LDIFDE and CSVDE to add groups

[patloner]

What I am really looking for is a list of the LDAP attributes that are used with these two utilities. It seems that the list of attributes used to create user accounts are abundant. But how about the list of attributes for the objectclass: group. When I add this to my text file it automatically makes the group as a global group, is there anyway to change it to another group scope and possibly add members. Thanks for any help

 

[ldap4u]

So the attribute you would want to set on an import process to change the type of group would be groupType. Two examples:

Security groups are usually: -2147483646
DL's are usually: 4

For adding members you would need to specify the dn of the member. A word of caution, if memory serves me, if you attempt to add a DN that does not exist the entire entry will fail due to the default referential integrity processing ...

HTH,

-Chris

 

[patloner]

Okay so the grouptype attribute with a value of 4 creates a distribution group which is domain local in its scope. I couldn't get that security group value to work though. I need to be able to create multiple security groups of global and domain local scope within a single csv or ldf file. Thanks for the initial response, if you can tell me anymore I would appreciate it. Thanks

 

[ldap4u]

The best way to figure out what you need to set it up the way you want is to create the group the way you want it through the MMC tool - then either export the entry via ldifde or ldapsearch and look at what the corresponding values are ...

 

[patloner]

that works, I didn't even think of the export capabilities. Thanks for your help. I discovered today that I could create a group using the grouptype attribute and it would be a domain local but a distribution group. If I left that attribute off I got a security global. I figured that if all else failed, at least I could change the group type but cannot change the scope from DL to G. So I used dsquery on Win2K3 to grab the groups and switch the group type to security all at once. It still would be great to get it down to one file. I will check this out tomorrow, thanks for your help

 

[Big10uk]

patloner (Instructor)

Could you post the syntac you used, as I am having problems createing a group with LDIFDE and CSVDE?

Thanks

 

[tsuji]

[1] First you have to have documentation of ldifde's syntax:

http://www.microsoft.com/technet/pr...elp/32872283-3722-4d9b-925a-82c516a1ca14.mspx

[2] To create a new group (Supports, say) in the Sales ou, you have to do this.
[2.1] Specify the import option (-i);
[2.2] Specify the import file (-f);
[2.3] Prepare the import file, makegroup.ldf say, a text file containing these lines, know your own domain etc.

dn: CN=Supports,OU=Sales,DC=NA,DC=Fabrikam,DC=Com;
changetype: add
objectClass: group
samAccountName: Supports

[2.4] Issue the command line at command prompt, with paths and all that if necessary.

ldifde -i -f makegroup.ldf

[2.5] Here it uses default to your dc, else you specify the server by adding option "-s <servername>" to it.

- tsuji