LDAP Cheat Sheet This data is placed in a file and the ldapmodify command is used to read the file and apply the changes. To add an entry: Just specify the ldif To add an OU: dn: ou=newou,ou=parentou,o=party.com changetype: add ou: newou description: newou OU objectclass: top objectclass: organizationalunit To add a CN: dn: cn=newcn,ou=thisou,ou=parentou,o=party.com changetype: add cn: newcn description: newcn CN objectclass: top objectclass: groupofuniquenames To change an attribute: dn: uid=whateveruid,ou=thisou,ou=parentou,o=party.com changetype: modify replace: attributename attributename: new value To add an attribute: dn: uid=whateveruid,ou=thisou,ou=parentou,o=party.com changetype: add add: attributename attributename: new value To remove an attribute: dn: uid=whateveruid,ou=thisou,ou=parentou,o=party.com changetype: delete delete: attributename