idsdirctl, ibmdirctl

Description

The idsdirctl or ibmdirctl command is an administration server control program.

To run idsdirctl or ibmdirctl command, you must be the primary administrator or a member of the local administrators with start or stop server authority.

Synopsis

ibmdirctl [options] command -- [ibmslapd options]

start

starts IBM® Verify Directory

stop

stops IBM Verify Directory

restart

stops and then starts IBM Verify Directory

status

indicates whether IBM Verify Directory is running or stopped

statusreturn

sets exit code 0=running, 1=starting, 2=stopped

admstop

stops the IBM Verify Directory administration server

startlogmgmt

starts the log management capabilities for IBM Verify Directory

stoplogmgmt

stops the log management capabilities for IBM Verify Directory

statuslogmgmt

indicates whether the log management for IBM Verify Directory is running

Usage

You can use the administration server control program, ibmdirctl, to start, stop, restart, or query the status of IBM Verify Directory. It can also be used to stop the administration server. For this command to function, the administration server, idsdiradm, must be running. For more information about the idsdiradm utility, see the Directory administration server section in the Administering section in the IBM Verify Directory documentation.

If idsslapd options are provided, they must be preceded by --. Only the -a and -n parameters of idsslapd are supported.

To see the syntax help foribmdirctl, type ibmdirctl -?.

Options

-D adminDN

Specifies the bind DN to the command. You can also use -d instead of -D option.

-h hostname

Specifies the host name of the system where ibmdiradm is running. You can also use -H instead of -h option.

-K keyfile

Specifies the file to use for keys.

-N key_name

Specifies the private key name to use in keyfile.

-p port

Specifies the port number on which ibmdiradm is listening.

-P key_pw

Specifies the keyfile password.

-v

Indicates to run in verbose mode.

-w adminPW

Specifies the bind password or ? for non-echoed prompt. Use backslash \? to avoid matching single character file names on UNIX™. You can also use -W instead of -w option.

-Y

Specifies to use a secure LDAP connection by using the startTLS protocol. The -Y option is only supported when GSKit is installed.

-Z

Specifies to use a secure LDAP connection by using Secure Sockets Layer (SSL) and Transport Layer Security (TLS). The -Z option is only supported for SSL component entry, and only when GSKit is installed.

-?

Specifies to show the help.

-1 sec:usec

Specifies the timeout for the connect() function in seconds and microseconds. The values that are provided for seconds and microseconds must be positive integers.