Common Group Related Tasks in the OpenLDAP Database
===================================================

.. index:: OpenLDAP

In this section, we will add a group named ``newgroup`` under ``ou=groups,dc=example,dc=com`` in the OpenLDAP database,
where ``dc=example,dc=com`` corresponds to the domain specified in :doc:`../install-essential-docker/openldap`. We will
also show how to add a user to an existing group.

Enter the OpenLDAP container:
::

   ne openldap

In the OpenLDAP container, run the following commands to assign the domain and the new group name to bash variables
(replace ``example.com`` with your domain configured in :doc:`../install-essential-docker/openldap`):
::

   MY_DOMAIN=example.com
   LDAP_SUFFIX=$(sed -e 's/^/dc=/' -e 's/\./,dc=/g' <<< $MY_DOMAIN)
   NEWGROUP=newgroup

.. index::
   single: OpenLDAP; group

Add a New Group into the OpenLDAP Database
------------------------------------------

Run the following commands to create the new group ``newgroup`` (replace ``MY_PASSWORD`` with the OpenLDAP root
password, ``username`` with a user name to be added to the group):
::

   UN=username
   ldapadd -H ldapi:/// -x -w MY_PASSWORD -D "cn=root,$LDAP_SUFFIX" <<EOF
   dn: cn=$NEWGROUP,ou=groups,$LDAP_SUFFIX
   cn: $NEWGROUP
   objectclass: groupOfNames
   member: uid=$UN,ou=people,$LDAP_SUFFIX
   EOF

Remember that the ``member:`` line is necessary, and it can appear multiple times to add more than one users to the
group.

Add a Member to an Existing Group
---------------------------------

Run the following commands to add the user ``username`` to the group ``newgroup`` (replace ``MY_PASSWORD`` with the
OpenLDAP root password):
::

   UN=$username
   ldapmodify -H ldapi:/// -x -w MY_PASSWORD -D "cn=root,$LDAP_SUFFIX" <<EOF
   dn: cn=$NEWGROUP,ou=groups,$LDAP_SUFFIX
   changetype: modify
   add: member
   member: uid=$UN,ou=people,$LDAP_SUFFIX
   EOF

Exit
----

After finish the task(s), press ``Ctrl-D`` to exit the shell in the container.