ldap - Access to manage-account commands in OpenDS -
opends provides command-line access many necessary account functions via manage-account utility. example, disable account:
manage-account set-account-is-disabled --operationvalue true --basedn uid=someuser,ou=people,dc=example,dc=com" --hostname hostname --port 389 --binddn "cn=directory manager" --bindpassword password
this fine , dandy have sysadmin administer ldap server in scenario have 1000s of users on globe becomes problem (imagine user locked out of account in japan while sysadmin asleep in us). we'd able programmatically tie of these manage-account functions can provide local admins/managers ability manage own users.
can provide insight on if possible , if how? writing in c# , can't find examples on it. looking @ .net api docs thought system.directoryservices.protocols.extendedrequest looked promising cannot figure out how use it.
any appreciated, thanks!
the manage-account tool uses ldap extended operation, code in opends/src/server/org/opends/server/extensions/passwordpolicystateextendedoperation.java.
alternately, can check opendj ldap sdk, has support extended operation, , allow write client application. opendj ldap sdk documented @ http://opendj.forgerock.org/opendj-ldap-sdk/ (and doc in developer's guide : http://opendj.forgerock.org/doc/dev-guide/opendj-dev-guide.html).
regards,
ludovic
Comments
Post a Comment