NAME
ldapcompare - LDAP compare tool
SYNOPSIS
ldapcompare
[-n]
[-v]
[-z]
[-M[M]]
[-d debuglevel]
[-D binddn]
[-W]
[-w passwd]
[-y passwdfile]
[-H ldapuri]
[-h ldaphost]
[-p ldapport]
[-P 2|_3]
[-O security-properties]
[-I]
[-Q]
[-U authcid]
[-R realm]
[-x]
[-X authzid]
[-Y mech]
[-Z[Z]]
DN <
attr:value |
attr::b64value >
DESCRIPTION
ldapcompare
is a shell-accessible interface to the
ldap_compare_ext(3)
library call.
ldapcompare
opens a connection to an LDAP server, binds, and performs a compare
using specified parameters. The _D_N should be a distinguished
name in the directory. _A_t_t_r should be a known attribute. If
followed by one colon, the assertion _v_a_l_u_e should be provided
as a string. If followed by two colons, the base64 encoding of the
value is provided. The result code of the compare is provided as
the exit code and, unless ran with -z, the program prints
TRUE, FALSE, or UNDEFINED on standard output.
OPTIONS
-
-n
-
Show what would be done, but don't actually perform the compare. Useful for
debugging in conjunction with -v.
-
-v
-
Run in verbose mode, with many diagnostics written to standard output.
-
-z
-
Run in quiet mode, no output is written. You must check the return
status. Useful in shell scripts.
-
-M[M]
-
Enable manage DSA IT control.
-MM
makes control critical.
-
-d debuglevel
-
Set the LDAP debugging level to _d_e_b_u_g_l_e_v_e_l.
ldapcompare
must be compiled with LDAP_DEBUG defined for this option to have any effect.
-
-x
-
Use simple authentication instead of SASL.
-
-D binddn
-
Use the Distinguished Name _b_i_n_d_d_n to bind to the LDAP directory.
-
-W
-
Prompt for simple authentication.
This is used instead of specifying the password on the command line.
-
-w passwd
-
Use _p_a_s_s_w_d as the password for simple authentication.
-
-y passwdfile
-
Use complete contents of _p_a_s_s_w_d_f_i_l_e as the password for
simple authentication.
Note that _c_o_m_p_l_e_t_e means that any leading or trailing whitespaces,
including newlines, will be considered part of the password and,
unlike other software, they will not be stripped.
As a consequence, passwords stored in files by commands like
echo(1)
will not behave as expected, since
echo(1)
by default appends a trailing newline to the echoed string.
The recommended portable way to store a cleartext password in a file
for use with this option is to use
slappasswd(8)
with _{_C_L_E_A_R_T_E_X_T_} as hash and the option _-_n.
-
-H ldapuri
-
Specify URI(s) referring to the ldap server(s); only the protocol/host/port
fields are allowed; a list of URI, separated by whitespace or commas
is expected.
-
-h ldaphost
-
Specify an alternate host on which the ldap server is running.
Deprecated in favor of -H.
-
-p ldapport
-
Specify an alternate TCP port where the ldap server is listening.
Deprecated in favor of -H.
-
_<_b_>_-_P_<_/_b_>_<_i_> _2|_3_<_/_i_>
_<_d_d_>
_S_p_e_c_i_f_y _t_h_e _L_D_A_P _p_r_o_t_o_c_o_l _v_e_r_s_i_o_n _t_o _u_s_e_.
_<_d_t_>
_<_b_>_-_O_<_/_b_>_<_i_> _s_e_c_u_r_i_t_y_-_p_r_o_p_e_r_t_i_e_s_<_/_i_>
_<_d_d_>
_S_p_e_c_i_f_y _S_A_S_L _s_e_c_u_r_i_t_y _p_r_o_p_e_r_t_i_e_s_.
_<_d_t_>
_<_b_>_-_I_<_/_b_>
_<_d_d_>
_E_n_a_b_l_e _S_A_S_L _I_n_t_e_r_a_c_t_i_v_e _m_o_d_e_. _A_l_w_a_y_s _p_r_o_m_p_t_. _D_e_f_a_u_l_t _i_s _t_o _p_r_o_m_p_t
_o_n_l_y _a_s _n_e_e_d_e_d_.
