Class LDAPPasswordModify
- java.lang.Object
-
- com.unboundid.util.CommandLineTool
-
- com.unboundid.util.LDAPCommandLineTool
-
- com.unboundid.ldap.sdk.unboundidds.tools.LDAPPasswordModify
-
- All Implemented Interfaces:
UnsolicitedNotificationHandler
@ThreadSafety(level=NOT_THREADSAFE) public final class LDAPPasswordModify extends LDAPCommandLineTool implements UnsolicitedNotificationHandler
This class provides an implementation of an LDAP command-line tool that may be used to change passwords in a directory server. Three types of password changes are supported: the password modify extended operation (as described in RFC 3062), a standard LDAP modify operation that targets an attribute like userPassword, or an Active Directory-specific password change that uses an LDAP modify operation to replace the value of the unicodePwd attribute with a value that is the password surrounded by quotation marks and encoded with UTF-16-LE.
NOTE: This class, and other classes within the
com.unboundid.ldap.sdk.unboundiddspackage structure, are only supported for use against Ping Identity, UnboundID, and Nokia/Alcatel-Lucent 8661 server products. These classes provide support for proprietary functionality or for external specifications that are not considered stable or mature enough to be guaranteed to work in an interoperable way with other types of LDAP servers.
-
-
Constructor Summary
Constructors Constructor Description LDAPPasswordModify(java.io.OutputStream out, java.io.OutputStream err)Creates a new instance of this tool with the provided output and error streams.
-
Method Summary
All Methods Static Methods Instance Methods Concrete Methods Modifier and Type Method Description voidaddNonLDAPArguments(ArgumentParser parser)Adds the arguments needed by this command-line tool to the provided argument parser which are not related to connecting or authenticating to the directory server.booleandefaultsToInteractiveMode()Indicates whether this tool defaults to launching in interactive mode if the tool is invoked without any command-line arguments.protected booleandefaultToPromptForBindPassword()Indicates whether this tool should default to interactively prompting for the bind password if a password is required but no argument was provided to indicate how to get the password.voiddoExtendedNonLDAPArgumentValidation()Performs any necessary processing that should be done to ensure that the provided set of command-line arguments were valid.ResultCodedoToolProcessing()Performs the core set of processing for this tool.java.util.List<java.lang.String>getAdditionalDescriptionParagraphs()Retrieves additional paragraphs that should be included in the description for this tool.protected java.util.List<Control>getBindControls()Retrieves a set of controls that should be included in any bind request generated by this tool.LDAPConnectionOptionsgetConnectionOptions()Retrieves the connection options that should be used for connections that are created with this command line tool.java.util.LinkedHashMap<java.lang.String[],java.lang.String>getExampleUsages()Retrieves a set of information that may be used to generate example usage information.protected java.util.Set<java.lang.Character>getSuppressedShortIdentifiers()Retrieves a set containing any short identifiers that should be suppressed in the set of generic tool arguments so that they can be used by a tool-specific argument instead.protected java.lang.StringgetToolCompletionMessage()Retrieves an optional message that may provide additional information about the way that the tool completed its processing.java.lang.StringgetToolDescription()Retrieves a human-readable description for this tool.java.lang.StringgetToolName()Retrieves the name of this tool.java.lang.StringgetToolVersion()Retrieves a version string for this tool, if available.voidhandleUnsolicitedNotification(LDAPConnection connection, ExtendedResult notification)Performs any processing that may be necessary in response to the provided unsolicited notification that has been received from the server.protected booleanincludeAlternateLongIdentifiers()Indicates whether the LDAP-specific arguments should include alternate versions of all long identifiers that consist of multiple words so that they are available in both camelCase and dash-separated versions.protected booleanlogToolInvocationByDefault()Indicates whether to log messages about the launch and completion of this tool into the invocation log of Ping Identity server products that may include it.static ResultCodemain(java.io.OutputStream out, java.io.OutputStream err, java.lang.String... args)Invokes this tool with the provided set of arguments, and using the provided streams for standard output and error.static voidmain(java.lang.String... args)Invokes this tool with the provided set of arguments.protected booleansupportsAuthentication()Indicates whether this tool should provide the arguments that allow it to bind via simple or SASL