Automation: how to change LDAP attribute for all users

Revision as of 12:27, 2 October 2015 by Teodor Vizirov (talk | contribs) (Zimbra Automation)

Zimbra Automation

   KB 22377        Last updated on 2015-10-2  




5.00
(one vote)


Zimbra automation using scripting.


How to change an LDAP attribute for all users


Purpose

The purpose of this script is to show how a single attribute value can be changed for all users in LDAP. The reason I made this article was an incident, where all mobile users were unable to sync, because their zimbraCreateTimestamp attribute value was in the future. This script explains how to change the value of this attribute for all users.


Script

#!/bin/bash

echo "setting ldap variables"
source ~/bin/zmshutil
zmsetvars
sleep 2

for i in `ldapsearch -x -H $ldap_master_url -D $zimbra_ldap_userdn -w $zimbra_ldap_password | grep uid=| cut -d : -f 2 | sed 's/^\ //g'`
do

ldapmodify -x -H $ldap_master_url -D $zimbra_ldap_userdn -w $zimbra_ldap_password << EOF
dn: $i
changetype: modify
replace: zimbraCreateTimestamp
zimbraCreateTimestamp: 20140918100701Z

EOF

done
Jump to: navigation, search