_<_d_t_>
_<_b_>_-_Q_<_/_b_>
_<_d_d_>
_E_n_a_b_l_e _S_A_S_L _Q_u_i_e_t _m_o_d_e_. _N_e_v_e_r _p_r_o_m_p_t_.
_<_d_t_>
_<_b_>_-_U_<_/_b_>_<_i_> _a_u_t_h_c_i_d_<_/_i_>
_<_d_d_>
_S_p_e_c_i_f_y _t_h_e _a_u_t_h_e_n_t_i_c_a_t_i_o_n _I_D _f_o_r _S_A_S_L _b_i_n_d_. _T_h_e _f_o_r_m _o_f _t_h_e _I_D
_d_e_p_e_n_d_s _o_n _t_h_e _a_c_t_u_a_l _S_A_S_L _m_e_c_h_a_n_i_s_m _u_s_e_d_.
_<_d_t_>
_<_b_>_-_R_<_/_b_>_<_i_> _r_e_a_l_m_<_/_i_>
_<_d_d_>
_S_p_e_c_i_f_y _t_h_e _r_e_a_l_m _o_f _a_u_t_h_e_n_t_i_c_a_t_i_o_n _I_D _f_o_r _S_A_S_L _b_i_n_d_. _T_h_e _f_o_r_m _o_f _t_h_e _r_e_a_l_m
_d_e_p_e_n_d_s _o_n _t_h_e _a_c_t_u_a_l _S_A_S_L _m_e_c_h_a_n_i_s_m _u_s_e_d_.
_<_d_t_>
_<_b_>_-_X_<_/_b_>_<_i_> _a_u_t_h_z_i_d_<_/_i_>
_<_d_d_>
_S_p_e_c_i_f_y _t_h_e _r_e_q_u_e_s_t_e_d _a_u_t_h_o_r_i_z_a_t_i_o_n _I_D _f_o_r _S_A_S_L _b_i_n_d_.
_<_i_>_a_u_t_h_z_i_d_<_/_i_>
_m_u_s_t _b_e _o_n_e _o_f _t_h_e _f_o_l_l_o_w_i_n_g _f_o_r_m_a_t_s_:
_<_b_>_d_n_:_<_i_>_<_d_i_s_t_i_n_g_u_i_s_h_e_d _n_a_m_e_>_<_/_i_>
_o_r
_<_b_>_u_:_<_i_>_<_u_s_e_r_n_a_m_e_>_<_/_i_>
_<_d_t_>
_<_b_>_-_Y_<_/_b_>_<_i_> _m_e_c_h_<_/_i_>
_<_d_d_>
_S_p_e_c_i_f_y _t_h_e _S_A_S_L _m_e_c_h_a_n_i_s_m _t_o _b_e _u_s_e_d _f_o_r _a_u_t_h_e_n_t_i_c_a_t_i_o_n_. _I_f _i_t_'_s _n_o_t
_s_p_e_c_i_f_i_e_d_, _t_h_e _p_r_o_g_r_a_m _w_i_l_l _c_h_o_o_s_e _t_h_e _b_e_s_t _m_e_c_h_a_n_i_s_m _t_h_e _s_e_r_v_e_r _k_n_o_w_s_.
_<_d_t_>
_<_b_>_-_Z_[_Z_]_<_/_b_>
_<_d_d_>
_I_s_s_u_e _S_t_a_r_t_T_L_S _(_T_r_a_n_s_p_o_r_t _L_a_y_e_r _S_e_c_u_r_i_t_y_) _e_x_t_e_n_d_e_d _o_p_e_r_a_t_i_o_n_. _I_f _y_o_u _u_s_e
_<_b_>_-_Z_Z_, _t_h_e _c_o_m_m_a_n_d _w_i_l_l _r_e_q_u_i_r_e _t_h_e _o_p_e_r_a_t_i_o_n _t_o _b_e _s_u_c_c_e_s_s_f_u_l_.
