Adedit Command Reference and Scripting Guide

This guide describes ADEdit for UNIX administrators who want to manage Verify Privilege Server Suite and Active Directory from a Linux, UNIX, or Mac computer through CLI commands or scripts. It assumes that you are well-versed in Active Directory’s architecture and management, and that you’re equally well-versed in Verify Privilege Server Suite access control and privilege management features. For more complete information about Verify Privilege Server Suite software and management tasks, see the Administrator’s Guide for Linux and UNIX.

About this Guide

This ADEdit Command Reference and Scripting Guide describes how to use the IBM SecurityADEdit command-line interface to manage IBM Securityobjects stored in Microsoft Active Directory. ADEdit is a Tool command language (Tcl) application that enables administrators to run commands and write scripts that modify data in Active Directory directly from their Linux or UNIX console.

Intended Audience

This guide describes ADEdit for UNIX administrators who want to manage IBM Securityand Active Directory from a Linux, UNIX, or Mac computer through CLI commands or scripts. It assumes that you are well-versed in Active Directory’s architecture and management, and that you’re equally well-versed in IBM Securityaccess control and privilege management features. For more complete information about IBM Securitysoftware and management tasks, see the Administrator’s Guide for Linux and UNIX.

Using this Guide

This guide describes how to use ADEdit and provide reference information for all ADEdit commands and the ADEdit library. It does not describe how to write Tcl scripts using ADEdit commands. For a comprehensive explanation of Tcl and its use, see Tcl and the Tk Toolkit by John K. Ousterhout and Ken Jones (published by Addison-Wesley).

The sections provide the following information:

  • Getting Started with ADEdit describes the basics of ADEdit command syntax and the logical flow of commands that you need to be familiar with before you begin executing interactive ADEdit sessions or writing ADEdit scripts.
  • ADEdit Commands Organized by Type assembles the ADEdit commands into logical groups, corresponding to their usage, and summarizes each command.
  • Using the Demonstration Scripts provides script samples for a series of common tasks that you can incorporate into your scripts.
  • ADEdit Command Reference provides full command descriptions in alphabetical order.
  • ADEdit Tcl Procedure Library Reference describes the Tcl procedures available in the ade_lib Tcl library that use ADEdit commands to perform common administrative tasks.
  • Timebox Value Format describes the format of the timebox value used to set hours of the week when a role is enabled and disabled.
  • Using ADEdit with Classic Zones summarizes the differences between working with classic and hierarchical zone and lists the commands that are specifically for managing authorization in classic zones.
  • Quick Reference for Commands and Library Procedures provides a summary of all ADEdit commands and procedures, including the command syntax and abbreviations.

Viewing Command Help

ADEdit provides brief help text for each command. To view the help, enter help command_name from the ADEdit command prompt. For example, to see the help for the validate_license command you would enter the following:

>help validate_license

You can also display the general help text for ADEdit by entering man adedit from the shell.