• Assign access control instructions (ACIs) on the parent entries.
    • The source parent entry must have an ACI that allows export operations: allow(export).
    • The target parent entry must have an ACI that allows import operations: allow(import).

For more information on access control instructions, see Overview of access control.

  1. To move an entry from one branch to another, run the ldapmodify tool.

    In this example, an entry moves from the ou=contractors branch to the ou=People branch.

    $ bin/ldapmodify
    dn: uid=user.14,ou=contractors,dc=example,dc=com 
    newrdn: uid=user.2014 
    deleteoldrdn: 0
    newsuperior: ou=People,dc=example,dc=com
  2. Specify the modification using changetype:moddn.