Linux Networking Cookbook

12.6. Correcting Directory Entries

Problem

Users changed, or you made a mistake, so you want to change an existing directory entry. How do you do this?

Solution

One way is using ldapmodify. You'll need to create a new LDIF file in a special format. This example adds a title, changes the email address, and adds a photograph:

	##/etc/ldap/modfile.ldif
	dn: uid=thanson,ou=people,dc=alrac,dc=net
	changetype:modify
	add:title
	title:Fire Marshal
	-
	replace:mail
	mail:[e-mail]
	-
	add: jpegphoto
	jpegphoto:< file:///filename.jpg

Next, use the LDIF file this way:

	# ldapmodify -x -D "cn=admin,dc=alrac,dc=net" -W -f modfile.ldif
	Enter LDAP Password:
	modifying entry "cn=Terry Hanson,ou=people,dc=alrac,dc=net"

Then, verify it with ldapsearch:

	$ ldapsearch -xtb 'dc=alrac,dc=net' 'cn=terry hanson'
	[...]
	# Terry Hanson, people, alrac.net
	dn: cn=Terry Hanson,ou=people,dc=alrac,dc=net
	objectClass: inetOrgPerson
	cn: Terry Hanson
	sn: Hanson
	uid: thanson
	telephoneNumber: 333.444.4545
	homePhone: 222-333-5555
	description: burning down the house
	title: Fire Marshal
	mail: [e-mail]
	jpegPhoto:< file:///tmp/ldapsearch-jpegPhoto-Sx11P8
	[...]

Discussion

For changes to a small number of entries, a graphical LDAP browser (see Recipe 12.10) is usually faster and easier. Using LDIFs is usually faster for bulk changes and for ace scripting gurus.

Note the new -t option to ldapsearch. This tells ldapsearch to store photos, audio files, or other noncharacter data in temporary files. If you don't use this, you'll ...