LDAP Samples - Reconciling Data Between OpenIDM and One or More LDAP Directories

$ cd /path/to/opendj
$ ./setup --cli \
--hostname localhost \
--ldapPort 1389 \
--rootUserDN "cn=Directory Manager" \
--rootUserPassword password \
--adminConnectorPort 4444 \
--baseDN dc=com \
--ldifFile /path/to/openidm/samples/sample2/data/Example.ldif \
--acceptLicense \
--no-prompt
...
Configuring Directory Server ..... Done.
Importing LDIF file /path/to/openidm/samples/sample2/data/Example.ldif ...... Done.
Starting Directory Server ...... Done..
...

$ curl \
 --header "X-OpenIDM-Username: openidm-admin" \
 --header "X-OpenIDM-Password: openidm-admin" \
 --request POST \
 "http://localhost:8080/openidm/recon?_action=recon&mapping=systemLdapAccounts_managedUser&waitForCompletion=true"
{
  "_id": "b1394d10-29b0-4ccf-81d8-c88948ea121c-4",
  "state": "SUCCESS"
}

$ curl \
 --header "X-OpenIDM-Username: openidm-admin" \
 --header "X-OpenIDM-Password: openidm-admin" \
 --request GET \
 "http://localhost:8080/openidm/managed/user?_queryId=query-all-ids"
{
  "result": [
    {
      "_id": "f52df646-7108-45e1-9342-1a17f257b497",
      "_rev": "1"
    },
    {
      "_id": "f7fccf54-e76a-404c-93f0-7486d30f1dc3",
      "_rev": "1"
    }
  ],
...
}

$ curl \
 --header "X-OpenIDM-Username: openidm-admin" \
 --header "X-OpenIDM-Password: openidm-admin" \
 --request GET \
 "http://localhost:8080/openidm/managed/user/0a5546d6-149b-4f8b-b3be-4afa8a267d45"
{
  "_id": "f7fccf54-e76a-404c-93f0-7486d30f1dc3",
  "_rev": "1",
  "displayName": "Barbara Jensen",
  "description": "Created for OpenIDM",
  "givenName": "Barbara",
  "mail": "bjensen@example.com",
  "sn": "Jensen",
  "telephoneNumber": "1-360-229-7105",
  "userName": "bjensen",
  "accountStatus": "active",
  "effectiveRoles": [],
  "effectiveAssignments": []
}

$ curl \
 --header "X-OpenIDM-Username: openidm-admin" \
 --header "X-OpenIDM-Password: openidm-admin" \
 --request POST \
 "http://localhost:8080/openidm/recon?_action=recon&mapping=systemLdapAccounts_managedUser&waitForCompletion=true"
{
  "state": "SUCCESS",
  "_id": "027e25e3-7a33-4858-9080-161c2b40a6bf-2"
}

$ curl \
 --header "X-OpenIDM-Username: openidm-admin" \
 --header "X-OpenIDM-Password: openidm-admin" \
 --request GET \
 "http://localhost:8080/openidm/managed/user?_queryId=query-all-ids"
{
  "result": [
    {
      "_id": "d460ed00-74f9-48fb-8cc1-7829be60ddac",
      "_rev": "1"
    },
    {
      "_id": "74fe2d25-4eb1-4148-a3ae-ff80f194b3a6",
      "_rev": "1"
    }
  ],
...
}

$ curl \
 --header "X-OpenIDM-Username: openidm-admin" \
 --header "X-OpenIDM-Password: openidm-admin" \
 --request GET \
 "http://localhost:8080/openidm/managed/user/d460ed00-74f9-48fb-8cc1-7829be60ddac"
{
  "_id": "d460ed00-74f9-48fb-8cc1-7829be60ddac",
  "_rev": "1",
  "displayName": "Barbara Jensen",
  "description": "Created for OpenIDM",
  "givenName": "Barbara",
  "mail": "bjensen@example.com",
  "telephoneNumber": "1-360-229-7105",
  "sn": "Jensen",
  "userName": "bjensen",
  "accountStatus": "active",
  "effectiveRoles": [],
  "effectiveAssignments": []
}

