Ldap tools, an alternative for the command line utility etautil.exe. > dxtools, ldapmodify, ldapsearch, ldapadd, dxmodify, dxsearch

Products

• CA Directory
• CA Identity Manager
• CA Identity Governance
• CA Identity Portal
• CA Risk Analytics
• CA Secure Cloud SaaS - Arcot A-OK (WebFort)
• CLOUDMINDER ADVANCED AUTHENTICATION
• CA Secure Cloud SaaS - Advanced Authentication
• CA Secure Cloud SaaS - Identity Management
• CA Secure Cloud SaaS - Single Sign On
• CA Security Command Center
• CA Data Protection (DataMinder)
• CA User Activity Reporting

Issue/Introduction

The utility etautil.exe is basically a command line ldap client tool that is provided with eTrust Admin.

You may use alternative standard ldap tools that are available on the internet or proprietary tools that are e.g. provided with eTrust Directory.

For your convenience some of these tools are also provided with our product., these are located in the eTrust Admin\bin directory.

Some samples of these tools are:

• ldapmodify
  
  
• ldapsearch
  
  
• ldapadd
  
  
• ldapdelete
  
  
• dxmodify
  
  
• dxsearch

1.  

Environment

Release: ESPDIR99000-8.1-Extended Support Plus-for CA Directory
Component:

Resolution

This document outlines some possible reasons for using these tools and provides an example for your convenience.

Possible reasons for using ldap tools:

• Some people are more familiar with using standard ldap tool and will write batch files quicker using a familiar syntax
  
  
• Some operations could perform faster using ldap.
  
  
• Some updates are only possible using ldap (such as updating attribute with characters that have special meaning on the commandline. Those characters can be linefeed, carriage return, greater than ">" and so on) In those cases you would need to use base64 encoding.

An example of using ldapmodify

Let's say you want to add into the street address (eTStreetAddress) for <Username> test line1

1. Create a file called data.ldif with the following content:
   
   

   dn: eTGlobalUserName=<Username>,eTGlobalUserContainerName=Global
   Users,eTNamespaceName=CommonObjects,dc= <DomainName>,dc=eta changetype: modify
   replace: eTStreetAddress
   eTStreetAddress: line1

   
   Replace <DomainName> with your actual Admin domain name
   
   
2. Run the command:
   

   ldapmodify -v -h <ServerName> -p 20389 -D
   "eTGlobalUserName= <Username>,eTGlobalUserContainerName=Global
   Users,eTNamespaceName=CommonObjects,dc= <DomainName>,dc=eta"
   -w <Password> -f data.ldif

   
   where <ServerName> is the admin server, <Username> is a user with admin rights (etaadmin), <DomainName> is your admin domain and <Password> is the password for the admin user you use.