Chapter 2. Managing directory entries using the web console You can add, edit, rename, and delete LDAP entries using the web console. 2.1. Adding an LDAP entry using the web console You can create the following entries using the web console: users groups roles organizational units (OUs) custom entries For example, you want to create a POSIX user cn=John Smith,ou=people,dc=example,dc=com with a password. Prerequisites You are logged into the Directory Server web console. The parent entry exists. For example, ou=people,dc=example,dc=com . Procedure Open the LDAP Browser menu to reveal the list of existing suffixes. Using the Tree or Table view, expand the parent entry ou=people,dc=example,dc=com under which you want to create a user. Click the Options menu (⫶) and select New to open the wizard window. Select the Create a new User option and click . For the user entry, select Posix Account type and click . Optional: Select additional attributes, such as userPassword , and click . You can view all selected attributes by expanding the drop-down list near the step name. Set a value for each attribute: Click on the pencil button of the attribute and add a value. Note that a separate menu opens when you set the userPassword value. The value is filled with asterisks (*) to hide the plain text. Click on the check button to save changes. Optional: Set an additional attribute value by clicking the Options menu (⫶) Add Another Value . After you have set all values, click . Verify that all entry details are correct and click Create User . Directory Server creates the entry with mandatory attributes for a POSIX user and sets the password to it. You can click Back to modify entry settings, or click Cancel to cancel the entry creation. View the Result for Entry Creation and click Finish . Verification Navigate to LDAP Browser Search . Select the database suffix that contains the entry, such as dc=example,cd=com . Enter your search criteria in the field, such as John , and press Enter . Find the entry you recently created in the list of entries. 2.2. Editing an LDAP entry using the web console You can modify a directory entry using the web console. This example modifies a user entry cn=John Smith,ou=people,dc=example,dc=com by: adding telephone numbers 556778987 and 556897445 . adding email jsmith@example.com . changing the password. Prerequisites You are logged into the Directory Server web console. Procedure Open the LDAP Browser menu. Using the Tree or Table view, expand the entry you want to edit, such as cn=John Smith,ou=people,dc=example,dc=com . Click the Options menu (⫶) and select Edit to open the wizard window. Optional: In the Select ObjectClasses step, add or delete object classes for the entry. Click . In the Select Attributes step, add telephoneNumber and mail attributes to the entry and click . If you do not see an attribute you want to add to the entry it means that you did not add corresponding object class in the step. Note In this step, you can not delete mandatory attributes of the selected object classes. In the Edit Attribute Values step, set telephoneNumber to 556778987 and 556897445 , mail to jsmith@example.com and change userPassword value: Click on the pencil button of the attribute and add or change a new value. Click on the check button to save changes. Optional: Set an additional value to an attribute by clicking the Options menu (⫶) Add Another Value . The telephoneNumber attribute has two values in this example. When you set all values, click . Review your changes and click . To edit the entry, click Modify Entry . You can click Back to make other changes to the entry, or click Cancel to cancel the entry editing. View the Result for Entry Modification and click Finish . Verification Expand the entry details and view the new changes appear among the entry attributes. Additional resources Using roles in Directory Server Using groups in Directory Server 2.3. Renaming and relocating an LDAP entry or subtree using the web console You can rename or relocate a directory entry or a subtree using the web console. This example renames and relocates the entry cn=John Smith,ou=people,dc=example,dc=com to cn=Tom Smith,ou=clients,dc=example,dc=com . Prerequisites You are logged into the Directory Server web console. Procedure Open the LDAP Browser menu. Using the Tree or Table view, expand the entry you want to modify, such as cn=John Smith,ou=people,dc=example,dc=com . Click the Options menu (⫶) and select Rename to open the wizard window. In the Select The Naming Attribute And Value step: Set a new value Tom Smith for the naming attribute cn and click . Optional: Select another naming attribute from the drop-down menu. Optional: In case you want to delete the old entry and create a new one using the new RDN, check the Delete the old RDN . In Select The Entry Location step, select the parent entry for the new location, and click . Review changes you made to the entry and click . If the entry details are correct, click Change Entry Name . You can click Back to make other changes to the entry or click Cancel to cancel the entry modification. View Result for Entry Modification and click Finish . Verification Expand the entry details and review the updated entry. 2.4. Deleting an LDAP entry using the web console You can delete a directory entry or a subtree using the web console. This example deletes the entry cn=Tom Smith,ou=clients,dc=example,dc=com . Prerequisites You are logged into the Directory Server web console. Procedure Open the LDAP Browser menu. Using the Tree or Table view, expand the entry you want to delete, such as cn=Tom Smith,ou=people,dc=example,dc=com . Click the Options menu (⫶) and select Delete to open the wizard window. Click after you review the data about the entry you want to delete. In the Deletion step, toggle the switch to the Yes, I'm sure position and click Delete . You can click Cancel to cancel the entry deletion. View the Result for Entry Deletion and click Finish . Verification Navigate to LDAP Browser Search . Select the suffix where the entry previously existed, such as dc=example,cd=com . Enter your search criteria in the field, such as Tom , and press Enter . Verify that the deleted entry is no longer present.

Commands: