戻る
-
タイトル
How can I move an object from one OU to another in Active Directory, using commandline from th -
説明
How can I move an object from one OU to another in Active Directory, using commandline from the Unix host?
-
対策
VAS 3.3+ allows such changes through ldapmodify. An example is shown below (moving a user object from OU=Unix-Enabled-Users to OU=TestOU)
# /opt/quest/bin/vastool -u host/ attrs qasuser distinguishedName
distinguishedName: CN=qasuser,OU=Unix-Enabled-Users,DC=yourdomain,DC=com# cat /tmp/modfile.ldif
dn: CN=qasuser,OU=Unix-Enabled-Users,DC=yourdomain,DC=com
changetype: modrdn
newrdn: CN=qasuser
deleteoldrdn: 1
newsuperior: OU=TestOU,DC=yourdomain,DC=com# /opt/quest/bin/ldapmodify -h dc.yourdomain.com -p 389 -u administrator -f /tmp/modfile.ldif
Password for administrator@YOURDOMAIN.COMmodifying rdn of entry "CN=qasuser,OU=Unix-Enabled-Users,DC=yourdomain,DC=com"
rename completed# vastool -u host/ attrs qasuser distinguishedName
distinguishedName: CN=qasuser,OU=TestOU,DC=yourdomain,DC=com -
追加情報
LDIF update statement format for moving and/or renaming an entry:
dn: the dn of the entry to rename or to move
changetype: modrdn
newrdn: the new relative distinguished name (rdn)
deleteoldrdn: 1 or 0
newsuperior: the parent rdn where to link the entry.