the old RDN (i.e. 'cn: old_group') should be kept as an attribute of the entry or not

COMMAND 'dsidm uniquegroup members'

usage: dsidm [-v] [-j] instance uniquegroup members [-h] [cn]

cn: cn of group to list members of

COMMAND 'dsidm uniquegroup add_member'

usage: dsidm [-v] [-j] instance uniquegroup add_member [-h] [cn] [dn]

cn: cn of group to add member to

dn: dn of object to add to group as member

COMMAND 'dsidm uniquegroup remove_member'

usage: dsidm [-v] [-j] instance uniquegroup remove_member [-h] [cn] [dn]

cn: cn of group to remove member from

dn: dn of object to remove from group as member

Options

-v, --verbose: Display verbose operation tracing during command execution

-j, --json: Return result in JSON object

-b BASEDN, --basedn BASEDN: Base DN (root naming context) of the instance to manage

-D BINDDN, --binddn BINDDN: The account to bind as for executing operations

-w BINDPW, --bindpw BINDPW: Password for the bind DN

-W, --prompt: Prompt for password of the bind DN

-y PWDFILE, --pwdfile PWDFILE: Specifies a file containing the password of the bind DN

-Z, --starttls: Connect with StartTLS

History

Arch Linux 2026-11-01: the text shown here
Debian 13 (Trixie)
Debian 12 (Bookworm)
Debian 11 (Bullseye)
Debian 10 (Buster)

--basedn since Debian 13 (Trixie); --binddn since Debian 13 (Trixie); --bindpw since Debian 13 (Trixie); --json since Debian 13 (Trixie); --prompt since Debian 13 (Trixie); --pwdfile since Debian 13 (Trixie); --starttls since Debian 13 (Trixie); --verbose since Debian 13 (Trixie); -D since Debian 13 (Trixie); -W since Debian 13 (Trixie); -Z since Debian 13 (Trixie); -b since Debian 13 (Trixie); -j since Debian 13 (Trixie); -v since Debian 13 (Trixie); -w since Debian 13 (Trixie); -y since Debian 13 (Trixie).