Copying a proxy authorization group by using the command line

You can use the command line to copy a proxy authorization group. Copying a proxy authorization group is useful if you want to have the same proxy authorization group under both localhost and IBMpolicies.

Procedure

  1. To view the proxy authorization group that is contained in localhost, run the command:
    idsldapsearch -D adminDN -w adminPW -b 
    cn=localhostobjectclass=ibm-proxyGroup
    Running this command generates the following output:
    Dn: cn=proxyGroup, cn=localhost
    Cn: proxyGroup
    objectclass: ibm-proxyGroup
    objectclass: groupOfNames
    member: cn=client1, ou=austin, o=sample
    member: cn=client2, ou=austin, o=sample
    member: cn=client3, ou=austin, o=sample
  2. Select the proxy authorization group. Use an editor to change cn=localhost to cn=IBMpolicies, and save the changes to filename.
  3. Then, issue the following command:
    idsldapmodify -a -D adminDN -w adminPW -i 
    filename
    Wherefilename contains the following information:
    Dn: cn=proxyGroup, cn=IBMpolicies
    Cn: proxyGroup
    objectclass: ibm-proxyGroup
    objectclass: groupOfNames
    member: cn=client1, ou=austin, o=sample
    member: cn=client2, ou=austin, o=sample
    member: cn=client3, ou=austin, o=sample