LDAP-Basics

• normal : ldapsearch-x uid=peter
• wildcard : ldapsearch -x gecos=pet*
• only print one value : ldapsearch -x uid=peter gecos
• show ldap-internals too : ldapsearch -x uid=nat* +

1. save the values to a ldif-file
2. change with an editor
3. read the values with ldapmodify

ldapsearch -x -LLL uid=peter >/tmp/peter.ldif
emacs -nw /tmp/peter.ldif
ldapmodify -x -W -D cn=ldapadmin,dc=ihf,dc=local -f /tmp/peter.ldif

ldapdelete -x -W -D cn=ldapadmin,dc=ihf,dc=local uid=peter

• -x simple auth instead of sasl
• -W prompt for passwd
• -D ldapadmin or any other authorized ldapuser