Ssl Options - Red Hat DIRECTORY SERVER 8.0 Command Reference Manual

Chapter 6. Command-Line Utilities
Option
-q
-w
Table 6.10. Commonly-Used ldapmodify Options

SSL Options

Use the following command-line options to specify that ldapmodify is to use LDAP over SSL
(LDAPS) when communicating with the Directory Server. LDAPS encrypts data during transit. Also,
use these options for certificate-based authentication. These options are valid only when SSL has
been turned on and configured for the Directory Server. For more information on certificate-based
authentication and on creating a certificate database for use with LDAP clients, see the "Managing
SSL" chapter in the Directory Server Administrator's Guide.
Ensure that the Directory Server's encrypted port is specified when using these options.
Option
-3
-I
-K
-N
184
Description
-p 1049
The default is 389. If -Z is used, the default is
636.
Causes each add to be performed silently
as opposed to being echoed to the screen
individually.
Specifies the password associated with the
distinguished name specified in the -D option.
For example:
-w mypassword
If a dash (-) is used as the password value,
the utility prompts for the password after the
command is entered. This avoids having the
password on the command line.
Description
Specifies that hostnames should be checked in
SSL certificates.
Specifies the SSL key password file that contains
the token:password pair.
Specifies the path, including the filename, of
the private key database of the client. Either the
absolute or relative (to the server root) path can
be specified. The -K option must be used when
the key database has a different name than
key3.db or when the key database is not under
the same directory as the certificate database,
the cert8.db file (the path for which is specified
with the -P option).
Specifies the certificate name to use for
certificate-based client authentication. For
example: