Utility commands

You can use the following utility commands retrieve and convert data from format to format, manipulate distinguished names, and manage group membership and user passwords.

Command	Description
dn_from_domain	Converts a domain’s dotted name to a distinguished name (DN) format.
dn_to_principal	Searches Active Directory for a DN and, if found, returns the corresponding UPN.
domain_from_dn	Converts a domain’s distinguished name (DN) to a dotted name format.
get_group_members	Returns a Tcl list of members in a group.
get_parent_dn	Returns the parent of an LDAP path (a distinguished name): it removes the first element of the DN and returns the rest.
get_pwnam	Searches the etc/passwd file for a UNIX user name and, if found, returns a Tcl list of the passwd profile values associated with the user.
get_rdn	Returns the relative DN of an LDAP path: it returns only the first element of the supplied DN.
get_schema_guid	finds a class or attribute in Active Directory and returns its globally unique identifier (GUID)
getent_passwd	Returns a Tcl list of all entries in the local /etc/passwd file.
joined_get_user_membership	Uses adclient to query Active Directory and returns a Tcl list of groups that a user belongs to.
joined_name_to_principal	Uses adclient to search for a UNIX name and return the security principal associated with that UNIX name.
joined_user_in_group	Uses adclient to check Active Directory to see if a user is in a group.
move_object	Moves the selected object to the specified location.
principal_from_sid	Searches Active Directory for an SID and returns the security principal associated with the SID.
principal_to_dn	Searches Active Directory for a user principal name (UPN) and, if found, returns the corresponding DN.
rename_object	Renames the selected object.
set_user_password	Sets an Active Directory user’s password.
sid_to_escaped_string	Converts an Active Directory security identifier (SID) to an escaped string.
sid_to_uid	Converts an Active Directory SID to a user ID (UID).