Netscape MANAGEMENT SYSTEM 6.1 - COMMAND-LINE Manual

Also see for Certificate Management System 6.1: Manual Administrator's guide

Netscape MANAGEMENT SYSTEM 6.1 - COMMAND-LINE Manual Manual pdf 49 page image

How the Tool WorksChapter 5 PIN Generator Tool 49ExampleThe following command generates PINs for all entries that have the CN attribute (intheir distinguished name) defined in an LDAP directory named laiking that islistening at port 19000. The PIN Generator binds to the directory as userDirectoryManager and starts searching the directory from the nodedn=o=example.com in the directory tree. The tool overwrites the existing PINs, ifany, with the new ones.setpin host=lailing port=19000 "binddn=CN=directory manager"bindpw=password "filter=(cn=*)" basedn=o=example.com clobber writeHow the Tool WorksThe Pin Generator allows you to generate PINs for user entries in anLDAP-compliant directory and update the directory with these PINs. To run thesetpin command, you need at a minimum to specify the following:• The host name (host) and port number (port) of the LDAP server• The bind DN (binddn) and password (bindpw)• An LDAP filter (filter) for filtering out the user entries that require PINsFor example:setpin host=laiking port=19000 "binddn=CN=Directory Manager"bindpw=netscape "filter=(ou=employees)" basedn=o=example.comThis command, if run, will query the directory for all the entries that match thefilter criteria, which in this case is all users belonging to an organizational unit (ou)called employees. For each entry matching the filter, information is printed out tostandard error. Additionally, to the standard output or the file named in output;see “Output File” on page 53.You can also provide the tool with an input argument using the input option. Theargument must be in the form of an ASCII file of pre-prepared DNs and PINs (seeFigure 5-1). Note that the input file is not a substitute for the LDAP directoryentries; the filter attribute must still be provided. If an input file is provided, thetool updates only those filtered attributes that match the ones in the input file. Formore information about the input file, see “Input File” on page 51.