.\"Modified from man(1) of FreeBSD, the NetBSD mdoc.template, and mdoc.samples. .\"See Also: .\"man mdoc.samples for a complete listing of options .\"man mdoc for the short list of editing options .\"/usr/share/misc/mdoc.template .Dd May 07 2004 \" DATE .Dt dsconfigldap 1 \" Program name and manual section number .Os Mac OS X .Sh NAME \" Section Header - required - don't modify .Nm dsconfigldap .Nd LDAP server config/binding add/remove tool. .Sh SYNOPSIS \" Section Header - required - don't modify .Nm .Op -fvixsgme .Ar -a servername .Op -n configname .Op -c computerid .Op -u username .Op -p password .Op -l username .Op -q password .Pp .Nm .Op -fvi .Ar -r servername .Op -u username .Op -p password .Op -l username .Op -q password .Pp options: .Bl -tag -width "1234567890123" -compact -offset indent .It Fl f force authenticated binding/unbinding .It Fl v verbose logging to stdout .It Fl i prompt for passwords as required .It Fl x choose SSL connection .It Fl s enforce secure authentication only .It Fl g enforce packet signing security policy .It Fl m enforce man-in-middle security policy .It Fl e enforce encryption security policy .It Fl h display usage statement .El .Pp parameters: .Bl -tag -width "1234567890123" -compact -offset indent .It Fl a Ar servername add config of servername .It Fl r Ar servername remove config of servername .It Fl n Ar configname name given to LDAP server config .It Fl c Ar computerid name used if binding to directory .It Fl u Ar username privileged network username .It Fl p Ar password privileged network user password .It Fl l Ar username local admin username .It Fl q Ar password local admin password .El .Pp .Sh DESCRIPTION \" Section Header - required - don't modify .Nm allows addition or removal of LDAP server configurations in Directory Services. Presented below is a discussion of possible parameters. Usage has three intents: add server config, remove server config, or display help. .Pp \" Inserts a space Options list and their descriptions: .Bl -tag -width -indent \" Differs from above in tag removed .It Fl f Bindings will be established or dropped in conjunction with the addition or removal of the LDAP server configuration. .It Fl v This enables the logging to stdout of the details of the operations. This can be redirected to a file. .It Fl i You will be prompted for a password to use in conjunction with a specified username. .It Fl s This ensures that no clear text passwords will be sent to the LDAP server during authentication. This will only be enabled if the server supports non-cleartext methods. .It Fl e This ensures that if the server is capable of supporting encryption methods (i.e., SSL or Kerberos) that encryption will be enforced at all times via policy. .It Fl m This ensures that man-in-the-middle capabilities will be enforced via Kerberos, if the server supports the capability. .It Fl g This ensures that packet signing capabilities will be enforced via Kerberos, if the server supports the capability. .It Fl x Connection to the LDAP server will only be made over SSL. .It Fl h Display usage statement. .El \" Ends the list .Pp \" Inserts a space Parameters list and their descriptions: .Bl -tag -width -indent \" Differs from above in tag removed .It Fl a Ar servername This is either the fully qualified domain name or correct IP address of the LDAP server to be added to the DirectoryService LDAPv3 configuration. .It Fl r Ar servername This is either the fully qualified domain name or correct IP address of the LDAP server to be removed from the DirectoryService LDAPv3 configuration. .It Fl n Ar configname This is the UI configuration label that is to be given the LDAP server configuration. .It Fl c Ar computerid This is the name to be used for directory binding to the LDAP server. If none is given the first substring, before a period, of the hostname (the defined environment variable "HOST") is used. .It Fl u Ar username Username of a privileged network user to be used in authenticated directory binding. .It Fl p Ar password Password for the privileged network user. If this is not specified, you will be prompted for a password. .It Fl l Ar username Username of a local administrator. .It Fl q Ar password Password for the local administrator. If this is not specified, you will be prompted for a password. .El \" Ends the list .Pp \" Inserts a space .Sh EXAMPLES .Pp .Bl -tag -width -indent \" Differs from above in tag removed .It Fl "add a LDAP server config" dsconfigldap -v -a myldap.company.com The LDAP server config for the LDAP server myldap.company.com will be added. If authenticated directory binding is required by the LDAP server, then this call will fail. Otherwise, the following parameters configname, computerid, and local admin name will respectively pick up these defaults: ip address of the LDAP servername, substring up to first period of fully qualified hostname, and username of the user in the shell this tool was invoked. .It Fl "remove a LDAP server config" dsconfigldap -v -r myldap.company.com The LDAP server config for the LDAP server myldap.company.com will be removed but not unbound since no network user credentials were supplied. The local admin name will be the username of the user in the shell this tool was invoked. .El \" Ends the list .Pp .Pp