$ curl \
 --header "X-OpenIDM-Username: openidm-admin" \
 --header "X-OpenIDM-Password: openidm-admin" \
 --header "Content-Type: application/json" \
 --request POST \
 --data '{
    "mail":"fdoe@example.com",
    "sn":"Doe",
    "telephoneNumber":"555-1234",
    "userName":"fdoe",
    "givenName":"Felicitas",
    "description":"Felicitas Doe",
    "displayName":"fdoe"}' \
 "http://localhost:8080/openidm/managed/user?_action=create"
{
  "_id": "90d1f388-d8c3-4438-893c-be4e498e7a1c",
  "_rev": "1",
  "mail": "fdoe@example.com",
  "sn": "Doe",
  "telephoneNumber": "555-1234",
  "userName": "fdoe",
  "givenName": "Felicitas",
  "description": "Felicitas Doe",
  "displayName": "fdoe",
  "accountStatus": "active",
  "effectiveRoles": [],
  "effectiveAssignments": []
}

$ curl \
 --header "X-OpenIDM-Username: openidm-admin" \
 --header "X-OpenIDM-Password: openidm-admin" \
 --request GET \
 "http://localhost:8080/openidm/system/ldap/account?_queryId=query-all-ids"
{
  "result": [
    {
      "_id": "uid=jdoe,ou=People,dc=example,dc=com",
      "dn": "uid=jdoe,ou=People,dc=example,dc=com"
    },
    {
      "_id": "uid=bjensen,ou=People,dc=example,dc=com",
      "dn": "uid=bjensen,ou=People,dc=example,dc=com"
    },
    {
      "_id": "uid=fdoe,ou=People,dc=example,dc=com",
      "dn": "uid=fdoe,ou=People,dc=example,dc=com"
    }
  ],
...
}

$ curl \
 --header "X-OpenIDM-Username: openidm-admin" \
 --header "X-OpenIDM-Password: openidm-admin" \
 --request GET \
 "http://localhost:8080/openidm/system/ldap/account/uid=fdoe,ou=People,dc=example,dc=com"
{
  "_id": "uid=fdoe,ou=People,dc=example,dc=com",
  "mail": "fdoe@example.com",
  "employeeType": null,
  "ldapGroups": [],
  "telephoneNumber": "555-1234",
  "givenName": "Felicitas",
  "cn": "fdoe",
  "dn": "uid=fdoe,ou=People,dc=example,dc=com",
  "uid": "fdoe",
  "sn": "Doe",
  "description": "Felicitas Doe"
}

$ curl \
 --header "X-OpenIDM-Username: openidm-admin" \
 --header "X-OpenIDM-Password: openidm-admin" \
 --request POST \
 "http://localhost:8080/openidm/recon?_action=recon&mapping=systemLdapAccounts_managedUser&waitForCompletion=true"
{
  "_id": "6652c292-5309-40e5-b272-b74d67dd95c9-4",
  "state": "SUCCESS"
}

$ curl \
 --header "X-OpenIDM-Username: openidm-admin" \
 --header "X-OpenIDM-Password: openidm-admin" \
 --request GET \
 "http://localhost:8080/openidm/managed/user?_queryId=query-all-ids"
{
  "result": [
    {
      "_id": "b63fb9a7-99bc-4eb4-8bfd-15f14a756e5b",
      "_rev": "1"
    },
    {
      "_id": "8462fe0c-2ab2-459a-a25e-474474889c9e",
      "_rev": "1"
    }
  ],
...
}

$ curl \
 --header "X-OpenIDM-Username: openidm-admin" \
 --header "X-OpenIDM-Password: openidm-admin" \
 --request GET \
 "http://localhost:8080/openidm/managed/user/8462fe0c-2ab2-459a-a25e-474474889c9e"
{
  "_id": "8462fe0c-2ab2-459a-a25e-474474889c9e",
  "_rev": "1",
  "displayName": "John Doe",
  "description": "Created for OpenIDM",
  "givenName": "John",
  "mail": "jdoe@example.com",
  "telephoneNumber": "1-415-599-1100",
  "sn": "Doe",
  "userName": "jdoe",
  "ldapGroups": [
    "cn=openidm,ou=Groups,dc=example,dc=com"
  ],
  "accountStatus": "active",
  "effectiveRoles": [],
  "effectiveAssignments": []
}

