DSIDM(8)

📦

version 3.3.1 · 15 versions

🦋 DSIDM(8) 🦋

okay bestie, welcome to dsidm — straight out of the Generated Python Manual, section 8. This is the tool that lets you boss around a 389 Directory Server instance from the command line like the main character you are. 💅 Grab a snack, we're going through literally everything.

✨ NAME ✨

dsidm — yeah. That's the name. Short, iconic, no notes. 👑

🌸 SYNOPSIS 🌸

dsidm [-h] [-v] [-j] [-b BASEDN] [-D BINDDN] [-w BINDPW] [-W] [-y
PWDFILE] [-Z] instance
{account,group,initialise,init,organizationalunit,ou,posixgroup,user,client_config,role,service,uniquegroup}
...

like. look at all those curly braces. it's giving "choose your own adventure". 🌈

🎀 POSITIONAL ARGUMENTS 🎀

so there are a bunch of subcommands you can hand to dsidm, and each one is its own little world. ranking them for you (no ranking, they're all valid, that's just vibes):

dsidm account — manage generic accounts, with tasks like modify, locking and unlocking. 💜 Heads up though: this one does not create accounts. If you wanna make one, go see the user subcommand instead.
dsidm group — manage groups. The organizationalUnit (by default "ou=groups") needs to exist prior to managing groups. Groups uses the objectclass "groupOfNames" and the grouping attribute "member".
dsidm initialise — initialise a backend with domain information and sample entries. ✨
dsidm organizationalunit — manage organizational units.
dsidm posixgroup — manage posix groups. The organizationalUnit (by default ou=groups") needs to exist prior to managing posix groups.
dsidm user — manage posix users. The organizationalUnit (by default "ou=people") needs to exist prior to managing users.
dsidm client_config — display and generate client example configs for this LDAP server. 🖥️
dsidm role — manage roles.
dsidm service — manage service accounts. The organizationalUnit (by default "ou=Services") needs to exist prior to managing service accounts.
dsidm uniquegroup — manage groups. The organizationalUnit (by default "ou=groups") needs to exist prior to managing groups. Unique groups uses the objectclass "groupOfUniqueNames" and the grouping attribute "uniquemember".

fr fr, that "the ou has to exist first" thing is not a suggestion. it's a vibe check you will fail otherwise. 😭

💖 COMMAND 'dsidm account' 💖

🌟 usage

usage: dsidm instance account [-h]
                             {list,get-by-dn,modify-by-dn,rename-by-dn,delete,lock,unlock,entry-status,subtree-status,reset_password,change_password,bulk_update}
...

okay so the account command has eleven little sub-subcommands and they're all listed up there in the curly braces. let's go one by one, bestie.

🍓 POSITIONAL ARGUMENTS 'dsidm account' 🍓

dsidm account list — list accounts that could login to the directory (returns the full DN of the entry).
dsidm account get-by-dn — get-by-dn <dn>.
dsidm account modify-by-dn — modify-by-dn <dn> <add|delete|replace>:<attribute>:<value> ....
dsidm account rename-by-dn — rename the object.
dsidm account delete — deletes the account. 😬
dsidm account lock — lock.
dsidm account unlock — unlock.
dsidm account entry-status — status of a single entry.
dsidm account subtree-status — status of a subtree.
dsidm account reset_password — reset the password of an account. This should be performed by a directory admin. 👑
dsidm account change_password — change the password of an account. This can be performed by any user (with correct rights). 🫶
dsidm account bulk_update — perform a common operation to a set of entries.

🌈 COMMAND 'dsidm account list' 🌈

🌟 usage

usage: dsidm [-v] [-j] instance account list [-h]

🦋 COMMAND 'dsidm account get-by-dn' 🦋

🌟 usage

usage: dsidm [-v] [-j] instance account get-by-dn [-h] [dn]

🌟 arguments

dn — the dn to get and display.

💜 COMMAND 'dsidm account modify-by-dn' 💜

🌟 usage

usage: dsidm [-v] [-j] instance account modify-by-dn [-h] dn changes
[changes ...]

🌟 arguments

dn — the dn to get and display.
changes — a list of changes to apply in format: <add|delete|replace>:<attribute>:<value>.

