export-ldif
export-ldif — export directory data in LDIF
Options
The export-ldif command takes the following options:
Command options:
-a | --appendToLdif-
Append an existing LDIF file rather than overwriting it. Default: false
-b | --includeBranch {branchDN}-
Base DN of a branch to include in the LDIF export.
-B | --excludeBranch {branchDN}-
Base DN of a branch to exclude from the LDIF export.
-c | --compress-
Compress the LDIF data as it is exported. Default: false
-e | --excludeAttribute {attribute}-
Attribute to exclude from the LDIF export.
--excludeFilter {filter}-
Filter to identify entries to exclude from the LDIF export.
-i | --includeAttribute {attribute}-
Attribute to include in the LDIF export.
--includeFilter {filter}-
Filter to identify entries to include in the LDIF export.
-l | --ldifFile {ldifFile}-
Path to the LDIF file to write. All paths are relative to the server’s installation directory, which can be remote.
-n | --backendId {backendName}-
Backend ID for the backend to export.
-O | --excludeOperational-
Exclude operational attributes from the LDIF export. Default: false
--offline-
Indicates that the command must be run in offline mode. Default: false
Task Scheduling Options
--completionNotify {emailAddress}-
Email address of a recipient to be notified when the task completes. This option may be specified more than once.
--dependency {taskID}-
ID of a task upon which this task depends. A task will not start execution until all its dependencies have completed execution.
--description {description}-
Gives a description to the task.
--errorNotify {emailAddress}-
Email address of a recipient to be notified if an error occurs when this task executes. This option may be specified more than once.
--failedDependencyAction {action}-
Action this task will take should one if its dependent tasks fail. The value must be one of PROCESS, CANCEL, DISABLE. If not specified defaults to CANCEL.
--recurringTask {schedulePattern}-
Indicates the task is recurring and will be scheduled according to the value argument expressed in crontab(5) compatible time/date pattern. The schedule pattern for a recurring task supports only the following
crontabfeatures:
| Field | Allowed Values |
|---|---|
minute |
0-59 |
hour |
0-23 |
day of month |
1-31 |
month |
1-12 |
day of week |
0-6 (0 is Sunday) |
A field can contain an asterisk, * . An asterisk stands for first-last .
Fields can include ranges of numbers. A range is two numbers separated by a hyphen, and is inclusive. For example, 8-10 for an "hour" field means execution at hours 8, 9, and 10.
Fields can include lists. A list is a set of numbers or ranges separated by commas. For example, 4,8-10 for an "hour" field means execution at hours 4, 8, 9, and 10.
-t | --start {startTime}-
Indicates the date/time at which this operation will start when scheduled as a server task expressed in YYYYMMDDhhmmssZ format for UTC time or YYYYMMDDhhmmss for local time. A value of '0' will cause the task to be scheduled for immediate execution. When this option is specified the operation will be scheduled to start at the specified time after which this utility will exit immediately.
--taskId {taskID}-
Gives an ID to the task.
Task Backend Connection Options
--connectTimeout {timeout}-
Maximum length of time (in milliseconds) that can be taken to establish a connection. Use '0' to specify no time out. Default: 30000
-D | --bindDn {bindDN}-
DN to use to bind to the server. Default: uid=admin
-E | --reportAuthzId-
Use the authorization identity control. Default: false
-h | --hostname {host}-
Fully-qualified server host name or IP address. Default: localhost.localdomain
--keyStorePath {keyStorePath}-
The keystore containing the certificate which should be used for SSL client authentication.
--keyStoreProviderArg {argument}-
Configuration argument for the key store provider.
--keyStoreProviderClass {class}-
Full class name of the key store provider.
--keyStoreProviderName {name}-
Name of the key store provider.
--keyStoreType {keyStoreType}-
The type of the keystore (e.g. [JKS|JCEKS|PKCS12|PKCS11|<other>]).
-N | --certNickname {nickname}-
Nickname of the certificate that should be sent to the server for SSL client authentication.
-o | --saslOption {name=value}-
SASL bind options.
-p | --port {port}-
Directory server administration port number.
-T | --trustStorePassword[:env|:file] {trustStorePassword}-
Truststore password which will be used as the cleartext configuration value.
--trustStorePath {trustStorePath}-
Use this truststore for validating server certificate.
--trustStoreProviderArg {argument}-
Configuration argument for the trust store provider.
--trustStoreProviderClass {class}-
Full class name of the trust store provider.
--trustStoreProviderName {name}-
Name of the trust store provider.
--trustStoreType {trustStoreType}-
The type of the truststore (e.g. [JKS|JCEKS|JVM|PKCS12|<other>]).
--usePasswordPolicyControl-
Use the password policy request control. Default: false
-w | --bindPassword[:env|:file] {bindPassword}-
Password to use to bind to the server. Omit this option while providing the bind DN to ensure that the command prompts for the password, rather than entering the password as a command argument.
-W | --keyStorePassword[:env|:file] {keyStorePassword}-
Keystore password which will be used as the cleartext configuration value.
-X | --trustAll-
Trust all server SSL certificates. Default: false
Utility input/output options:
--no-prompt-
Use non-interactive mode. If data in the command is missing, the user is not prompted and the tool will fail. Default: false
--noPropertiesFile-
No properties file will be used to get default command line argument values. Default: false
--propertiesFilePath {propertiesFilePath}-
Path to the file containing default property values used for command line arguments.
--wrapColumn {wrapColumn}-
Column at which to wrap long lines (0 for no wrapping). Default: 0
General options:
-V | --version-
Display Directory Server version information. Default: false
-H | --help-
Display this usage information. Default: false