"ldapGroups":["cn=openidm,ou=Groups,dc=example,dc=com"]

$ curl \
 --header "X-OpenIDM-Username: openidm-admin" \
 --header "X-OpenIDM-Password: openidm-admin" \
 --header "Content-Type: application/json" \
 --request POST \
 --data '[
    {
      "operation":"replace",
      "field":"/ldapGroups",
      "value": ["cn=openidm2,ou=Groups,dc=example,dc=com"]
    }
 ]' \
 "http://localhost:8080/openidm/managed/user?_action=patch&_queryId=for-userName&uid=jdoe"
{
  "displayName": "John Doe",
  "description": "Created for OpenIDM",
  "givenName": "John",
  "mail": "jdoe@example.com",
  "telephoneNumber": "1-415-599-1100",
  "sn": "Doe",
  "userName": "jdoe",
  "accountStatus": "active",
  "effectiveRoles": [],
  "effectiveAssignments": [],
  "_id": "8462fe0c-2ab2-459a-a25e-474474889c9e",
  "_rev": "2",
  "ldapGroups": [
    "cn=openidm2,ou=Groups,dc=example,dc=com"
  ]
}

$ curl \
 --header "X-OpenIDM-Username: openidm-admin" \
 --header "X-OpenIDM-Password: openidm-admin" \
 --request GET \
 "http://localhost:8080/openidm/system/ldap/account/uid=jdoe,ou=People,dc=example,dc=com"
{
  "_id": "uid=jdoe,ou=People,dc=example,dc=com",
  "telephoneNumber": "1-415-599-1100",
  "description": "Created for OpenIDM",
  "sn": "Doe",
  "dn": "uid=jdoe,ou=People,dc=example,dc=com",
  "ldapGroups": [
    "cn=openidm2,ou=Groups,dc=example,dc=com"
  ],
  "uid": "jdoe",
  "cn": "John Doe",
  "givenName": "John",
  "mail": "jdoe@example.com"
}

$ curl \
 --header "X-OpenIDM-Username: openidm-admin" \
 --header "X-OpenIDM-Password: openidm-admin" \
 --header "Content-Type: application/json" \
 --request POST \
 --data '[
    {
      "operation":"replace",
      "field":"/ldapGroups",
      "value": ["cn=openidm2,ou=Groups,dc=example,dc=com"]
    }
 ]' \
 "http://localhost:8080/openidm/managed/user?_action=patch&_queryId=for-userName&uid=jdoe"
{
  "displayName": "John Doe",
  "description": "Created for OpenIDM",
  "givenName": "John",
  "mail": "jdoe@example.com",
  "telephoneNumber": "1-415-599-1100",
  "sn": "Doe",
  "userName": "jdoe",
  "accountStatus": "active",
  "effectiveRoles": [],
  "effectiveAssignments": [],
  "_id": "8462fe0c-2ab2-459a-a25e-474474889c9e",
  "_rev": "2",
  "ldapGroups": [
    "cn=openidm2,ou=Groups,dc=example,dc=com"
  ]
}

$  curl \
 --header "X-OpenIDM-Username: openidm-admin" \
 --header "X-OpenIDM-Password: openidm-admin" \
 --request POST \
 "http://localhost:8080/openidm/recon?_action=recon&mapping=systemLdapGroups_managedGroup&waitForCompletion=true"

$  curl \
 --header "X-OpenIDM-Username: openidm-admin" \
 --header "X-OpenIDM-Password: openidm-admin" \
 --request GET \
 "http://localhost:8080/openidm/managed/group?_queryFilter=true"