🧚 COMMAND 'dsidm account rename-by-dn' 🧚

🌟 usage

usage: dsidm [-v] [-j] instance account rename-by-dn [-h]
[--keep-old-rdn] dn new_dn

🌟 arguments

dn — the dn to rename.
new_dn — a new role dn.

💅 OPTIONS 'dsidm account rename-by-dn' 💅

--keep-old-rdn — specify whether the old RDN (i.e. cn: old_role) should be kept as an attribute of the entry or not.

🎀 COMMAND 'dsidm account delete' 🎀

🌟 usage

usage: dsidm [-v] [-j] instance account delete [-h] [dn]

🌟 arguments

dn — the dn of the account to delete.

🔒 COMMAND 'dsidm account lock' 🔒

🌟 usage

usage: dsidm [-v] [-j] instance account lock [-h] [dn]

🌟 arguments

dn — the dn to lock.

🔓 COMMAND 'dsidm account unlock' 🔓

🌟 usage

usage: dsidm [-v] [-j] instance account unlock [-h] [dn]

🌟 arguments

dn — the dn to unlock.

⭐ COMMAND 'dsidm account entry-status' ⭐

🌟 usage

usage: dsidm [-v] [-j] instance account entry-status [-h] [-V] [dn]

🌟 arguments

dn — the single entry dn to check.

💫 OPTIONS 'dsidm account entry-status' 💫

-V, --details — print more account policy details about the entry. more tea, more lore. 🍵

🌸 COMMAND 'dsidm account subtree-status' 🌸

🌟 usage

usage: dsidm [-v] [-j] instance account subtree-status [-h] [-V] [-f
FILTER]
                                            [-s {one,sub}] [-i]
                                            [-o BECOME_INACTIVE_ON]
                                            basedn

🌟 arguments

basedn — search base for finding entries.

🫶 OPTIONS 'dsidm account subtree-status' 🫶

-V, --details — print more account policy details about the entries.
-f FILTER, --filter FILTER — search filter for finding entries.
-s {one,sub}, --scope {one,sub} — search scope (one, sub - default is sub.
-i, --inactive-only — only display inactivated entries.
-o BECOME_INACTIVE_ON, --become-inactive-on BECOME_INACTIVE_ON — only display entries that will become inactive before specified date (in a format 2007-04-25T14:30).

note the tiny missing closing paren in "default is sub" up there — that's the original, we keep it, we don't touch it. 😌

🔑 COMMAND 'dsidm account reset_password' 🔑

🌟 usage

usage: dsidm [-v] [-j] instance account reset_password [-h] [dn]
[new_password]

🌟 arguments

dn — the dn to reset the password for.
new_password — the new password to set.

🗝️ COMMAND 'dsidm account change_password' 🗝️

🌟 usage

usage: dsidm [-v] [-j] instance account change_password [-h]
                                                     [dn] [new_password]
                                                     [current_password]

🌟 arguments

dn — the dn to change the password for.
new_password — the new password to set.
current_password — the accounts current password.

💥 COMMAND 'dsidm account bulk_update' 💥

🌟 usage

usage: dsidm [-v] [-j] instance account bulk_update [-h] [-f FILTER] [-s
{one,sub}] [-x]
                                                 basedn changes [changes ...]

🌟 arguments

basedn — search base for finding entries, only the children of this DN are processed.
changes — a list of changes to apply in format: <add|delete|replace>:<attribute>:<value>.

🌟 OPTIONS 'dsidm account bulk_update' 🌟

-f FILTER, --filter FILTER — search filter for finding entries, default is '(objectclass=*)'.
-s {one,sub}, --scope {one,sub} — search scope (one, sub - default is sub.
-x, --stop — stop processing updates when an error occurs. Default is False.

👑 COMMAND 'dsidm group' 👑

🌟 usage

usage: dsidm instance group [-h]
                           {list,get,get_dn,create,delete,modify,rename,members,add_member,remove_member}
...

🎀 POSITIONAL ARGUMENTS 'dsidm group' 🎀

dsidm group list — list.
dsidm group get — get.
dsidm group get_dn — get_dn.
dsidm group create — create.
dsidm group delete — deletes the object.
dsidm group modify — modify <add|delete|replace>:<attribute>:<value> ....
dsidm group rename — rename the object.
dsidm group members — list member dns of a group.
dsidm group add_member — add a member to a group.
dsidm group remove_member — remove a member from a group.

