by Greg Breheny

-This tool was sent in by Peter Norris.

LDAPDO, is a very flexible tool written in perl, we use at the University to update our eDirectories. We found it was easier to work with than pure ldif files.

It has some great functions. For example it is very easy to list users into a file, modify the file and re-import the file back into eDirectory. You can have multiple .conf files pointing to different Directories. Such as your Identity Vault and Authentication Tree..

ldapdo -fConfile2.txt

The tool was written by one of the guys here. It took me ages for him to agree to publish it up here, so I hope you find it useful.

There are some good examples in both the ldapdo perl file and the readme.

Ldapdo relies on some modules from perl that are NOT installed by default. Here is a basic install instructions.. (It can take quite a while to install these, and I always get errors... however I find doing the second part twice seems to do the trick)

• first install cpan (the perl package installation tool)

perl -MCPAN -e shell

• install ldapdo dependencies

perl -MCPAN -e "install Net::LDAP"

• you will be prompted for several missing modules
  
  you only need to enter 'y' to install these
  
  

  Convert::ASN1
  IO::Socket::SSL
  Net::SSLeay

  
  
  

This will come up with Some Errors. However it does not seem to stop LDAPDO from working..

You must change some defaults in the .conf file to connect to your LDAP environment.

We use a dedicated LDAP account and have removed the accounts rights to delete objects. I would strongly recommend backing up your eDirectory regularly when using this tool (not that we have ever had an issue).

We use the LDAPDO tool on both eDirectory and AD without any problems..

I suggest reading the Readme as it has some good examples in it.

However a quick gotcha, if you want to list all attributes from the CONF file use -v3 (although this can be changed via the conf file....)