{
   "result" : [ {
      "dn" : "cn=openidm,ou=Groups,dc=example,dc=com",
      "_id" : "837df489-35d6-48d1-81a5-23792b49838a",
      "_rev" : "1",
      "description" : [ ],
      "uniqueMember" : [ "uid=jdoe,ou=People,dc=example,dc=com" ],
      "name" : [ "openidm" ]
   }, {
      "dn" : "cn=openidm2,ou=Groups,dc=example,dc=com",
      "_id" : "7575c1c7-86cf-43bc-bf1d-5c9cfc539124",
      "_rev" : "1",
      "description" : [ ],
      "uniqueMember" : [ "uid=bjensen,ou=People,dc=example,dc=com" ],
      "name" : [ "openidm2" ]
   } ],
...
 }

$ cd /path/to/openidm
$ cp samples/misc/external.email.json samples/sample5/conf

var email = {
      //UPDATE THESE VALUES
      from : "openidm@example.com",
      to : "youremail@example.com",
      cc : "idmadmin2@example.com,idmadmin3@example.com",
      subject : "Recon stats for " + global.mappingName,
      type : "text/html"
},
template,
...

$ cd /path/to/openidm
$ ./startup.sh -p samples/historicalaccountlinking/
Executing ./startup.sh...
Using OPENIDM_HOME:   /path/to/openidm
Using PROJECT_HOME:   /path/to/openidm/samples/historicalaccountlinking/
Using OPENIDM_OPTS:   -Xmx1024m -Xms1024m
Using LOGGING_CONFIG: -Djava.util.logging.config.file=
      /path/to/openidm/samples/historicalaccountlinking//conf/logging.properties
Using boot properties at
      /path/to/openidm/samples/historicalaccountlinking/conf/boot/boot.properties
-> OpenIDM ready

$ curl \
 --header "X-OpenIDM-Username: openidm-admin" \
 --header "X-OpenIDM-Password: openidm-admin" \
 --header "Content-Type: application/json" \
 --request POST \
 --data '{
     "userName": "joe.smith",
     "givenName": "Joe",
     "sn" : "Smith",
     "password" : "Passw0rd",
     "displayName" : "Joe Smith",
     "mail" : "joe.smith@example.com",
     "_id" : "joesmith"
 }' \
 "http://localhost:8080/openidm/managed/user?_action=create"
{
  "_id": "joesmith",
  "_rev": "1",
  "userName": "joe.smith",
  "givenName": "Joe",
  "sn": "Smith",
  "displayName": "Joe Smith",
  "mail": "joe.smith@example.com",
  "accountStatus": "active",
  "effectiveRoles": [],
  "effectiveAssignments": []
}

$ curl \
 --header "X-OpenIDM-Username: openidm-admin" \
 --header "X-OpenIDM-Password: openidm-admin" \
 --request GET \
 "http://localhost:8080/openidm/system/ldap/account?_queryId=query-all-ids"
{
  "result": [
    {
      "_id": "uid=jdoe,ou=People,dc=example,dc=com",
      "dn": "uid=jdoe,ou=People,dc=example,dc=com"
    },
    {
      "_id": "uid=bjensen,ou=People,dc=example,dc=com",
      "dn": "uid=bjensen,ou=People,dc=example,dc=com"
    },
    {
      "_id": "uid=joe.smith0,ou=People,dc=example,dc=com",
      "dn": "uid=joe.smith0,ou=People,dc=example,dc=com"
    }
  ],
...
}

$ curl \
 --header "X-OpenIDM-Username: openidm-admin" \
 --header "X-OpenIDM-Password: openidm-admin" \
 --request GET \
 "http://localhost:8080/openidm/managed/user/joesmith/historicalAccounts?_queryId=query-all"
{
  "result": [
    {
      "_ref": "system/ldap/account/uid=joe.smith0,ou=People,dc=example,dc=com",
      "_refProperties": {
        "stateLastChanged": "Mon Nov 30 2015 14:45:22 GMT-0800 (PST)",
        "state": "enabled",
        "active": true,
        "linkDate": "Mon Nov 30 2015 14:45:22 GMT-0800 (PST)",
        "_id": "ff6913ce-a252-4dc9-a060-b8b56bb32bf4",
        "_rev": "1"
      }
    }
  ],
...
}

$ cd /path/to/openidm
$ more  samples/historicalaccountlinking/conf/schedule-liveSync.json
{
    "enabled" : true,
    "type" : "cron",
    "schedule" : "0/15 * * * * ?",
...

