You can use ldapmodify to move an entry from one base DN to another base DN. Before running the ldapmodify command, you must assign access control instructions (ACIs) on the parent entries. The source parent entry must have an ACI that allows export operations: allow(export). The target parent entry must have an ACI that allows import operations: allow(import). For more information on access control instructions, see Working with Access Control.

  • Use the ldapmodify command to move an entry from the Contractor branch to the ou=People branch.
    $ bin/ldapmodify
    dn: uid=user.14,ou=contractors,dc=example,dc=com 
    changetype:moddn 
    newrdn: uid=user.2014 
    deleteoldrdn: 0
    newsuperior: ou=People,dc=example,dc=com