Specify the object classes for the new entry. Click the Add icon and use the Add

13-10 Oracle Fusion Middleware Administrators Guide for Oracle Internet Directory 3. Navigate to an entry in the data tree. Alternatively, perform a search for the entry you want to modify as described in Searching for Entries by Using Oracle Directory Services Manager on page 13-3. In the search result in the left pane, select the entry you want to modify.

4. To edit the RDN, select the Edit RDN icon above the Data Tree. Alternatively, you

can select the entry in the Data Tree, right click, and select Edit RDN. Specify the new RDN value. For a multivalued RDN you can use the Delete Old RDN checkbox to specify whether the old RDN should be deleted. Select OK to save the change or Cancel to abandon the change. 5. To add an object class:

a. Click the Attributes tab.

b. Click the Add icon next to objectclass and use the Add Object Class dialog

to select object class entries. Optionally, use the search box to filter the list of object classes. To add the object class, click it and then click OK. 6. To delete an object class,

a. Click the Attributes tab.

b. Select the object class you want to delete.

c. Click the Delete icon next to objectclass. The Delete Object Class dialog

lists the attributes that will be deleted with that class.

d. Click Delete to proceed or Cancel to cancel the deletion.

7. If the entry is a person, click the Person tab and use it to manage basic user

attributes. Click Apply to save your changes or Revert to discard them. If the entry is a group, see Managing Group Entries by Using Oracle Directory Services Manager on page 14-8.

8. If this is a person entry, you can upload a photograph. Click Browse, navigate to

the photograph, then click Open. To update the photograph, click Update and follow the same procedure. Click the Delete icon to delete the photograph. 9. To modify the values of attributes that are not specific to a person or group, click the Attributes tab in the right pane and make the desired changes. By default, only non-empty attributes are shown. You can switch between Managed Attributes and Show All by using the Views list. 10. To change the list of attributes shown as managed attributes, click the icon under Optional Attributes . Select attributes you want to move from the All Attributes list to the Shown Attributes lists and use the Move and Move All arrows to move the attributes. Select attributes you want to move from the shown Attributes list to the All Attributes lists and use the Remove and Remove All arrows to move the attributes. Click Add Attributes to make your changes take effect or click Cancel to discard your changes. After you click Add Attributes, only the attributes that were on the Shown Attributes list are shown in the Managed Attributes view. 11. Specify values for the optional properties. You can also modify the values of the mandatory properties. For multivalued attributes, you can use the Add and Delete icons to add and delete multiple values.

12. When you have completed all your changes, click Apply to make them take effect.

Alternatively, click Revert to abandon your changes. 13. You can set an access control point ACP on this entry by using the Subtree Access and Local Access tabs. The procedures are described in Adding or Modifying an Managing Directory Entries 13-11 ACP by Using the Data Browser in ODSM on page 29-21 and Setting or Modifying Entry-Level Access by Using the Data Browser in ODSM on page 29-21. Managing Entries by Using LDAP Command-Line Tools This section contains the following topics: ■ Listing All the Attributes in the Directory by Using ldapsearch ■ Listing Operational Attributes by Using ldapsearch ■ Attribute Case in ldapsearch Output ■ Adding a User Entry by Using ldapadd ■ Modifying a User Entry by Using ldapmodify ■ Adding an Attribute Option by Using ldapmodify ■ Deleting an Attribute Option by Using ldapmodify ■ Searching for Entries with Attribute Options by Using ldapsearch Listing All the Attributes in the Directory by Using ldapsearch Use the following command line to list of all the attributes, including those that do not have values: ldapsearch -p port -h host -D cn=orcladmin -q -b cn=subschemasubentry \ -s base objectclass= Listing Operational Attributes by Using ldapsearch By default, ldapsearch does not return operational attributes. If you add the character + to the list of attributes in the search request, however, ldapsearch returns all operational attributes. Searching for an entry with + returns only operational attributes. For example: ldapsearch -h adc2190517 -p 3060 -D cn=orcladmin -w welcome -b c=uk -L -s base objectclass= + dn: c=UK orclguid: 8EB5730F5852DECBE040E80A7452694E creatorsname: cn=orcladmin createtimestamp: 20100826065339z modifytimestamp: 20100826065339z modifiersname: cn=orcladmin orclnormdn: c=uk By comparison, a search with but not + returns all user attributes: ldapsearch -h adc2190517 -p 3060 -D cn=orcladmin -w welcome -b c=uk -L -s base objectclass= dn: c=UK c: uk objectclass: top objectclass: country