🦋 COMMAND 'dsidm group list' 🦋

🌟 usage

usage: dsidm [-v] [-j] instance group list [-h] [--full-dn]

💖 OPTIONS 'dsidm group list' 💖

--full-dn — return the full DN of the entry instead of the RDN value.

💜 COMMAND 'dsidm group get' 💜

🌟 usage

usage: dsidm [-v] [-j] instance group get [-h] [selector]

🌟 arguments

selector — the term to search for.

🌈 COMMAND 'dsidm group get_dn' 🌈

🌟 usage

usage: dsidm [-v] [-j] instance group get_dn [-h] [dn]

🌟 arguments

dn — the dn to get.

✨ COMMAND 'dsidm group create' ✨

🌟 usage

usage: dsidm [-v] [-j] instance group create [-h] [--cn [CN]]
                                      [--description [DESCRIPTION]]

🌸 OPTIONS 'dsidm group create' 🌸

--cn [CN] — value of cn.
--description [DESCRIPTION] — value of description.

🍓 COMMAND 'dsidm group delete' 🍓

🌟 usage

usage: dsidm [-v] [-j] instance group delete [-h] [dn]

🌟 arguments

dn — the dn to delete.

🧚 COMMAND 'dsidm group modify' 🧚

🌟 usage

usage: dsidm [-v] [-j] instance group modify [-h] selector changes
[changes ...]

🌟 arguments

selector — the cn to modify.
changes — a list of changes to apply in format: <add|delete|replace>:<attribute>:<value>.

💫 COMMAND 'dsidm group rename' 💫

🌟 usage

usage: dsidm [-v] [-j] instance group rename [-h] [--keep-old-rdn]
selector new_name

🌟 arguments

selector — the cn to rename.
new_name — a new group name.

💅 OPTIONS 'dsidm group rename' 💅

--keep-old-rdn — specify whether the old RDN (i.e. cn: old_group) should be kept as an attribute of the entry or not.

🫶 COMMAND 'dsidm group members' 🫶

🌟 usage

usage: dsidm [-v] [-j] instance group members [-h] [cn]

🌟 arguments

cn — cn of group to list members of.

⭐ COMMAND 'dsidm group add_member' ⭐

🌟 usage

usage: dsidm [-v] [-j] instance group add_member [-h] [cn] [dn]

🌟 arguments

cn — cn of group to add member to.
dn — dn of object to add to group as member.

🎀 COMMAND 'dsidm group remove_member' 🎀

🌟 usage

usage: dsidm [-v] [-j] instance group remove_member [-h] [cn] [dn]

🌟 arguments

cn — cn of group to remove member from.
dn — dn of object to remove from group as member.

🔥 COMMAND 'dsidm initialise' 🔥

🌟 usage

usage: dsidm [-v] [-j] instance initialise [-h] [--version VERSION]

✨ OPTIONS 'dsidm initialise' ✨

--version VERSION — the version of entries to create.

🌟 COMMAND 'dsidm organizationalunit' 🌟

🌟 usage

usage: dsidm [-v] [-j] instance organizationalunit [-h]
                                        {list,get,get_dn,create,delete,modify,rename}
...

💜 POSITIONAL ARGUMENTS 'dsidm organizationalunit' 💜

dsidm organizationalunit list — list.
dsidm organizationalunit get — get.
dsidm organizationalunit get_dn — get_dn.
dsidm organizationalunit create — create.
dsidm organizationalunit delete — deletes the object.
dsidm organizationalunit modify — modify <add|delete|replace>:<attribute>:<value> ....
dsidm organizationalunit rename — rename the object.

🌈 COMMAND 'dsidm organizationalunit list' 🌈

🌟 usage

usage: dsidm [-v] [-j] instance organizationalunit list [-h] [--full-dn]

💖 OPTIONS 'dsidm organizationalunit list' 💖

--full-dn — return the full DN of the entry instead of the RDN value.

🦋 COMMAND 'dsidm organizationalunit get' 🦋

🌟 usage

usage: dsidm [-v] [-j] instance organizationalunit get [-h] [selector]

🌟 arguments

selector — the term to search for.