authentication.booleansupportsInteractiveMode()Indicates whether this tool should provide support for an interactive mode, in which the tool offers a mode in which the arguments can be provided in a text-driven menu rather than requiring them to be given on the command line.protected booleansupportsMultipleServers()Indicates whether this tool supports creating connections to multiple servers.protected booleansupportsOutputFile()Indicates whether this tool should provide arguments for redirecting output to a file.booleansupportsPropertiesFile()Indicates whether this tool supports the use of a properties file for specifying default values for arguments that aren't specified on the command line.protected booleansupportsSASLHelp()Indicates whether this tool should provide a "--help-sasl" argument that provides information about the supported SASL mechanisms and their associated properties.protected booleansupportsSSLDebugging()Indicates whether this tool should provide a command-line argument that allows for low-level SSL debugging.-
Methods inherited from class com.unboundid.util.LDAPCommandLineTool
addToolArguments, anyLDAPArgumentsProvided, createBindRequest, createServerSet, createSSLUtil, createSSLUtil, doExtendedArgumentValidation, getConnection, getConnectionPool, getConnectionPool, getUnauthenticatedConnection
-
Methods inherited from class com.unboundid.util.CommandLineTool
addEnableSSLDebuggingArgument, createArgumentParser, doShutdownHookProcessing, err, getErr, getMaxTrailingArguments, getMinTrailingArguments, getOriginalErr, getOriginalOut, getOut, getPasswordFileReader, getTrailingArgumentsPlaceholder, out, registerShutdownHook, requestToolArgumentsInteractively, runTool, wrapErr, wrapOut
-
-
-
-
Constructor Detail
-
LDAPPasswordModify
public LDAPPasswordModify(@Nullable java.io.OutputStream out, @Nullable java.io.OutputStream err)
Creates a new instance of this tool with the provided output and error streams.- Parameters:
out- The output stream to use for standard output. It may benullif standard output should be suppressed.err- The output stream to use for standard error. It may benullif standard error should be suppressed.
-
-
Method Detail
-
main
public static void main(@NotNull java.lang.String... args)
Invokes this tool with the provided set of arguments. The default standard output and error streams will be used.- Parameters:
args- The command-line arguments provided to this program.
-
main
@NotNull public static ResultCode main(@Nullable java.io.OutputStream out, @Nullable java.io.OutputStream err, @NotNull java.lang.String... args)
Invokes this tool with the provided set of arguments, and using the provided streams for standard output and error.- Parameters:
out- The output stream to use for standard output. It may benullif standard output should be suppressed.err- The output stream to use for standard error. It may benullif standard error should be suppressed.args- The command-line arguments provided to this program.- Returns:
- The result code obtained when running the tool. Any result code
other than
ResultCode.SUCCESSindicates an error.
-
getToolName
@NotNull public java.lang.String getToolName()
Retrieves the name of this tool. It should be the name of the command used to invoke this tool.- Specified by:
getToolNamein classCommandLineTool- Returns:
- The name for this tool.
-
getToolDescription
@NotNull public java.lang.String getToolDescription()
Retrieves a human-readable description for this tool. If the description should include multiple paragraphs, then this method should return the text for the first paragraph, and theCommandLineTool.getAdditionalDescriptionParagraphs()method should be used to return the text for the subsequent paragraphs.- Specified by:
getToolDescriptionin classCommandLineTool- Returns:
- A human-readable description for this tool.
-
getAdditionalDescriptionParagraphs
@NotNull public java.util.List<java.lang.String> getAdditionalDescriptionParagraphs()
Retrieves additional paragraphs that should be included in the description for this tool. If the tool description should include multiple paragraphs, then theCommandLineTool.getToolDescription()method should return the text of the first paragraph, and each item in the list returned by this method should be the text for each subsequent paragraph. If the tool description should only have a single paragraph, then this method may returnnullor an empty list.- Overrides:
getAdditionalDescriptionParagraphsin classCommandLineTool- Returns:
- Additional paragraphs that should be included in the description
for this tool, or
nullor an empty list if only a single description paragraph (whose text is returned by thegetToolDescriptionmethod) is needed.
-
getToolVersion
@NotNull public java.lang.String getToolVersion()
Retrieves a version string for this tool, if available.- Overrides:
getToolVersionin classCommandLineTool- Returns:
- A version string for this tool, or
nullif none is available.
