DSIDM(8) Generated Python Manual DSIDM(8) (NAME) dsidm - 389 (SYNOPSIS) dsidm [-h] [-v] [-j] [-b BASEDN] [-D BINDDN] [-w BINDPW] [-W] [-y PWDFILE] [-Z] instance {account,group,initialise,init,organizationalunit,ou,posixgroup,user,client_config,role,service,uniquegroup} ... (POSITIONAL ARGUMENTS) dsidm account . <> . dsidm group . ( "ou=groups") . "groupOfNames" "member" dsidm initialise backend dsidm organizationalunit dsidm posixgroup posix. ( "ou=groups") posix . dsidm user posix. ( "ou=people") . dsidm client_config LDAP dsidm role . dsidm service . ( "ou=Services") . dsidm uniquegroup . ( "ou=groups") . "groupOfUniqueNames" "uniquemember" (COMMAND) 'dsidm account' : dsidm instance account [-h] {list,get-by-dn,modify-by-dn,rename-by-dn,delete,lock,unlock,entry-status,subtree-status,reset_password,change_password,bulk_update} ... (POSITIONAL ARGUMENTS) 'dsidm account' dsidm account list (DN ) dsidm account get-by-dn get-by-dn dsidm account modify-by-dn modify-by-dn :: ... dsidm account rename-by-dn dsidm account delete dsidm account lock dsidm account unlock dsidm account entry-status dsidm account subtree-status dsidm account reset_password . . dsidm account change_password . ( ) dsidm account bulk_update (COMMAND) 'dsidm account list' : dsidm [-v] [-j] instance account list [-h] (COMMAND) 'dsidm account get-by-dn' : dsidm [-v] [-j] instance account get-by-dn [-h] [dn] dn dn (COMMAND) 'dsidm account modify-by-dn' : dsidm [-v] [-j] instance account modify-by-dn [-h] dn changes [changes ...] dn dn changes : :: (COMMAND) 'dsidm account rename-by-dn' : dsidm [-v] [-j] instance account rename-by-dn [-h] [--keep-old-rdn] dn new_dn dn dn new_dn dn (OPTIONS) 'dsidm account rename-by-dn' --keep-old-rdn RDN ( 'cn: old_role') (COMMAND) 'dsidm account delete' : dsidm [-v] [-j] instance account delete [-h] [dn] dn dn (COMMAND) 'dsidm account lock' : dsidm [-v] [-j] instance account lock [-h] [dn] dn dn (COMMAND) 'dsidm account unlock' : dsidm [-v] [-j] instance account unlock [-h] [dn] dn dn (COMMAND) 'dsidm account entry-status' : dsidm [-v] [-j] instance account entry-status [-h] [-V] [dn] dn dn (OPTIONS) 'dsidm account entry-status' -V, --details (COMMAND) 'dsidm account subtree-status' : dsidm [-v] [-j] instance account subtree-status [-h] [-V] [-f FILTER] [-s {one,sub}] [-i] [-o BECOME_INACTIVE_ON] basedn basedn (OPTIONS) 'dsidm account subtree-status' -V, --details -f FILTER, --filter FILTER -s {one,sub}, --scope {one,sub} (one sub - sub ) -i, --inactive-only -o BECOME_INACTIVE_ON, --become-inactive-on BECOME_INACTIVE_ON ( 2007-04-25T14:30) (COMMAND) 'dsidm account reset_password' : dsidm [-v] [-j] instance account reset_password [-h] [dn] [new_password] dn dn new_password (COMMAND) 'dsidm account change_password' : dsidm [-v] [-j] instance account change_password [-h] [dn] [new_password] [current_password] dn dn new_password current_password (COMMAND) 'dsidm account bulk_update' : dsidm [-v] [-j] instance account bulk_update [-h] [-f FILTER] [-s {one,sub}] [-x] basedn changes [changes ...] basedn DN changes : :: (OPTIONS) 'dsidm account bulk_update' -f FILTER, --filter FILTER '(objectclass=*)' -s {one,sub}, --scope {one,sub} (one sub - sub ) -x, --stop . False (COMMAND) 'dsidm group' : dsidm instance group [-h] {list,get,get_dn,create,delete,modify,rename,members,add_member,remove_member} ... (POSITIONAL ARGUMENTS) 'dsidm group' dsidm group list dsidm group get dsidm group get_dn dn dsidm group create dsidm group delete dsidm group modify :: ... dsidm group rename dsidm group members dn dsidm group add_member dsidm group remove_member (COMMAND) 'dsidm group list' : dsidm [-v] [-j] instance group list [-h] [--full-dn] (OPTIONS) 'dsidm group list' --full-dn DN RDN (COMMAND) 'dsidm group get' : dsidm [-v] [-j] instance group get [-h] [selector] selector (COMMAND) 'dsidm group get_dn' : dsidm [-v] [-j] instance group get_dn [-h] [dn] dn dn (COMMAND) 'dsidm group create' : dsidm [-v] [-j] instance group create [-h] [--cn [CN]] [--description [DESCRIPTION]] (OPTIONS) 'dsidm group create' --cn [CN] cn --description [DESCRIPTION] description (COMMAND) 'dsidm group delete' : dsidm [-v] [-j] instance group delete [-h] [dn] dn dn (COMMAND) 'dsidm group modify' : dsidm [-v] [-j] instance group modify [-h] selector changes [changes ...] selector cn changes : :: (COMMAND) 'dsidm group rename' : dsidm [-v] [-j] instance group rename [-h] [--keep-old-rdn] selector new_name selector cn new_name (OPTIONS) 'dsidm group rename' --keep-old-rdn RDN ( 'cn: old_group') (COMMAND) 'dsidm group members' : dsidm [-v] [-j] instance group members [-h] [cn] cn cn (COMMAND) 'dsidm group add_member' : dsidm [-v] [-j] instance group add_member [-h] [cn] [dn] cn cn dn dn (COMMAND) 'dsidm group remove_member' : dsidm [-v] [-j] instance group remove_member [-h] [cn] [dn] cn cn dn dn (COMMAND) 'dsidm initialise' : dsidm [-v] [-j] instance initialise [-h] [--version VERSION] (OPTIONS) 'dsidm initialise' --version VERSION . (COMMAND) 'dsidm organizationalunit' : dsidm [-v] [-j] instance organizationalunit [-h] {list,get,get_dn,create,delete,modify,rename} ... (POSITIONAL ARGUMENTS) 'dsidm organizationalunit' dsidm organizationalunit list dsidm organizationalunit get dsidm organizationalunit get_dn dn dsidm organizationalunit create dsidm organizationalunit delete dsidm organizationalunit modify :: ... dsidm organizationalunit rename (COMMAND) 'dsidm organizationalunit list' : dsidm [-v] [-j] instance organizationalunit list [-h] [--full-dn] (OPTIONS) 'dsidm organizationalunit list' --full-dn DN RDN (COMMAND) 'dsidm organizationalunit get' : dsidm [-v] [-j] instance organizationalunit get [-h] [selector] selector (COMMAND) 'dsidm organizationalunit get_dn' : dsidm [-v] [-j] instance organizationalunit get_dn [-h] [dn] dn dn (COMMAND) 'dsidm organizationalunit create' : dsidm [-v] [-j] instance organizationalunit create [-h] [--ou [OU]] (OPTIONS) 'dsidm organizationalunit create' --ou [OU] ou (COMMAND) 'dsidm organizationalunit delete' : dsidm [-v] [-j] instance organizationalunit delete [-h] [dn] dn dn (COMMAND) 'dsidm organizationalunit modify' : dsidm [-v] [-j] instance organizationalunit modify [-h] selector changes [changes ...] selector ou changes : :: (COMMAND) 'dsidm organizationalunit rename' : dsidm [-v] [-j] instance organizationalunit rename [-h] [--keep-old-rdn] selector new_name selector ou new_name (OPTIONS) 'dsidm organizationalunit