🍓 COMMAND 'dsidm organizationalunit get_dn' 🍓

🌟 usage

usage: dsidm [-v] [-j] instance organizationalunit get_dn [-h] [dn]

🌟 arguments

dn — the dn to get.

🧚 COMMAND 'dsidm organizationalunit create' 🧚

🌟 usage

usage: dsidm [-v] [-j] instance organizationalunit create [-h] [--ou
[OU]]

💅 OPTIONS 'dsidm organizationalunit create' 💅

--ou [OU] — the value of ou, bestie. that's the whole thing, that's the option 💖

🫶 COMMAND 'dsidm organizationalunit delete' 🫶

usage: dsidm [-v] [-j] instance organizationalunit delete [-h] [dn]

dn — the dn to delete. yes, that dn. say bye 👋

✨ COMMAND 'dsidm organizationalunit modify' ✨

usage: dsidm [-v] [-j] instance organizationalunit modify [-h]
                                                          selector
                                                          changes
       [changes ...]

selector — the ou to modify, iykyk
changes — a list of changes to apply, in the format: <add|delete|replace>:<attribute>:<value> — literally that exact shape, don't freestyle it 💅

🦋 COMMAND 'dsidm organizationalunit rename' 🦋

usage: dsidm [-v] [-j] instance organizationalunit rename [-h]
                                                          [--keep-old-rdn]
                                                          selector
       new_name

selector — the ou to rename
new_name — a new organizational unit name ✨ fresh identity, we love a glow up

🌸 OPTIONS 'dsidm organizationalunit rename' 🌸

--keep-old-rdn — specify whether the old RDN (i.e. ou: old_ou) should be kept as an attribute of the entry or not

👑 COMMAND 'dsidm posixgroup' 👑

usage: dsidm instance posixgroup [-h]
                                 {list,get,get_dn,create,delete,modify,rename}
       ...

🌈 POSITIONAL ARGUMENTS 'dsidm posixgroup' 🌈

dsidm posixgroup list — list
dsidm posixgroup get — get
dsidm posixgroup get_dn — get_dn
dsidm posixgroup create — create
dsidm posixgroup delete — deletes the object 💀
dsidm posixgroup modify — modify <add|delete|replace>:<attribute>:<value> ...
dsidm posixgroup rename — rename the object

🍓 COMMAND 'dsidm posixgroup list' 🍓

usage: dsidm [-v] [-j] instance posixgroup list [-h] [--full-dn]

💜 OPTIONS 'dsidm posixgroup list' 💜

--full-dn — return the full DN of the entry instead of the RDN value. the whole thing, not the lil nickname 🎀

🧚 COMMAND 'dsidm posixgroup get' 🧚

usage: dsidm [-v] [-j] instance posixgroup get [-h] [selector]

selector — the term to search for 🔍

💖 COMMAND 'dsidm posixgroup get_dn' 💖

usage: dsidm [-v] [-j] instance posixgroup get_dn [-h] [dn]

dn — the dn to get

⭐ COMMAND 'dsidm posixgroup create' ⭐

usage: dsidm [-v] [-j] instance posixgroup create [-h] [--cn [CN]]
                                                  [--gidNumber [GIDNUMBER]]

🎀 OPTIONS 'dsidm posixgroup create' 🎀

--cn [CN] — value of cn
--gidNumber [GIDNUMBER] — value of gidNumber

💀 COMMAND 'dsidm posixgroup delete' 💀

usage: dsidm [-v] [-j] instance posixgroup delete [-h] [dn]

dn — the dn to delete. gone. reduced to atoms 🫠

🔥 COMMAND 'dsidm posixgroup modify' 🔥

usage: dsidm [-v] [-j] instance posixgroup modify [-h] selector changes
[changes ...]

selector — the cn to modify
changes — a list of changes to apply in format: <add|delete|replace>:<attribute>:<value>

🌸 COMMAND 'dsidm posixgroup rename' 🌸

usage: dsidm [-v] [-j] instance posixgroup rename [-h] [--keep-old-rdn]
                                                  selector new_name

selector — the cn to rename
new_name — a new posix group name

🦋 OPTIONS 'dsidm posixgroup rename' 🦋

--keep-old-rdn — specify whether the old RDN (i.e. cn: old_group) should be kept as an attribute of the entry or not

👑 COMMAND 'dsidm user' 👑

usage: dsidm instance user [-h]
                           [--user-type
       {basic,posix,service,traditional}]
                           {list,get,get-pwp,get_dn,create,modify,rename,delete}
       ...