$ cd /path/to/opendj
$ bin/manage-account set-account-is-disabled \
--port 4444 \
--bindDN "cn=Directory Manager" \
--bindPassword password \
--operationValue true \
--targetDN uid=joe.smith0,ou=people,dc=example,dc=com \
--trustAll
Account Is Disabled:  true

$ curl \
 --header "X-OpenIDM-Username: openidm-admin" \
 --header "X-OpenIDM-Password: openidm-admin" \
 --request GET \
 "http://localhost:8080/openidm/managed/user/joesmith/historicalAccounts?_queryId=query-all"
{
  "result": [
    {
      "_ref": "system/ldap/account/uid=joe.smith0,ou=People,dc=example,dc=com",
      "_refProperties": {
        "stateLastChanged": "Mon Nov 30 2015 14:54:45 GMT-0800 (PST)",
        "state": "disabled",
        "active": true,
        "linkDate": "Mon Nov 30 2015 14:45:22 GMT-0800 (PST)",
        "_id": "ff6913ce-a252-4dc9-a060-b8b56bb32bf4",
        "_rev": "2"
      }
    }
  ],
...
}

$ curl \
 --header "X-OpenIDM-Username: openidm-admin" \
 --header "X-OpenIDM-Password: openidm-admin" \
 --header "Content-Type: application/json" \
 --request PATCH \
 --data '[
      { "operation" : "replace",
        "field" : "accountStatus",
        "value" : "inactive" }
 ]' \
 "http://localhost:8080/openidm/managed/user/joesmith"
{
  "_id": "joesmith",
  "_rev": "3",
  "userName": "joe.smith",
  ...
  "accountStatus": "inactive",
 ...
}

$ curl \
 --header "X-OpenIDM-Username: openidm-admin" \
 --header "X-OpenIDM-Password: openidm-admin" \
 --request GET \
 "http://localhost:8080/openidm/managed/user/joesmith/historicalAccounts?_queryId=query-all"
{
  "result": [
    {
      "_ref": "system/ldap/account/uid=joe.smith0,ou=People,dc=example,dc=com",
      "_refProperties": {
        "stateLastChanged": "Mon Nov 30 2015 14:54:45 GMT-0800 (PST)",
        "state": "disabled",
        "active": false,
        "linkDate": "Mon Nov 30 2015 14:45:22 GMT-0800 (PST)",
        "unlinkDate": "Mon Nov 30 2015 14:58:30 GMT-0800 (PST)",
        "_id": "ff6913ce-a252-4dc9-a060-b8b56bb32bf4",
        "_rev": "3"
      }
    }
  ],
...
}

$ curl \
 --header "X-OpenIDM-Username: openidm-admin" \
 --header "X-OpenIDM-Password: openidm-admin" \
 --header "Content-Type: application/json" \
 --request PATCH \
 --data '[
      { "operation" : "replace",
        "field" : "accountStatus",
        "value" : "active" }
 ]' \
 "http://localhost:8080/openidm/managed/user/joesmith"
{
  "_id": "joesmith",
  "_rev": "4",
  "userName": "joe.smith",
  ...
  "accountStatus": "active",
 ...
}

$ curl \
 --header "X-OpenIDM-Username: openidm-admin" \
 --header "X-OpenIDM-Password: openidm-admin" \
 --request GET \
 "http://localhost:8080/openidm/system/ldap/account?_queryId=query-all-ids"
{
  "result": [
    {
      "_id": "uid=jdoe,ou=People,dc=example,dc=com",
      "dn": "uid=jdoe,ou=People,dc=example,dc=com"
    },
    {
      "_id": "uid=bjensen,ou=People,dc=example,dc=com",
      "dn": "uid=bjensen,ou=People,dc=example,dc=com"
    },
    {
      "_id": "uid=joe.smith0,ou=People,dc=example,dc=com",
      "dn": "uid=joe.smith0,ou=People,dc=example,dc=com"
    },
    {
      "_id": "uid=joe.smith1,ou=People,dc=example,dc=com",
      "dn": "uid=joe.smith1,ou=People,dc=example,dc=com"
    }
  ],
...
}

