Imports and exports data from Active Directory

I use this command to get all users information from my domain (spsb.net.my) in one of the OU (head quarters). The output file would be user-hq-ou.csv.

csvde -f user-hq-ou.csv -d "OU=head quarters,DC=spsb,DC=net,DC=my" -r (objectClass=user)


The full explanation is as follows:

Csvde

Imports and exports data from Active Directory using files that store data in the comma-separated value (CSV) format. You can also support batch operations based on the CSV file format standard.

Syntax

csvde [-i] [-f FileName] [-s ServerName] [-c String1 String2] [-v] [-j Path] [-t PortNumber] [-d BaseDN] [-r LDAPFilter] [-p Scope] [-l LDAPAttributeList] [-o LDAPAttributeList] [-g] [-m] [-n] [-k] [-a UserDistinguishedName Password] [-b UserName Domain Password]

Parameters

-i
Specifies import mode. If not specified, the default mode is export.
-f FileName
Identifies the import or export file name.
-s ServerName
Specifies the domain controller to perform the import or export operation.
-c String1 String2
Replaces all occurrences of String1 with String2. This is generally used when importing data from one domain to another and the distinguished name of the export domain (String1) needs to be replaced with that of the import domain (String2).
-v
Sets verbose mode.
-j Path
Sets the log file location. The default is the current path.
-t PortNumber
Specifies an LDAP port number. The default LDAP port is 389. The global catalog port is 3268.
-d BaseDN
Sets the distinguished name of the search base for data export.
-r LDAPFilter
Creates an LDAP search filter for data export.
-p Scope
Sets the search scope. Search scope options are Base, OneLevel, or SubTree.
-l LDAPAttributeList
Sets the list of attributes to return in the results of an export query. If this parameter is omitted, all attributes are returned.
-o LDAPAttributeList
Sets the list of attributes to omit from the results of an export query. This is typically used when exporting objects from Active Directory and then importing them into another LDAP-compliant directory. If attributes are not supported by another directory, you can omit the attributes from the result set using this option.
-g
Omits paged searches.
-m
Omit attributes that only apply to Active Directory objects such as the ObjectGUID, objectSID, pwdLastSet and samAccountType attributes.
-n
Omits export of binary values.
-k
Ignores errors during the import operation and continues processing. The following is a complete list of ignored errors: "Object already exists," "Constraint violation," and "Attribute or value already exists."
-a UserDistinguishedName Password
Sets the command to run using the supplied UserDistinguishedName and Password. By default, the command runs using the credentials of the user currently logged on to the network.
-b UserName Domain Password
Sets the command to run as Username Domain Password. By default, the command will run using the credentials of the user currently logged on to the network.
-?
Displays the command menu.

Remarks

  • Applications such as Microsoft Excel are capable of reading and saving data in the CSV format. In addition, the Microsoft Exchange Server administration tools are also capable of importing and exporting data using the CSV format, as are many other non-Microsoft tools.

    The CSV format consists of one or more lines of data, with each value separated by a comma. The first line (sometimes referred to as the header) of the CSV file must contain the names of each attribute in the same order as the data in any line following the first line. For example:

    CN,FirstName,SurName,Description

    FirstUserLogonName,1stUserFirstName,1stUserSurname,Manager

    SecondUserLogonName,2ndUserFirstName,2ndUserSurname,President

  • You can use csvde -r to create an LDAP search filter for data export. For example, the following filter exports all users with a particular surname: csvde -r (and(objectClass=User)(sn=Surname))

Comments

Post a Comment

Popular posts from this blog

Forgot EVA Command View admin userid/password

Image
How to change or recover HP EVA Command View userid/password? You are the new system engineer and you want to manage one HP Storageworks using EVA Command View but you dont have an id/password for it. You can simply change the id/password of it, provided you have an administrator id (regardless it is domain/local admin) for the server where the EVA Command View is installed. Find the local user account for that particular machine and look for HP Storage Admins group. Check the properties and find out who is the member of that group. As example below, eva is the userid I am looking for. You can change the password of this userid or you can even add a new member for this group. Now, you can login into EVA Command View using this id and new password.
Read more

Manage wtmp Log Size In Aix

1. CONVERT WTMP FILE TO A  TEXT FILE AND REMOVE UNWANTED ENTRIES. Covert the wtmp file to readable ascii text file: /usr/sbin/acct/fwtmp < /var/adm/wtmp > /tmp/wtmp.ascii.txt We can calculate number of lines of wtmp.ascii.txt file; # cat /tmp/wtmp.ascii.txt|wc -l     3010110 See... how big it is! We can use text editor such as vi editor or other text editor to remove unwanted entry from this wtmp.ascii.txt file. However, if the file is too big, some text editor software is unable to open it. As an option, we can keep only last 1,500,500 lines (it is my number, you can choose your number yourself); tail -1500500 /tmp/wtmp.ascii.txt >> /tmp/wtmp.ascii2.txt We might edit the smaller wtmp.ascii2.txt file using text editor. 2. CONVERT THE TEXT FILE BACK TO WTMP FORMAT AND COPY TO THE DEFAULT LOCATION Use the trimmed file. /usr/sbin/acct/fwtmp -ic < tmp/wtmp.ascii2.txt>  /var/adm/wtmp 3. REMOVE TEMPORARY FILES (optional). rm /tmp/wtmp.ascii.tx
Read more

Network Connections Type

ATM (asynchronous transfer mode) - the protocol used to "gather" DSL traffic from users and forward it to a DSLAM, which consolidates traffic across the backbone network. Carries data in fixed-length frames of 53 bytes each. ATU-C (ADSL Termination Unit - Central Office) - the downstream channel. ATU-R (ADSL Termination Unit - Remote) - the upstream channel. CAP (carrierless amplitude/phase modulation) - the original ADSL modulation approach in which the signal frequency range is divided into voice (0-4 KHz), upstream data, and downstream data. DMT (discrete multitone) is now the preferred modulation alternative over CAP. CDSL (Consumer DSL) - a trademarked version of DSL from Rockwell that is somewhat slower than ADSL (1 Mbps downstream, probably less upstream) but has the advantage that a "splitter" does not need to be installed at the user's end. CDSL uses its own carrier technology rather than DMT or CAP ADSL technology. DMT (Discrete Multito
Read more