🌈 POSITIONAL ARGUMENTS 'dsidm user' 🌈

dsidm user list — list
dsidm user get — get
dsidm user get-pwp — show the effective password policy for a user 🔐
dsidm user get_dn — get_dn
dsidm user create — create
dsidm user modify — modify <add|delete|replace>:<attribute>:<value> ...
dsidm user rename — rename the object
dsidm user delete — deletes the object 💀

✨ COMMAND 'dsidm user list' ✨

usage: dsidm [-v] [-j] instance user list [-h] [--full-dn]

💜 OPTIONS 'dsidm user list' 💜

--full-dn — return the full DN of the entry instead of the RDN value

🍓 COMMAND 'dsidm user get' 🍓

usage: dsidm [-v] [-j] instance user get [-h] [selector]

selector — the term to search for

🔐 COMMAND 'dsidm user get-pwp' 🔐

usage: dsidm [-v] [-j] instance user get-pwp [-h] [--parent-dn
PARENT_DN] [selector]

Resolve and display the password policy (global, user local, or subtree local) that applies to the user, including all effective settings. so like, which rules are actually coming for you, no cap 💅

selector — the user identifier to look up (same as user get, typically uid)

🎀 OPTIONS 'dsidm user get-pwp' 🎀

--parent-dn PARENT_DN — a base DN to use for user lookups. default is "ou=people,$SUFFIX" for users, or "ou=services,$SUFFIX" for service accounts

🧚 COMMAND 'dsidm user get_dn' 🧚

usage: dsidm [-v] [-j] instance user get_dn [-h] [dn]

dn — the dn to get

⭐ COMMAND 'dsidm user create' ⭐

usage: dsidm [-v] [-j] instance user create [-h] [--uid [UID]] [--cn
[CN]]
                                    [--displayName [DISPLAYNAME]]
                                    [--uidNumber [UIDNUMBER]]
                                    [--gidNumber [GIDNUMBER]]
                                    [--homeDirectory [HOMEDIRECTORY]]

🦋 OPTIONS 'dsidm user create' 🦋

--uid [UID] — value of uid
--cn [CN] — value of cn
--displayName [DISPLAYNAME] — value of displayName
--uidNumber [UIDNUMBER] — value of uidNumber
--gidNumber [GIDNUMBER] — value of gidNumber
--homeDirectory [HOMEDIRECTORY] — value of homeDirectory

🔥 COMMAND 'dsidm user modify' 🔥

usage: dsidm [-v] [-j] instance user modify [-h] selector changes
[changes ...]

selector — the uid to modify
changes — a list of changes to apply in format: <add|delete|replace>:<attribute>:<value>

💖 COMMAND 'dsidm user rename' 💖

usage: dsidm [-v] [-j] instance user rename [-h] [--keep-old-rdn]
selector new_name

selector — the uid to modify
new_name — a new user name

💜 OPTIONS 'dsidm user rename' 💜

--keep-old-rdn — specify whether the old RDN (i.e. cn: old_user) should be kept as an attribute of the entry or not

💀 COMMAND 'dsidm user delete' 💀

usage: dsidm [-v] [-j] instance user delete [-h] [dn]

dn — the dn to delete

🌸 OPTIONS 'dsidm user' 🌸

--user-type {basic,posix,service,traditional} — the type of user to manage. "basic" is an entry based off of objectclasses: nsPerson, nsAccount, and nsOrgPerson. "posix" is based off of objectclasses: nsPerson, nsAccount, nsOrgPerson, and posixAccount. "service" is based off of objectclasses: nsAccount and applicationProcess. "traditional", aka legacy, is based off of objectclasses: person, organizationalPerson, and inetOrgPerson. The default user type is "posix" 🫶

🎀 COMMAND 'dsidm client_config' 🎀

usage: dsidm instance client_config [-h] {sssd.conf,ldap.conf,display}
...

