 |
» |
|
|
|
This section describes contributed tools and scripts which are not officially supported by HP at the present time. beq Search Tool | |
The new beq tool expands the search capability beyond that currently offered by nsquery, which is limited to hosts, passwd, and group. This search utility bypasses the name service switch and queries the backend directly based on the specified library. The search will include the following services: pwd, grp, shd, srv, prt, rpc, hst, net, ngp, and grm. | | | |  | NOTE: HP does not support the beq tool at the present time. | | | | |
The syntax for this tool, along with example output, is shown below. beq -k [n|d] -s <service> (-l <library>) (-h | -H <#>) <idl> (id1>
(<id2> (...)) |
where: - k [n|d]
Required. The search key may be either n for name string or d for digit (a numeral search).
- -s <service>
Required. Indicates what backends are to be searched for information.
- -l <library>
Query the backend directly. Bypass the APIs and skip the name service switch. - -h
Provides Help on this command. - -H <#>
Specifies Help level (0-5). Larger numbers provide more information. If you specify -h or -H, no other parameters are needed.
Table C-10 Service Description | Service | Description |
|---|
| pwd | Password | | grp | Group | | shd | Shadow Password | | srv | Service | | prt | Protocol | | rpc | RPC | | hst | Host | | net | Network | | ngp | Netgroup | | grm | Group Membership |
An example beq command using igrp1 (group name) as the search key, grp (group) as the service, and ldap as the library is shown below: ./beq -k n -s grp -l /usr/lib/libnss_ldap.1 igrp1
nss_status.............. NSS_SUCCESS
pw_name...........(iuser1)
pw_passwd.........(*)
pw_uid............(101)
pw_gid............(21)
pw_age............()
pw_comment........()
pw_gecos..........(gecos data in files)
pw_dir............(/home/iuser1)
pw_shell..........(/usr/bin/sh)
pw_audid..........(0)
pw_audflg.........(0) An example beq command using user name adm as the search key, pwd (password) as the service, and files as the library is shown below: ./beq -k n -s pwd -l /usr/lib/libnss_files.1 adm
nss_status....... NSS_SUCCESS
pw_name...........(adm)
pw_passwd.........(*)
pw_uid............(4)
pw_gid............(4)
pw_age............()
pw_comment........()
pw_gecos..........()
pw_dir............(/var/adm)
pw_shell..........(sbin/sh)
pw_audid..........(0)
pw_audflg.........(0) An example beq command using uid number 102 as the search key, pwd (password) as the service and ldap as the library is shown below: ./beq -k d -s pwd -l /usr/lib/libnss_ldap.1 102
nss_status.............. NSS_SUCCESS
pw_name...........(user2)
pw_passwd.........(*)
pw_uid............(102)
pw_gid............(21)
pw_age............()
pw_comment........()
pw_gecos..........(gecos data in files)
pw_dir............(/home/iuser2)
pw_shell..........(/usr/bin/sh)
pw_audid..........(0)
pw_audflg.........(0) An example beq command using group name igrp1 as the search key, grp (group) as the service, and ldap as the library is shown below: ./beq -k n -s grp -l /usr/lib/libnss_ldap.1 igrp1
nss_status.............. NSS_SUCCESS
gr_name...........(igrp1)
gr_passwd.........(*)
gr_gid............(21)
pw_age............()
gr_mem
(iuser1)
(iuser2)
(iuser3) An example beq command using gid number 22 as the search key, grp (group) as the service, and ldap as the library is shown below: ./beq -k d -s grp -l /usr/libnss_ldap.l 22
nss_status.............. NSS_SUCCESS
gr_name...........(igrp2)
gr_passwd.........(*)
gr_gid............(22)
pw_age............()
gr_mem
(iuser1)
Certutil — Certificate Database Tool | |
You can use the certutil command-line utility to create and modify the Netscape Communicator cert8.db and key3.db database files. This tool can also list, generate, modify, or delete certificates within the cert7.db file. You can also use this tool to create, change the password, generate new public and private key pairs, display the contents of the key database, or delete key pairs within the key3.db file. For detailed command options and their arguments, see Using the Certificate Database Tool available at http://www.mozilla.org/projects/security/pki/nss/tools/certutil.html. uid2dn — Display User's Distinguished Name Tool | |
This tool, found in /opt/ldapux/contrib/bin, displays the user's Distinguish Name (DN) information for a given UID.
where UID is a user's UID information. The following command displays the user's DN information for a given user's UID john: ./uid2dn john The output shows below after you run the above command: CN=john lee,CN=Users,DC=usa,DC=example,DC=hp,DC=com |
get_attr_map.pl — Get Attribute Map from Profile Tool | |
This tool, found in /opt/ldapux/contrib/bin, gets the attribute map information for a given name service from the profile file /etc/opt/ldapux/ldapux_profile.ldif.
get_attr_map.pl <service> <attribute> |
where services is the name of the supported service, attribute is the name of an attribute. The get_ads_domTool — Get the Fully Qualified Domain Name Tool | |
This tool, found in /opt/ldapux/contrib/bin, provides the fully qualified domain name for a given user.
where username is a user name. The following command displays the fully qualified domain name information for a given user john: ./get_ads_dom john The output shows below after you run the above command: Domain for user john is: usa.example.hp.com |
|
Printable version