-
supportsInteractiveMode
public boolean supportsInteractiveMode()
Indicates whether this tool should provide support for an interactive mode, in which the tool offers a mode in which the arguments can be provided in a text-driven menu rather than requiring them to be given on the command line. If interactive mode is supported, it may be invoked using the "--interactive" argument. Alternately, if interactive mode is supported andCommandLineTool.defaultsToInteractiveMode()returnstrue, then interactive mode may be invoked by simply launching the tool without any arguments.- Overrides:
supportsInteractiveModein classCommandLineTool- Returns:
trueif this tool supports interactive mode, orfalseif not.
-
defaultsToInteractiveMode
public boolean defaultsToInteractiveMode()
Indicates whether this tool defaults to launching in interactive mode if the tool is invoked without any command-line arguments. This will only be used ifCommandLineTool.supportsInteractiveMode()returnstrue.- Overrides:
defaultsToInteractiveModein classCommandLineTool- Returns:
trueif this tool defaults to using interactive mode if launched without any command-line arguments, orfalseif not.
-
supportsPropertiesFile
public boolean supportsPropertiesFile()
Indicates whether this tool supports the use of a properties file for specifying default values for arguments that aren't specified on the command line.- Overrides:
supportsPropertiesFilein classCommandLineTool- Returns:
trueif this tool supports the use of a properties file for specifying default values for arguments that aren't specified on the command line, orfalseif not.
-
supportsOutputFile
protected boolean supportsOutputFile()
Indicates whether this tool should provide arguments for redirecting output to a file. If this method returnstrue, then the tool will offer an "--outputFile" argument that will specify the path to a file to which all standard output and standard error content will be written, and it will also offer a "--teeToStandardOut" argument that can only be used if the "--outputFile" argument is present and will cause all output to be written to both the specified output file and to standard output.- Overrides:
supportsOutputFilein classCommandLineTool- Returns:
trueif this tool should provide arguments for redirecting output to a file, orfalseif not.
-
supportsAuthentication
protected boolean supportsAuthentication()
Indicates whether this tool should provide the arguments that allow it to bind via simple or SASL authentication.- Overrides:
supportsAuthenticationin classLDAPCommandLineTool- Returns:
trueif this tool should provide the arguments that allow it to bind via simple or SASL authentication, orfalseif not.
-
defaultToPromptForBindPassword
protected boolean defaultToPromptForBindPassword()
Indicates whether this tool should default to interactively prompting for the bind password if a password is required but no argument was provided to indicate how to get the password.- Overrides:
defaultToPromptForBindPasswordin classLDAPCommandLineTool- Returns:
trueif this tool should default to interactively prompting for the bind password, orfalseif not.
-
supportsSASLHelp
protected boolean supportsSASLHelp()
Indicates whether this tool should provide a "--help-sasl" argument that provides information about the supported SASL mechanisms and their associated properties.- Overrides:
supportsSASLHelpin classLDAPCommandLineTool- Returns:
trueif this tool should provide a "--help-sasl" argument, orfalseif not.
-
includeAlternateLongIdentifiers
protected boolean includeAlternateLongIdentifiers()
Indicates whether the LDAP-specific arguments should include alternate versions of all long identifiers that consist of multiple words so that they are available in both camelCase and dash-separated versions.- Overrides:
includeAlternateLongIdentifiersin classLDAPCommandLineTool- Returns:
trueif this tool should provide multiple versions of long identifiers for LDAP-specific arguments, orfalseif not.
-
getBindControls
@NotNull protected java.util.List<Control> getBindControls()
Retrieves a set of controls that should be included in any bind request generated by this tool.- Overrides:
getBindControlsin classLDAPCommandLineTool- Returns:
- A set of controls that should be included in any bind request
generated by this tool. It may be
nullor empty if no controls should be included in the bind request.
-
supportsMultipleServers
protected boolean supportsMultipleServers()
Indicates whether this tool supports creating connections to multiple servers. If it is to support multiple servers, then the "--hostname" and "--port" arguments will be allowed to be provided multiple times, and will be required to be provided the same number of times. The same type of communication security and bind credentials will be used for all servers.- Overrides:
supportsMultipleServersin classLDAPCommandLineTool- Returns:
trueif this tool supports creating connections to multiple servers, orfalseif not.
-
supportsSSLDebugging
protected boolean supportsSSLDebugging()
Indicates whether this tool should provide a command-line argument that allows for low-level SSL debugging. If this returnstrue, then an "--enableSSLDebugging" argument will be added that sets the "javax.net.debug" system property to "all" before attempting any communication.- Overrides:
supportsSSLDebuggingin classLDAPCommandLineTool- Returns:
trueif this tool should offer an "--enableSSLDebugging" argument, orfalseif not.