🌈 POSITIONAL ARGUMENTS 'dsidm client_config' 🌈

dsidm client_config sssd.conf — generate a SSSD configuration for this LDAP server
dsidm client_config ldap.conf — generate an OpenLDAP ldap.conf configuration for this LDAP server
dsidm client_config display — display generic application parameters for LDAP connection

⭐ COMMAND 'dsidm client_config sssd.conf' ⭐

usage: dsidm instance client_config sssd.conf [-h] [allowed_group]

allowed_group — the name of the group allowed access to this system 🔐

🧚 COMMAND 'dsidm client_config ldap.conf' 🧚

usage: dsidm instance client_config ldap.conf [-h]

🍓 COMMAND 'dsidm client_config display' 🍓

usage: dsidm instance client_config display [-h]

👑 COMMAND 'dsidm role' 👑

usage: dsidm [-v] [-j] instance role [-h]
                           {list,get,get-by-dn,create-managed,create-filtered,create-nested,modify-by-dn,rename-by-dn,delete,lock,unlock,entry-status,subtree-status}
...

🌈 POSITIONAL ARGUMENTS 'dsidm role' 🌈

dsidm role list — list roles that could login to the directory
dsidm role get — get
dsidm role get-by-dn — get-by-dn <dn>
dsidm role create-managed — create
dsidm role create-filtered — create
dsidm role create-nested — create
dsidm role modify-by-dn — modify-by-dn <dn> <add|delete|replace>:<attribute>:<value> ...
dsidm role rename-by-dn — rename the object
dsidm role delete — deletes the role 💀
dsidm role lock — lock
dsidm role unlock — unlock
dsidm role entry-status — status of a single entry
dsidm role subtree-status — status of a subtree

✨ COMMAND 'dsidm role list' ✨

usage: dsidm [-v] [-j] instance role list [-h] [--full-dn]

💜 OPTIONS 'dsidm role list' 💜

--full-dn — return the full DN of the entry instead of the RDN value

🔍 COMMAND 'dsidm role get' 🔍

usage: dsidm [-v] [-j] instance role get [-h] [selector]

selector — the term to search for

🦋 COMMAND 'dsidm role get-by-dn' 🦋

usage: dsidm [-v] [-j] instance role get-by-dn [-h] [dn]

dn — the dn to get and display

🎀 COMMAND 'dsidm role create-managed' 🎀

usage: dsidm [-v] [-j] instance role create-managed [-h] [--cn [CN]]

🌸 OPTIONS 'dsidm role create-managed' 🌸

--cn [CN] — value of cn

🦋 COMMAND 'dsidm role create-filtered' 🦋

usage: dsidm [-v] [-j] instance role create-filtered [-h] [--cn [CN]]

🌸 OPTIONS 'dsidm role create-filtered' 🌸

--cn [CN] — value of cn

🪆 COMMAND 'dsidm role create-nested' 🪆

usage: dsidm [-v] [-j] instance role create-nested [-h] [--cn [CN]]
                                                   [--nsroledn
[NSROLEDN]]

🌸 OPTIONS 'dsidm role create-nested' 🌸

--cn [CN] — value of cn
--nsroledn [NSROLEDN] — value of nsroledn

🔥 COMMAND 'dsidm role modify-by-dn' 🔥

usage: dsidm [-v] [-j] instance role modify-by-dn [-h]
                                                  dn changes [changes
...

dn — the dn to modify
changes — a list of changes to apply in format: <add|delete|replace>:<attribute>:<value>

💖 COMMAND 'dsidm role rename-by-dn' 💖

usage: dsidm [-v] [-j] instance role rename-by-dn [-h] [--keep-old-rdn]
                                                  dn new_dn

dn — the dn to rename
new_dn — a new account dn

💜 OPTIONS 'dsidm role rename-by-dn' 💜

--keep-old-rdn — specify whether the old RDN (i.e. cn: old_account) should be kept as an attribute of the entry or not

💀 COMMAND 'dsidm role delete' 💀

usage: dsidm [-v] [-j] instance role delete [-h] [dn]

dn — the dn of the role to delete

🔒 COMMAND 'dsidm role lock' 🔒

usage: dsidm [-v] [-j] instance role lock [-h] [dn]

dn — the dn to lock

💖 COMMAND 'dsidm role unlock' 💖

usage: dsidm [-v] [-j] instance role unlock [-h] [dn]

dn — the dn you wanna unlock 🔓

🔍 COMMAND 'dsidm role entry-status' 🔍

usage: dsidm [-v] [-j] instance role entry-status [-h] [dn]

dn — the single entry dn to check, okay? just the one, no sneaking in a whole subtree 👀