$ curl \
 --header "X-OpenIDM-Username: openidm-admin" \
 --header "X-OpenIDM-Password: openidm-admin" \
 --request GET \
 "http://localhost:8080/openidm/managed/user/joesmith/historicalAccounts?_queryId=query-all"
{
  "result": [
    {
      "_ref": "system/ldap/account/uid=joe.smith0,ou=People,dc=example,dc=com",
      "_refProperties": {
        "stateLastChanged": "Mon Nov 30 2015 14:54:45 GMT-0800 (PST)",
        "state": "disabled",
        "active": false,
        "linkDate": "Mon Nov 30 2015 14:45:22 GMT-0800 (PST)",
        "unlinkDate": "Mon Nov 30 2015 14:58:30 GMT-0800 (PST)",
        "_id": "ff6913ce-a252-4dc9-a060-b8b56bb32bf4",
        "_rev": "3"
      }
    },
    {
      "_ref": "system/ldap/account/uid=joe.smith1,ou=People,dc=example,dc=com",
      "_refProperties": {
        "stateLastChanged": "Mon Nov 30 2015 15:00:00 GMT-0800 (PST)",
        "state": "enabled",
        "active": true,
        "linkDate": "Mon Nov 30 2015 15:00:00 GMT-0800 (PST)",
        "_id": "08443775-7420-4994-bf86-9b29a986bfc9",
        "_rev": "1"
      }
    }
  ],
  ...
}

$ cd /path/to/opendj
$ ./setup --cli \
--hostname localhost \
--ldapPort 1389 \
--rootUserDN "cn=Directory Manager" \
--rootUserPassword password \
--adminConnectorPort 4444 \
--baseDN dc=com \
--ldifFile /path/to/openidm/samples/multiplepasswords/data/Example.ldif \
--acceptLicense \
--no-prompt
...
Configuring Directory Server ..... Done.
Importing LDIF file /path/to/openidm/samples/multiplepasswords/data/Example.ldif ...... Done.
Starting Directory Server ...... Done.
...

$ cd /path/to/opendj
$ bin/ldapsearch \
--hostname localhost \
--port 1389 \
--bindDN "cn=directory manager" \
--bindPassword password \
--baseDN "dc=example,dc=com" \
"ou=*" \
ou
dn: ou=People,dc=example,dc=com
ou: people

dn: ou=Customers,dc=example,dc=com
ou: people
ou: Customers

$ cd /path/to/openidm
$ ./startup.sh -p samples/multiplepasswords

$ curl \
 --header "X-OpenIDM-Username: openidm-admin" \
 --header "X-OpenIDM-Password: openidm-admin" \
 --header "Content-Type: application/json" \
 --request PUT \
 --data '{
   "userName": "jdoe",
   "givenName": "John",
   "sn" : "Doe",
   "displayName" : "John Doe",
   "mail" : "john.doe@example.com",
   "password" : "Passw0rd"
 }' \
 "http://localhost:8080/openidm/managed/user/jdoe"
{
  "code": 403,
  "reason": "Forbidden",
  "message": "Policy validation failed",
  "detail": {
    "result": false,
    "failedPolicyRequirements": [
      {
        "policyRequirements": [
          {
            "policyRequirement": "AT_LEAST_X_CAPITAL_LETTERS",
            "params": {
              "numCaps": 2
            }
          }
        ],
        "property": "ldapPassword"
      },
      {
        "policyRequirements": [
          {
            "policyRequirement": "AT_LEAST_X_NUMBERS",
            "params": {
              "numNums": 2
            }
          }
        ],
        "property": "ldap2Password"
      }
    ]
  }
}

