| Flag |
Description |
Notes |
-a string |
Append string on successful lookups |
|
-b base DN |
Specify the base distinguished name for
searches |
LR |
-D |
Honor DeliveryMode=defer and defer map lookup |
L |
-d bind DN |
Authenticate to the LDAP server using the specified bind DN |
L |
-f |
Downcase entire lookup |
L |
-h server(s) |
Specify one or more LDAP servers to try to contact.
If more than one, servers must be a quoted, space-separated string
(e.g., -h "one.example.com two.example.com") |
LR |
-k key |
Specify the LDAP query for the search |
R |
-l timeout |
Timeout LDAP queries after timeout seconds |
L |
-M method |
Authenticate to the LDAP server using the specified method.
Must be one of none, simple, or
krbv4 |
L |
-m |
Match only, don't return values |
L |
-N |
Always include trailing NUL (\0) in lookups |
|
-n |
Retrieve attribute names only, not their values |
L |
-O |
Don't try including a trailing NUL (\0) in lookups |
|
-o |
Map is optional |
L |
-P passinfo |
Authenticate to the LDAP server using the specified passinfo.
Ignored for the none method; contains the path to a file
containing the password for the simple method; contains the
location of the Kerberos ticket for the krb4 method |
L |
-p port |
Contact LDAP servers on the specified port (default: 389) |
L |
-q |
Keep quotes in key string |
L |
-R |
Chase LDAP referrals |
L |
-r deref |
Use deref as the method of dereferencing LDAP aliases. Must be
one of never, always, search, or
find |
L |
-S character |
Set space substitution character to character |
|
-s scope |
Set the LDAP search scope. Must be one of base,
one, or sub |
L |
-T string |
Append string on temporary lookup failures |
|
-t |
Ignore temporary lookup failures |
L |
-v attributes |
Specify one or more (comma separated) attributes to
return from the LDAP search. If option not specified, all attributes are
returned |
|
-Z size |
Limit the number of records returned to size |
L |
-z character |
Set delimiter character to character for multiple value returns |
L |
-1 |
Only consider the lookup successful if exactly one match is found |
L |