rename' --keep-old-rdn RDN ( 'ou: old_ou') (COMMAND) 'dsidm posixgroup' : dsidm instance posixgroup [-h] {list,get,get_dn,create,delete,modify,rename} ... (POSITIONAL ARGUMENTS) 'dsidm posixgroup' dsidm posixgroup list dsidm posixgroup get dsidm posixgroup get_dn dn dsidm posixgroup create dsidm posixgroup delete dsidm posixgroup modify :: ... dsidm posixgroup rename (COMMAND) 'dsidm posixgroup list' : dsidm [-v] [-j] instance posixgroup list [-h] [--full-dn] (OPTIONS) 'dsidm posixgroup list' --full-dn DN RDN (COMMAND) 'dsidm posixgroup get' : dsidm [-v] [-j] instance posixgroup get [-h] [selector] selector (COMMAND) 'dsidm posixgroup get_dn' : dsidm [-v] [-j] instance posixgroup get_dn [-h] [dn] dn dn (COMMAND) 'dsidm posixgroup create' : dsidm [-v] [-j] instance posixgroup create [-h] [--cn [CN]] [--gidNumber [GIDNUMBER]] (OPTIONS) 'dsidm posixgroup create' --cn [CN] cn --gidNumber [GIDNUMBER] gidNumber (COMMAND) 'dsidm posixgroup delete' : dsidm [-v] [-j] instance posixgroup delete [-h] [dn] dn dn (COMMAND) 'dsidm posixgroup modify' : dsidm [-v] [-j] instance posixgroup modify [-h] selector changes [changes ...] selector cn changes : :: (COMMAND) 'dsidm posixgroup rename' : dsidm [-v] [-j] instance posixgroup rename [-h] [--keep-old-rdn] selector new_name selector cn new_name posix (OPTIONS) 'dsidm posixgroup rename' --keep-old-rdn RDN ( 'cn: old_group') (COMMAND) 'dsidm user' : dsidm instance user [-h] [--user-type {basic,posix,service,traditional}] {list,get,get-pwp,get_dn,create,modify,rename,delete} ... (POSITIONAL ARGUMENTS) 'dsidm user' dsidm user list dsidm user get dsidm user get-pwp dsidm user get_dn dn dsidm user create dsidm user modify :: ... dsidm user rename dsidm user delete (COMMAND) 'dsidm user list' : dsidm [-v] [-j] instance user list [-h] [--full-dn] (OPTIONS) 'dsidm user list' --full-dn DN RDN (COMMAND) 'dsidm user get' : dsidm [-v] [-j] instance user get [-h] [selector] selector (COMMAND) 'dsidm user get-pwp' : dsidm [-v] [-j] instance user get-pwp [-h] [--parent-dn PARENT_DN] [selector] ( ) . selector ( user get uid) (OPTIONS) 'dsidm user get-pwp' --parent-dn PARENT_DN DN . "ou=people,$SUFFIX" "ou=services,$SUFFIX" (COMMAND) 'dsidm user get_dn' : dsidm [-v] [-j] instance user get_dn [-h] [dn] dn dn (COMMAND) 'dsidm user create' : dsidm [-v] [-j] instance user create [-h] [--uid [UID]] [--cn [CN]] [--displayName [DISPLAYNAME]] [--uidNumber [UIDNUMBER]] [--gidNumber [GIDNUMBER]] [--homeDirectory [HOMEDIRECTORY]] (OPTIONS) 'dsidm user create' --uid [UID] uid --cn [CN] cn --displayName [DISPLAYNAME] displayName --uidNumber [UIDNUMBER] uidNumber --gidNumber [GIDNUMBER] gidNumber --homeDirectory [HOMEDIRECTORY] homeDirectory (COMMAND) 'dsidm user modify' : dsidm [-v] [-j] instance user modify [-h] selector changes [changes ...] selector uid changes : :: (COMMAND) 'dsidm user rename' : dsidm [-v] [-j] instance user rename [-h] [--keep-old-rdn] selector new_name selector uid new_name (OPTIONS) 'dsidm user rename' --keep-old-rdn RDN ( 'cn: old_user') (COMMAND) 'dsidm user delete' : dsidm [-v] [-j] instance user delete [-h] [dn] dn dn (OPTIONS) 'dsidm user' --user-type {basic,posix,service,traditional} . "basic" nsPerson nsAccount nsOrgPerson . "posix" nsPerson nsAccount nsOrgPerson posixAccount . "service" nsAccount applicationProcess . "traditional" (legacy) person organizationalPerson inetOrgPerson . "posix" (COMMAND) 'dsidm client_config' : dsidm instance client_config [-h] {sssd.conf,ldap.conf,display} ... (POSITIONAL ARGUMENTS) 'dsidm client_config' dsidm client_config sssd.conf SSSD LDAP dsidm client_config ldap.conf ldap.conf OpenLDAP LDAP dsidm client_config display LDAP (COMMAND) 'dsidm client_config sssd.conf' : dsidm instance client_config sssd.conf [-h] [allowed_group] allowed_group (COMMAND) 'dsidm client_config ldap.conf' : dsidm instance client_config ldap.conf [-h] (COMMAND) 'dsidm client_config display' : dsidm instance client_config display [-h] (COMMAND) 'dsidm role' : dsidm [-v] [-j] instance role [-h] {list,get,get-by-dn,create-managed,create-filtered,create-nested,modify-by-dn,rename-by-dn,delete,lock,unlock,entry-status,subtree-status} ... (POSITIONAL ARGUMENTS) 'dsidm role' dsidm role list dsidm role get dsidm role get-by-dn get-by-dn dsidm role create-managed dsidm role create-filtered dsidm role create-nested dsidm role modify-by-dn modify-by-dn :: ... dsidm role rename-by-dn dsidm role delete dsidm role lock dsidm role unlock dsidm role entry-status dsidm role subtree-status (COMMAND) 'dsidm role list' : dsidm [-v] [-j] instance role list [-h] [--full-dn] (OPTIONS) 'dsidm role list' --full-dn DN RDN (COMMAND) 'dsidm role get' : dsidm [-v] [-j] instance role get [-h] [selector] selector (COMMAND) 'dsidm role get-by-dn' : dsidm [-v] [-j] instance role get-by-dn [-h] [dn] dn dn (COMMAND) 'dsidm role create-managed' : dsidm [-v] [-j] instance role create-managed [-h] [--cn [CN]] (OPTIONS) 'dsidm role create-managed' --cn [CN] cn (COMMAND) 'dsidm role create-filtered' : dsidm [-v] [-j] instance role create-filtered [-h] [--cn [CN]] (OPTIONS) 'dsidm role create-filtered' --cn [CN] cn (COMMAND) 'dsidm role create-nested' : dsidm [-v] [-j] instance role create-nested [-h] [--cn [CN]] [--nsroledn [NSROLEDN]] (OPTIONS) 'dsidm role create-nested' --cn [CN] cn --nsroledn [NSROLEDN] nsroledn (COMMAND) 'dsidm role modify-by-dn' : dsidm [-v] [-j] instance role modify-by-dn [-h] dn changes [changes ...] dn dn changes : :: (COMMAND) 'dsidm role rename-by-dn' : dsidm [-v] [-j] instance role rename-by-dn [-h] [--keep-old-rdn] dn new_dn dn dn new_dn dn (OPTIONS) 'dsidm role rename-by-dn' --keep-old-rdn RDN ( 'cn: old_account') (COMMAND) 'dsidm role delete' : dsidm [-v] [-j] instance role delete [-h] [dn] dn dn (COMMAND) 'dsidm role lock' : dsidm [-v] [-j] instance role lock [-h] [dn] dn dn (COMMAND) 'dsidm role unlock' : dsidm [-v] [-j] instance role unlock [-h] [dn] dn dn (COMMAND) 'dsidm role entry-status' : dsidm [-v] [-j] instance role entry-status [-h] [dn] dn dn (COMMAND) 'dsidm role subtree-status' : dsidm [-v] [-j] instance role subtree-status [-h] [-f FILTER] [-s {base,one,sub}] basedn basedn (OPTIONS) 'dsidm role subtree-status' -f FILTER, --filter FILTER -s {base,one,sub}, --scope {base,one,sub} (base one sub - sub ) (COMMAND) 'dsidm service' : dsidm [-v] [-j] instance service [-h] {list,get,get_dn,create,modify,rename,delete} ... (POSITIONAL ARGUMENTS) 'dsidm service' dsidm