Novell Home

Simple LDAP Management Tool, works with eDirectory from Linux

Novell Cool Solutions: Cool Tool

Digg This - Slashdot This

In Brief

Allows users to easily update multiple users attributes, including passwords from the Linux console.

Vitals

Product Categories:
  • eDirectory
  • Linux
  • Functional Categories:
  • Identity & Security Management
  • Updated:10 Oct 2007
    File Size:6.3KB
    License:Free
    Download:/coolsolutions/tools/downloads/ldapdo-1.1.tgz
    Publisher:Greg Breheny

    Disclaimer

    Please read the note from our friends in legal before using this file.


    Details

    -This tool was sent in by Peter Norris.

    LDAPDO, is a very flexible tool written in perl, we use at the University to update our eDirectories. We found it was easier to work with than pure ldif files.

    It has some great functions. For example it is very easy to list users into a file, modify the file and re-import the file back into eDirectory. You can have multiple .conf files pointing to different Directories. Such as your Identity Vault and Authentication Tree..

    ldapdo -fConfile2.txt

    The tool was written by one of the guys here. It took me ages for him to agree to publish it up here, so I hope you find it useful.

    There are some good examples in both the ldapdo perl file and the readme.

    Ldapdo relies on some modules from perl that are NOT installed by default. Here is a basic install instructions.. (It can take quite a while to install these, and I always get errors... however I find doing the second part twice seems to do the trick)

    • first install cpan (the perl package installation tool)
    • perl -MCPAN -e shell
      
      (type 'no' at first prompt to exit with the defaults)
    • install ldapdo dependencies
    • perl -MCPAN -e "install Net::LDAP"
    • you will be prompted for several missing modules
      you only need to enter 'y' to install these
      Convert::ASN1
      IO::Socket::SSL
      Net::SSLeay

    This will come up with Some Errors. However it does not seem to stop LDAPDO from working..

    You must change some defaults in the .conf file to connect to your LDAP environment.

    We use a dedicated LDAP account and have removed the accounts rights to delete objects. I would strongly recommend backing up your eDirectory regularly when using this tool (not that we have ever had an issue).

    We use the LDAPDO tool on both eDirectory and AD without any problems..

    I suggest reading the Readme as it has some good examples in it.

    However a quick gotcha, if you want to list all attributes from the CONF file use -v3 (although this can be changed via the conf file....)

    Novell Cool Solutions (corporate web communities) are produced by WebWise Solutions. www.webwiseone.com

    © 2014 Novell