LDAPMODRDN(1) LDAPMODRDN(1)

NAME
       ldapmodrdn - LDAP rename entry tool

SYNOPSIS
       llddaappmmooddrrddnn  [-rr]  [-nn]  [-vv]  [-kk]  [-KK]  [-cc]  [-MM[[MM]]] [-dd debuglevel]
       [-DD binddn] [-WW] [-ww passwd] [-yy passwdfile] [-HH ldapuri] [-hh ldaphost]
       [-pp ldapport]  [-PP 2|3] [-OO security-properties]] [-II] [-QQ] [-UU authcid]
       [-RR realm] [-xx] [-XX authzid] [-YY mech] [-ZZ[[ZZ]]] [-ff file] [dn rdn]

DESCRIPTION
       llddaappmmooddrrddnn is  a  shell-accessible  interface  to  the  llddaappmmooddrrddnn22(3)
       library call.

       llddaappmmooddrrddnn  opens  a  connection to an LDAP server, binds, and modifies
       the RDN of entries.  The entry information is read from standard input,
       from  file  through  the use of the -f option, or from the command-line
       pair dn and rdn.

OOPPTTIIOONNSS
       -rr     Remove old RDN values from the entry.  Default is  to  keep  old
              values.

       -nn     Show  what  would  be  done,  but don't actually change entries.
              Useful for debugging in conjunction with -v.

       -vv     Use verbose mode, with many diagnostics written to standard out-
              put.

       -kk     Use Kerberos IV authentication instead of simple authentication.
              It is assumed that you already  have  a  valid  ticket  granting
              ticket.   llddaappmmooddrrddnn  must be compiled with Kerberos support for
              this option to have effect.

       -KK     Same as -k, but only does step 1 of the Kerberos IV bind.   This
              is   useful   when  connecting  to  a  slapd  and  there  is  no
              x500dsa.hostname principal registered with your Kerberos  Domain
              Controller(s).

       -cc     Continuous operation mode.  Errors  are  reported,  but ldapmod-
              rdn will  continue  with  modifications.    The  default  is  to
              exit after reporting an error.

       -MM[[MM]]  Enable manage DSA IT control.  -MMMM makes control critical.

       -dd ddeebbuugglleevveell
              Set  the LDAP debugging level to debuglevel.  llddaappmmooddrrddnn must be
              compiled with LDAPDEBUG defined for this  option  to  have  any
              effect.

       -ff ffiillee
              Read  the  entry  modification  information from file instead of
              from standard input or the command-line.

       -xx     Use simple authentication instead of SASL.

       -DD bbiinnddddnn
              Use the Distinguished Name binddn to bind to the LDAP directory.

       -WW     Prompt for simple authentication.  This is used instead of spec-
              ifying the password on the command line.

       -ww ppaasssswwdd
              Use passwd as the password for simple authentication.

       -yy passwdfile
              Use complete contents of passwdfile as the password  for  simple
              authentication.

       -HH ldapuri
              Specify URI(s) referring to the ldap server(s).

       -hh ldaphost
              Specify  an  alternate host on which the ldap server is running.
              Deprecated in favor of -H.

       -pp ldapport
              Specify an alternate TCP port where the ldap server  is  listen-
              ing.  Deprecated in favor of -H.

       -PP 2|3 Specify the LDAP protocol version to use.

       -OO security-properties
              Specify SASL security properties.

       -II     Enable  SASL  Interactive  mode.   Always prompt.  Default is to
              prompt only as needed.

       -QQ     Enable SASL Quiet mode.  Never prompt.

       -UU authcid
              Specify the authentication ID for SASL bind. The form of the  ID
              depends on the actual SASL mechanism used.

       -RR realm
              Specify  the  realm of authentication ID for SASL bind. The form
              of the realm depends on the actual SASL mechanism used.

       -XX authzid
              Specify the requested authorization ID for SASL  bind.   authzid
              must be one of the following formats: ddnn:: or
              uu::

       -YY mech
              Specify the SASL mechanism to be  used  for  authentication.  If
              it's  not  specified, the program will choose the best mechanism
              the server knows.

       -ZZ[[ZZ]]  Issue StartTLS (Transport Layer Security) extended operation. If
              you  use  -ZZZZ, the command will require the operation to be suc-
              cessful.

IINNPPUUTT FFOORRMMAATT
       If the command-line arguments dn and rdn are given,  rdn  will  replace
       the RDN of the entry specified by the DN, dn.

       Otherwise,  the  contents  of  file (or standard input if no -f flag is
       given) should consist of one or more entries.

           Distinguished Name (DN)
           Relative Distinguished Name (RDN)

       One or more blank lines may be used to separate each DN/RDN pair.

EEXXAAMMPPLLEE
       Assuming that the file //ttmmpp//eennttrryymmooddss exists and has the contents:

           cn=Modify Me,dc=example,dc=com
           cn=The New Me

       the command:

           ldapmodrdn -r -f /tmp/entrymods

       will change the RDN of the "Modify Me" entry from "Modify Me"  to  "The
       New Me" and the old cn, "Modify Me" will be removed.


DIAGNOSTICS
       Exit  status is 0 if no errors occur.  Errors result in a non-zero exit
       status and a diagnostic message being written to standard error.

SEE ALSO
       llddaappaadddd(1), llddaappddeelleettee(1), llddaappmmooddiiffyy(1), llddaappsseeaarrcchh(1),  llddaapp..ccoonnff(5),
       llddaapp(3), llddaappmmooddrrddnn22(3)

AUTHOR       The OpenLDAP Project 

AACCKKNNOOWWLLEEDDGGEEMMEENNTTSS
       OOppeennLLDDAAPP   is   developed   and  maintained  by  The  OpenLDAP  Project
       (http://www.openldap.org/).  OOppeennLLDDAAPP is  derived  from  University  of
       Michigan LDAP 3.3 Release.



OpenLDAP 2.2.19                   2004/11/26                     LDAPMODRDN(1)