-
getConnectionOptions
@NotNull public LDAPConnectionOptions getConnectionOptions()
Retrieves the connection options that should be used for connections that are created with this command line tool. Subclasses may override this method to use a custom set of connection options.- Overrides:
getConnectionOptionsin classLDAPCommandLineTool- Returns:
- The connection options that should be used for connections that are created with this command line tool.
-
logToolInvocationByDefault
protected boolean logToolInvocationByDefault()
Indicates whether to log messages about the launch and completion of this tool into the invocation log of Ping Identity server products that may include it. This method is not needed for tools that are not expected to be part of the Ping Identity server products suite. Further, this value may be overridden by settings in the server's tool-invocation-logging.properties file.
This method should generally returntruefor tools that may alter the server configuration, data, or other state information, andfalsefor tools that do not make any changes.- Overrides:
logToolInvocationByDefaultin classCommandLineTool- Returns:
trueif Ping Identity server products should include messages about the launch and completion of this tool in tool invocation log files by default, orfalseif not.
-
getToolCompletionMessage
@Nullable protected java.lang.String getToolCompletionMessage()
Retrieves an optional message that may provide additional information about the way that the tool completed its processing. For example if the tool exited with an error message, it may be useful for this method to return that error message.
The message returned by this method is intended for informational purposes and is not meant to be parsed or programmatically interpreted.- Overrides:
getToolCompletionMessagein classCommandLineTool- Returns:
- An optional message that may provide additional information about
the completion state for this tool, or
nullif no completion message is available.
-
addNonLDAPArguments
public void addNonLDAPArguments(@NotNull ArgumentParser parser) throws ArgumentException
Adds the arguments needed by this command-line tool to the provided argument parser which are not related to connecting or authenticating to the directory server.- Specified by:
addNonLDAPArgumentsin classLDAPCommandLineTool- Parameters:
parser- The argument parser to which the arguments should be added.- Throws:
ArgumentException- If a problem occurs while adding the arguments.
-
getSuppressedShortIdentifiers
@NotNull protected java.util.Set<java.lang.Character> getSuppressedShortIdentifiers()
Retrieves a set containing any short identifiers that should be suppressed in the set of generic tool arguments so that they can be used by a tool-specific argument instead.- Overrides:
getSuppressedShortIdentifiersin classLDAPCommandLineTool- Returns:
- A set containing any short identifiers that should be suppressed
in the set of generic tool arguments so that they can be used by a
tool-specific argument instead. It may be empty but must not be
null.
-
doExtendedNonLDAPArgumentValidation
public void doExtendedNonLDAPArgumentValidation() throws ArgumentException
Performs any necessary processing that should be done to ensure that the provided set of command-line arguments were valid. This method will be called after the basic argument parsing has been performed and after all LDAP-specific argument validation has been processed, and immediately before theCommandLineTool.doToolProcessing()method is invoked.- Overrides:
doExtendedNonLDAPArgumentValidationin classLDAPCommandLineTool- Throws:
ArgumentException- If there was a problem with the command-line arguments provided to this program.
-
doToolProcessing
@NotNull public ResultCode doToolProcessing()
Performs the core set of processing for this tool.- Specified by:
doToolProcessingin classCommandLineTool- Returns:
- A result code that indicates whether the processing completed successfully.
-
handleUnsolicitedNotification
public void handleUnsolicitedNotification(@NotNull LDAPConnection connection, @NotNull ExtendedResult notification)
Performs any processing that may be necessary in response to the provided unsolicited notification that has been received from the server.- Specified by:
handleUnsolicitedNotificationin interfaceUnsolicitedNotificationHandler- Parameters:
connection- The connection on which the unsolicited notification was received.notification- The unsolicited notification that has been received from the server.
-
getExampleUsages
@NotNull public java.util.LinkedHashMap<java.lang.String[],java.lang.String> getExampleUsages()
Retrieves a set of information that may be used to generate example usage information. Each element in the returned map should consist of a map between an example set of arguments and a string that describes the behavior of the tool when invoked with that set of arguments.- Overrides:
getExampleUsagesin classCommandLineTool- Returns:
- A set of information that may be used to generate example usage
information. It may be
nullor empty if no example usage information is available.
-
-