🌳 COMMAND 'dsidm role subtree-status' 🌳

usage: dsidm [-v] [-j] instance role subtree-status [-h] [-f FILTER]
                                                    [-s {base,one,sub}]
                                                    basedn

basedn — search base for finding entries, like the little home base for your search 🏠

🎀 OPTIONS 'dsidm role subtree-status' 🎀

-f FILTER, --filter FILTER — search filter for finding entries 🕵️‍♀️
-s {base,one,sub}, --scope {base,one,sub} — search scope (base, one, sub - default is sub 😌

🛠️ COMMAND 'dsidm service' 🛠️

usage: dsidm [-v] [-j] instance service [-h]
                             {list,get,get_dn,create,modify,rename,delete}
...

✨ POSITIONAL ARGUMENTS 'dsidm service' ✨

dsidm service list — list 📋
dsidm service get — get 🎯
dsidm service get_dn — get_dn 🧭
dsidm service create — create 🌱
dsidm service modify — modify <add|delete|replace>:<attribute>:<value> ... 🔧
dsidm service rename — rename the object ✏️
dsidm service delete — deletes the object 🗑️

📋 COMMAND 'dsidm service list' 📋

usage: dsidm [-v] [-j] instance service list [-h] [--full-dn]

💅 OPTIONS 'dsidm service list' 💅

--full-dn — return the full DN of the entry instead of the RDN value, like give me the WHOLE address not just the name bestie 🏡

🎯 COMMAND 'dsidm service get' 🎯

usage: dsidm [-v] [-j] instance service get [-h] [selector]

selector — the term to search for 🔎

🧭 COMMAND 'dsidm service get_dn' 🧭

usage: dsidm [-v] [-j] instance service get_dn [-h] [dn]

dn — the dn to get, hand it over 📬

🌱 COMMAND 'dsidm service create' 🌱

usage: dsidm [-v] [-j] instance service create [-h] [--cn [CN]]
                                               [--description
[DESCRIPTION]]

🍓 OPTIONS 'dsidm service create' 🍓

--cn [CN] — value of cn 🏷️
--description [DESCRIPTION] — value of description 📝

🔧 COMMAND 'dsidm service modify' 🔧

usage: dsidm [-v] [-j] instance service modify [-h]
                                               selector changes [changes
...]

selector — the cn to modify 🎯
changes — a list of changes to apply, in this format: <add|delete|replace>:<attribute>:<value> 🧾

✏️ COMMAND 'dsidm service rename' ✏️

usage: dsidm [-v] [-j] instance service rename [-h] [--keep-old-rdn]
                                               selector new_name

selector — the cn to modify 👈
new_name — a new service name ✨

🌸 OPTIONS 'dsidm service rename' 🌸

--keep-old-rdn — specify whether the old RDN (i.e. cn: old_service) should be kept as an attribute of the entry or not 🤔

🗑️ COMMAND 'dsidm service delete' 🗑️

usage: dsidm [-v] [-j] instance service delete [-h] [dn]

dn — the dn to delete, bye bye 💀

👑 COMMAND 'dsidm uniquegroup' 👑

usage: dsidm instance uniquegroup [-h]
                                  {list,get,get_dn,create,delete,modify,rename,members,add_member,remove_member}
...

🌈 POSITIONAL ARGUMENTS 'dsidm uniquegroup' 🌈

dsidm uniquegroup list — list 📋
dsidm uniquegroup get — get 🎯
dsidm uniquegroup get_dn — get_dn 🧭
dsidm uniquegroup create — create 🌱
dsidm uniquegroup delete — deletes the object 🗑️
dsidm uniquegroup modify — modify <add|delete|replace>:<attribute>:<value> ... 🔧
dsidm uniquegroup rename — rename the object ✏️
dsidm uniquegroup members — list member dns of a group 👯‍♀️
dsidm uniquegroup add_member — add a member to a group ➕
dsidm uniquegroup remove_member — remove a member from a group ➖