service list dsidm service get dsidm service get_dn dn dsidm service create dsidm service modify :: ... dsidm service rename dsidm service delete (COMMAND) 'dsidm service list' : dsidm [-v] [-j] instance service list [-h] [--full-dn] (OPTIONS) 'dsidm service list' --full-dn DN RDN (COMMAND) 'dsidm service get' : dsidm [-v] [-j] instance service get [-h] [selector] selector (COMMAND) 'dsidm service get_dn' : dsidm [-v] [-j] instance service get_dn [-h] [dn] dn dn (COMMAND) 'dsidm service create' : dsidm [-v] [-j] instance service create [-h] [--cn [CN]] [--description [DESCRIPTION]] (OPTIONS) 'dsidm service create' --cn [CN] cn --description [DESCRIPTION] description (COMMAND) 'dsidm service modify' : dsidm [-v] [-j] instance service modify [-h] selector changes [changes ...] selector cn changes : :: (COMMAND) 'dsidm service rename' : dsidm [-v] [-j] instance service rename [-h] [--keep-old-rdn] selector new_name selector cn new_name (OPTIONS) 'dsidm service rename' --keep-old-rdn RDN ( 'cn: old_service') (COMMAND) 'dsidm service delete' : dsidm [-v] [-j] instance service delete [-h] [dn] dn dn (COMMAND) 'dsidm uniquegroup' : dsidm instance uniquegroup [-h] {list,get,get_dn,create,delete,modify,rename,members,add_member,remove_member} ... (POSITIONAL ARGUMENTS) 'dsidm uniquegroup' dsidm uniquegroup list dsidm uniquegroup get dsidm uniquegroup get_dn dn dsidm uniquegroup create dsidm uniquegroup delete dsidm uniquegroup modify :: ... dsidm uniquegroup rename dsidm uniquegroup members dn dsidm uniquegroup add_member dsidm uniquegroup remove_member (COMMAND) 'dsidm uniquegroup list' : dsidm [-v] [-j] instance uniquegroup list [-h] [--full-dn] (OPTIONS) 'dsidm uniquegroup list' --full-dn DN RDN (COMMAND) 'dsidm uniquegroup get' : dsidm [-v] [-j] instance uniquegroup get [-h] [selector] selector (COMMAND) 'dsidm uniquegroup get_dn' : dsidm [-v] [-j] instance uniquegroup get_dn [-h] [dn] dn dn (COMMAND) 'dsidm uniquegroup create' : dsidm [-v] [-j] instance uniquegroup create [-h] [--cn [CN]] (OPTIONS) 'dsidm uniquegroup create' --cn [CN] cn (COMMAND) 'dsidm uniquegroup delete' : dsidm [-v] [-j] instance uniquegroup delete [-h] [dn] dn dn (COMMAND) 'dsidm uniquegroup modify' : dsidm [-v] [-j] instance uniquegroup modify [-h] selector changes [changes ...] selector cn changes : :: (COMMAND) 'dsidm uniquegroup rename' : dsidm [-v] [-j] instance uniquegroup rename [-h] [--keep-old-rdn] selector new_name selector cn new_name (OPTIONS) 'dsidm uniquegroup rename' --keep-old-rdn RDN ( 'cn: old_group') (COMMAND) 'dsidm uniquegroup members' : dsidm [-v] [-j] instance uniquegroup members [-h] [cn] cn cn (COMMAND) 'dsidm uniquegroup add_member' : dsidm [-v] [-j] instance uniquegroup add_member [-h] [cn] [dn] cn cn dn dn (COMMAND) 'dsidm uniquegroup remove_member' : dsidm [-v] [-j] instance uniquegroup remove_member [-h] [cn] [dn] cn cn dn dn (OPTIONS) -v, --verbose -j, --json JSON -b BASEDN, --basedn BASEDN Base DN ( ) -D BINDDN, --binddn BINDDN (bind) -w BINDPW, --bindpw BINDPW bind DN -W, --prompt bind DN -y PWDFILE, --pwdfile PWDFILE bind DN -Z, --starttls StartTLS (AUTHORS) "Red Hat, Inc., and William Brown" <389-devel@lists.fedoraproject.org> lib389 3.3.1 2026-09-07 DSIDM(8)