_<_/_d_l_>
_<_h_3 _i_d_=_"_E_X_A_M_P_L_E_S_"_> _E_X_A_M_P_L_E_S _<_/_h_3_>
_<_b_r_>
_<_p_r_e_>
_l_d_a_p_c_o_m_p_a_r_e _"_u_i_d_=_b_a_b_s_,_d_c_=_e_x_a_m_p_l_e_,_d_c_=_c_o_m_" _s_n_:_J_e_n_s_e_n
_l_d_a_p_c_o_m_p_a_r_e _"_u_i_d_=_b_a_b_s_,_d_c_=_e_x_a_m_p_l_e_,_d_c_=_c_o_m_" _s_n_:_:_S_m_V_u_c_2_V_u
_<_/_p_r_e_>
_a_r_e _a_l_l _e_q_u_i_v_a_l_e_n_t_.
_<_h_3 _i_d_=_"_L_I_M_I_T_A_T_I_O_N_S_"_> _L_I_M_I_T_A_T_I_O_N_S _<_/_h_3_>
_R_e_q_u_i_r_i_n_g _t_h_e _v_a_l_u_e _b_e _p_a_s_s_e_d _o_n _t_h_e _c_o_m_m_a_n_d _l_i_n_e _i_s _l_i_m_i_t_i_n_g
_a_n_d _i_n_t_r_o_d_u_c_e_s _s_o_m_e _s_e_c_u_r_i_t_y _c_o_n_c_e_r_n_s_. _T_h_e _c_o_m_m_a_n_d _s_h_o_u_l_d _s_u_p_p_o_r_t
_a _m_e_c_h_a_n_i_s_m _t_o _s_p_e_c_i_f_y _t_h_e _l_o_c_a_t_i_o_n _(_f_i_l_e _n_a_m_e _o_r _U_R_L_) _t_o _r_e_a_d
_t_h_e _v_a_l_u_e _f_r_o_m_.
_<_h_3 _i_d_=_"_S_E_E _A_L_S_O_"_> _S_E_E _A_L_S_O _<_/_h_3_>
_<_a _h_r_e_f_=_"_._._/_h_t_m_l_5_/_l_d_a_p_._c_o_n_f_._h_t_m_l_"_>_l_d_a_p_._c_o_n_f_(_5_)_<_/_a_>
_<_a _h_r_e_f_=_"_._._/_h_t_m_l_5_/_l_d_i_f_._h_t_m_l_"_>_l_d_i_f_(_5_)_<_/_a_>
_<_a _h_r_e_f_=_"_._._/_h_t_m_l_3_/_l_d_a_p_._h_t_m_l_"_>_l_d_a_p_(_3_)_<_/_a_>
_<_a _h_r_e_f_=_"_._._/_h_t_m_l_3_/_l_d_a_p___c_o_m_p_a_r_e___e_x_t_._h_t_m_l_"_>_l_d_a_p___c_o_m_p_a_r_e___e_x_t_(_3_)_<_/_a_>
_<_h_3 _i_d_=_"_A_U_T_H_O_R_"_> _A_U_T_H_O_R _<_/_h_3_>
_T_h_e _O_p_e_n_L_D_A_P _P_r_o_j_e_c_t _<_h_t_t_p_:_/_/_w_w_w_._o_p_e_n_l_d_a_p_._o_r_g_/_>
_<_h_3 _i_d_=_"_A_C_K_N_O_W_L_E_D_G_E_M_E_N_T_S_"_> _A_C_K_N_O_W_L_E_D_G_E_M_E_N_T_S _<_/_h_3_>
_<_b_>_O_p_e_n_L_D_A_P _S_o_f_t_w_a_r_e_<_/_b_>
_i_s _d_e_v_e_l_o_p_e_d _a_n_d _m_a_i_n_t_a_i_n_e_d _b_y _T_h_e _O_p_e_n_L_D_A_P _P_r_o_j_e_c_t _<_h_t_t_p_:_/_/_w_w_w_._o_p_e_n_l_d_a_p_._o_r_g_/_>_.
_<_b_>_O_p_e_n_L_D_A_P _S_o_f_t_w_a_r_e_<_/_b_>
_i_s _d_e_r_i_v_e_d _f_r_o_m _U_n_i_v_e_r_s_i_t_y _o_f _M_i_c_h_i_g_a_n _L_D_A_P _3_._3 _R_e_l_e_a_s_e_.
_<_/_b_o_d_y_>
_<_/_h_t_m_l_>