Scroll to navigation

LDAPVI(1) User Commands LDAPVI(1)


ldapvi - LDAP client


ldapvi [OPTION]... [FILTER] [AD]...



ldapvi --discover --host HOSTNAME

Perform an LDAP search and update results using a text editor.

Other usage:

Print entries
Load change records
Edit a delete record
Edit a rename record

Connection options:

Search filter or DN: User to bind as. [1] Sets --bind simple.
Password (also valid for SASL).
Disable or enable SASL.
Interactive login dialog.

SASL options (these parameters set --bind sasl):

-I, --sasl-interactive Set --bind-dialog always.

SASL security properties.
Set --bind-dialog never.
R SASL realm.
SASL authentication identity.
SASL authorization identity.
MECH SASL mechanism.

Search parameters:

Search base.
Search scope. One of base|one|sub.
Sort control (critical).

Miscellaneous options:

(Only with --in, --ldapmodify:) Treat attrval records as new entries to add.
Class to add. Can be repeated. Implies -A.
Print parameters in ldap.conf syntax.
Ignore LDAP errors and continue processing.
(Only with --rename:) Delete the old RDN.
Auto-detect naming contexts. [2]
Don't search, start with empty file. See -o.
The encoding to allow. Default is UTF-8.
This help.
Always read libldap configuration.
Show missing optional attributes as comments.
manageDsaIT control (critical).
Commit without asking for confirmation.
-!, --noninteractive
Never ask any questions.
Disable progress output.
Same as -b DN -s base '(objectclass=*)' + *
Require startTLS.
Level of TLS strictess.
Note every update.


Short for --quiet --out
Short for --noninteractive --in
Short for --noninteractive --delete
Short for --noninteractive --rename

Environment variables: VISUAL, EDITOR, PAGER.

[1] User names can be specified as distinguished names:

or search filters:
Note the use of parenthesis, which can be omitted from search filters usually but are required here. For this searching bind to work, your client library must be configured with appropriate default search parameters.

[2] Repeat the search for each naming context found and present the

Conflicts with --base.
With --config, show a BASE configuration line for each context.

A special (offline) option is --diff, which compares two files and writes any changes to standard output in LDIF format.


Report bugs to "".


Assuming a suitably configured LDAP library, run ldapvi without arguments to see all entries available.

Otherwise, try `ldapvi -h HOSTNAME --discover' to query the ROOT DSE for available naming contexts.

Once that works, run `ldapvi -h HOSTNAME --discover --config' to generate sample configuration that can be pasted into ~/.ldaprc or /etc/ldap/ldap.conf.


ldapvi uses an LDIF-like syntax, but not standard LDIF. Please refer to


Please report bugs to <>.



David Lichteblau <>

May 2007 ldapvi 1.7