ldapmodify

Description

This is an LDAP utility that imports users to an LDAP server. The input file must be in the LDIF format.

Notes:

You can run this command only in the Expert mode.

On a Multi-Domain Server Dedicated Check Point server that runs Check Point software to host virtual Security Management Servers called Domain Management Servers. Synonym: Multi-Domain Security Management Server. Acronym: MDS., you must run this command in the context of the applicable Domain Management Server Check Point Single-Domain Security Management Server or a Multi-Domain Security Management Server.:

mdsenv <IP Address or Name of Domain Management Server>

Syntax

ldapmodify [-d <Debug Level>] [-h <LDAP Server>] [-p <LDAP Server Port>] [-D <LDAP Admin DN>] [-w <LDAP Admin Password>] [-a] [-b] [-c] [-F] [-k] [-n] [-r] [-v] [-T <LDAP Client Timeout>] [-Z] [ -f <Input File> .ldif | < <Entry>]

Parameters

Parameter	Description
`-d <Debug Level>`	Runs the command in debug mode with the specified TDERROR debug level. Valid values are from 0 (disabled) to 5 (maximal level, recommended).
`-h <LDAP Server>`	Specifies the LDAP Server computer by its IP address or resolvable hostname. If you do not specify the LDAP Server explicitly, the command connects to `localhost`.
`-p <LDAP Server Port>`	Specifies the LDAP Server port. Default is 389.
`-D <LDAP Admin DN>`	Specifies the LDAP Server administrator Distinguished Name.
`-w <LDAP Admin Password>`	Specifies the LDAP Server administrator password.
`-a`	Specifies that this is the LDAP "`add`" operation.
`-b`	Specifies to read values from files (for binary attributes).
`-c`	Specifies to ignore errors during continuous operation.
`-F`	Specifies to force changes on all records.
`-k`	Specifies the Kerberos An authentication server for Microsoft Windows Active Directory Federation Services (ADFS). bind.
`-K`	Specifies the Kerberos bind, part 1 only.
`-n`	Specifies to print the LDAP "`add`" operations, but do not actually perform them.
`-r`	Specifies to replace values, instead of adding values.
`-v`	Specifies to run in verbose mode.
`-T <LDAP Client Timeout>`	Specifies the Client side timeout for LDAP operations, in milliseconds. Default is "`never`".
`-Z`	Specifies to use SSL connection.
`-f <Input File>.ldif`	Specifies to read from the `<Input File>.ldif` file. The input file must be in the LDIF format.
`< <Entry>`	Specifies to read the entry from the stdin. The "`<`" character is mandatory part of the syntax. It specifies the input comes from the standard input (from the data you enter on the screen).