nnmldap.sh

Search for	Example	Results
A single word	`cat`	Topics that contain the word "cat". You will also find its grammatical variations, such as "cats".
A phrase. You can specify that the search results contain a specific phrase.	`"cat food"` (quotation marks)	Topics that contain the literal phrase "cat food" and all its grammatical variations. Without the quotation marks, the query is equivalent to specifying an OR operator, which finds topics with one of the individual words instead of the phrase.

Search for	Operator	Example
Two or more words in the same topic	`AND` `and` `+` (plus symbol) `&` (ampersand)	`cat AND dog` `"cat food"+milk` `"cat food"&"dog food"`
Either word in a topic	`OR` `or` `\|` (pipe)	`cat OR dog` `cat \| dog`
Topics that do not contain a specific word or phrase	`NOT` `not` `!` (exclamation point)	`NOT cat` `! dog`
Topics that contain one string and do not contain another	`^` (caret)	`cat ^ mouse`
A combination of search types	`( )` parentheses	`cat + (dog \| mouse)` `cat \| dog + (! mouse)`

Network Node Manager i Software10.30

Name

nnmldap.sh — reload or view LDAP configuration.

SYNOPSIS

nnmldap.sh -reload | -info | -diagnose <username> | -encrypt <password>

DESCRIPTION

nnmldap.sh is a script that enables you to reload, view or diagnose changes to the Lightweight Directory Access Protocol (LDAP) sign-in configuration without restarting jboss.

Parameters

nnmldap.sh supports the following options:

-info

Displays the LDAP configuration, such as

Configuration=providerURL:"ldap://example.com:636/". Number of available Incident assignment users:0

-reload

Reloads the LDAP configuration.

-diagnose <username>

Verifies configuration in the ldap.properties file by attempting to access <username> in the Directory Service using the LDAP configuration parameters. This command will respond with information to help you diagnose LDAP configuration problems.

<username> must be a valid username in the Directory Service. It is the same name that is used in the NNMi console username prompt of the NNMi login screen.

-encrypt <password>

Encrypts the supplied LDAP bind password so that it can be safely stored in the ldap.properties file.

The output of this command should be copied into the bindCredential property in the ldap.properties file. Encrypted passwords start with the {ENC} prefix.

Encrypted passwords can only be decrypted by the same NNMi which created them. If the database is reset or the properties are copied to a new NNMi system then this command will need to be re-run to generate a new encrypted password. The exception to this is if you are using NNMi in an application failover or High Availability (HA) configuration. In application failover or HA configurations, the encrypted password generated by the nnmldap.sh script is valid on both NNMi management servers (since the database is the same on both NNMi management servers).

EXAMPLES

nnmldap.sh -info: Returns the current LDAP configuration.
nnmldap.sh -reload: Reads modifications to the ldap.properties file (such as enabling or disabling LDAP).
nnmldap.sh -diagnose <username>: Shows configuration parameters for the ldap.properties file, and verifies that information can be extracted from the Directory Service.
nnmldap.sh -encrypt password: Returns the encrypted value of the supplied password string. For example: {ENC}Mgnb1w007XYYenHvAFf3dQ==

AUTHOR