📋 COMMAND 'dsidm uniquegroup list' 📋

usage: dsidm [-v] [-j] instance uniquegroup list [-h] [--full-dn]

💅 OPTIONS 'dsidm uniquegroup list' 💅

--full-dn — return the full DN of the entry instead of the RDN value, the full ✨luxury✨ version of the address 🏡

🎯 COMMAND 'dsidm uniquegroup get' 🎯

usage: dsidm [-v] [-j] instance uniquegroup get [-h] [selector]

selector — the term to search for 🔎

🧭 COMMAND 'dsidm uniquegroup get_dn' 🧭

usage: dsidm [-v] [-j] instance uniquegroup get_dn [-h] [dn]

dn — the dn to get 📬

🌱 COMMAND 'dsidm uniquegroup create' 🌱

usage: dsidm [-v] [-j] instance uniquegroup create [-h] [--cn [CN]]

🍓 OPTIONS 'dsidm uniquegroup create' 🍓

--cn [CN] — value of cn 🏷️

🗑️ COMMAND 'dsidm uniquegroup delete' 🗑️

usage: dsidm [-v] [-j] instance uniquegroup delete [-h] [dn]

dn — the dn to delete 💀

🔧 COMMAND 'dsidm uniquegroup modify' 🔧

usage: dsidm [-v] [-j] instance uniquegroup modify [-h] selector changes
[changes ...]

selector — the cn to modify 🎯
changes — a list of changes to apply, in this format: <add|delete|replace>:<attribute>:<value> 🧾

✏️ COMMAND 'dsidm uniquegroup rename' ✏️

usage: dsidm [-v] [-j] instance uniquegroup rename [-h] [--keep-old-rdn]
                                         selector new_name

selector — the cn to rename 👈
new_name — a new group name ✨

🌸 OPTIONS 'dsidm uniquegroup rename' 🌸

--keep-old-rdn — specify whether the old RDN (i.e. cn: old_group) should be kept as an attribute of the entry or not 🤔

👯‍♀️ COMMAND 'dsidm uniquegroup members' 👯‍♀️

usage: dsidm [-v] [-j] instance uniquegroup members [-h] [cn]

cn — cn of group to list members of 📝

➕ COMMAND 'dsidm uniquegroup add_member' ➕

usage: dsidm [-v] [-j] instance uniquegroup add_member [-h] [cn] [dn]

cn — cn of group to add member to 🫶
dn — dn of object to add to group as member 🎀

➖ COMMAND 'dsidm uniquegroup remove_member' ➖

usage: dsidm [-v] [-j] instance uniquegroup remove_member [-h] [cn] [dn]

cn — cn of group to remove member from 👋
dn — dn of object to remove from group as member 🌙

✨ OPTIONS ✨

the global ones, the ones that go on every single command, no cap 🫶

-v, --verbose — display verbose operation tracing during command execution, like it tells you EVERYTHING it's doing 🗣️🔥
-j, --json — return result in a JSON object 🧾✨ (perfect for when you're piping into something, iykyk)
-b BASEDN, --basedn BASEDN — base DN (root naming context) of the instance to manage 🏠
-D BINDDN, --binddn BINDDN — the account to bind as for executing operations 🪪
-w BINDPW, --bindpw BINDPW — password for the bind DN 🔑
-W, --prompt — prompt for password of the bind DN 🙋‍♀️
-y PWDFILE, --pwdfile PWDFILE — specifies a file containing the password of the bind DN 📁
-Z, --starttls — connect with StartTLS 🔒

lowkey important: most of these commands take a dn or a selector and if you give them nothing they'll just do their little interactive thing instead — the manpage is very chill about it, so read the usage line before you go full send 💅

👑 AUTHOR 👑

"Red Hat, Inc., and William Brown" <389-devel@lists.fedoraproject.org> 💌

and that's a wrap on DSIDM(8), bestie!! 🎀 this whole thing is from lib389 3.3.1, dated 2026-09-11, and it lives in section DSIDM(8) of the manual. go forth and directory-server slay, you absolute icon 👑✨💖

📦 where this page comes from

ubuntu stonking: python3-lib389 3.3.1-3 · GPL-3.0-or-later AND Other
💖 girlified by deepseek-ai/DeepSeek-V4.1-Flash on 2026-11-03: a language model's rewrite of the original, under its terms