ldapsearch, ldapdelete, replication, change password for cn=”Directory Manager” and global Admin
ldapsearch
$LDAP_BIN/ldapsearch -h {hostname} -p {ldapAdminPort} -D "cn=Directory Manager" -w {password} --useSSL -b 'cn=[ProjectName],cn=[BServ],cn=Servers,cn=[hostname]_bw,dc=example,dc=com' '(objectclass=*)'
$LDAP_BIN/ldapsearch -h {hostname} -p {ldapAdminPort} -D "cn=Directory Manager" -w {password} --useSSL -b 'cn=[ProjectName],cn=Projects,cn=[hostname]_bw,dc=example,dc=com' '(objectclass=*)'
ldapdelete
$LDAP_BIN/ldapdelete -h {hostname} -p {ldapAdminPort} -D "cn=Directory Manager" -w {password} -x --useSSL -J 1.2.840.113556.1.4.805 'cn=[ProjectName],cn=[BServ],cn=Servers,cn={hostname}_bw,dc=example,dc=com'
$LDAP_BIN/ldapdelete -h {hostname} -p {ldapAdminPort} -D "cn=Directory Manager" -w {password} -x --useSSL -J 1.2.840.113556.1.4.805 'cn=[ProjectName],cn=Projects,cn=[hostname]_bw,dc=example,dc=com'
-J 1.2.840.113556.1.4.805 (하위 항목 삭제)
change password for cn=Directory Manager
$LDAP_BIN/encode-password --storageScheme SSHA512 --clearPassword 비밀번호
인코딩 된 비밀번호 : "{SSHA512} yWqHnYV4a5llPvE7WHLe5jzK27oZQWLIlVcs9gySu4TyZJMgNQNRtnR / Xx2xces1wu1dVLI9jVVtl1W4BVsmOKjyjr0rWrHt"
$LDAP_HOME/config/config.ldif
dn : cn = Directory Manager, cn = Root DNs, cn = config
objectClass : person
objectClass : inetOrgPerson
objectClass : organizationalPerson
objectClass : ds-cfg-root-dn-user
objectClass : top
userpassword : {SSHA512} yWqHnYV4a5llPvE7WHLe5jzK27oZQWLIlVcsgNQNRtnR / Xx2xces1wu1dVLI9jVVtl1W4BVsmOKjyjr0rWrHt
change password for Global Admin
$LDAP_BIN/ldappasswordmodify
--useStartTLS
--port {ldapPort}
--hostname {hostname}
--bindDN "cn=Directory Manager"
--bindPassword {newPassword}
--authzID "cn=admin, cn=Administrators, cn=admin data"
--newPassword {newPassword}
Replication CMD
$LDAP_BIN/dsreplication enable \
--adminUID admin \
--adminPassword admin \
--baseDN dc=example,dc=com \
--host1 {hostname1} \
--port1 {adminPort1} \
--bindDN1 "cn=Directory Manager" \
--bindPassword1 {password1} \
--replicationPort1 {replicationPort1} \
--host2 {hostname2} \
--port2 {adminPort2} \
--bindDN2 "cn=Directory Manager" \
--bindPassword2 {password2} \
--replicationPort2 {replicationPort2} \
--trustAll \
--no-prompt