$ curl \
 --header "X-OpenIDM-Username: openidm-admin" \
 --header "X-OpenIDM-Password: openidm-admin" \
 --header "Content-Type: application/json" \
 --request PUT \
 --data '{
   "userName": "jdoe",
   "givenName": "John",
   "sn" : "Doe",
   "displayName" : "John Doe",
   "mail" : "john.doe@example.com",
   "password" : "Passw0rd",
   "ldapPassword" : "PPassw0rd",
   "ldap2Password" : "Passw00rd"
 }' \
 "http://localhost:8080/openidm/managed/user/jdoe"
{
  "_id": "jdoe",
  "_rev": "1",
  "userName": "jdoe",
  "givenName": "John",
  "sn": "Doe",
  "displayName": "John Doe",
  "mail": "john.doe@example.com",
  "ldapPassword": {
    "$crypto": {
      "value": {
        "algorithm": "SHA-256",
        "data": "CpbVZlXAEFL/LUqWyq9Bcks/tLVwJ0pHrc/smLWf8UmC/0BDtEKRo1o2IjB6mNFz"
      },
      "type": "salted-hash"
    }
  },
  "ldap2Password": {
    "$crypto": {
      "value": {
        "iv": "TbJlRF+cSFeOguclh8AZVg==",
        "data": "zQ250CXfR3QJ3cBKjpCQhQ==",
        "cipher": "AES/CBC/PKCS5Padding",
        "key": "openidm-sym-default"
      },
      "type": "x-simple-encryption"
    }
  },
...
}

$ curl \
 --header "X-OpenIDM-Username: openidm-admin" \
 --header "X-OpenIDM-Password: openidm-admin" \
 --request GET \
 "http://localhost:8080/openidm/system/ldap/account?_queryId=query-all-ids"
{
  "result" : [ {
    "_id" : "uid=jdoe,ou=People,dc=example,dc=com",
    "dn" : "uid=jdoe,ou=People,dc=example,dc=com"
  }, {
    "_id" : "uid=jdoe,ou=Customers,dc=example,dc=com",
    "dn" : "uid=jdoe,ou=Customers,dc=example,dc=com"
  } ],
...
}

$ cd /path/to/opendj
$ bin/ldapsearch \
--hostname localhost \
--port 1389 \
--bindDN uid=jdoe,ou=People,dc=example,dc=com \
--bindPassword PPassw0rd \
--baseDN dc=example,dc=com \
uid=jdoe
dn: uid=jdoe,ou=People,dc=example,dc=com
objectClass: organizationalPerson
objectClass: person
objectClass: inetOrgPerson
objectClass: top
uid: jdoe
mail: john.doe@example.com
sn: Doe
cn: John Doe
userPassword: {SSHA}ot11NT7zidSxXEDtNE+8qQjyfIE3CDbywKGYmQ==
givenName: John

dn: uid=jdoe,ou=Customers,dc=example,dc=com
objectClass: organizationalPerson
objectClass: person
objectClass: inetOrgPerson
objectClass: top
uid: jdoe
mail: john.doe@example.com
sn: Doe
cn: John Doe
givenName: John
$ bin/ldapsearch \
--hostname localhost \
--port 1389 \
--bindDN uid=jdoe,ou=Customers,dc=example,dc=com \
--bindPassword Passw00rd \
--baseDN dc=example,dc=com \
uid=jdoe
dn: uid=jdoe,ou=People,dc=example,dc=com
objectClass: organizationalPerson
objectClass: person
objectClass: inetOrgPerson
objectClass: top
uid: jdoe
mail: john.doe@example.com
sn: Doe
cn: John Doe
userPassword: {SSHA}ot11NT7zidSxXEDtNE+8qQjyfIE3CDbywKGYmQ==
givenName: John

dn: uid=jdoe,ou=Customers,dc=example,dc=com
objectClass: organizationalPerson
objectClass: person
objectClass: inetOrgPerson
objectClass: top
uid: jdoe
mail: john.doe@example.com
sn: Doe
cn: John Doe
givenName: John

$ curl \
 --header "X-OpenIDM-Username: openidm-admin" \
 --header "X-OpenIDM-Password: openidm-admin" \
 --header "Content-Type: application/json" \
 --request PATCH \
 --data '[ {
   "operation" : "replace",
   "field" : "ldapPassword",
   "value" : "TTestw0rd"
 } ]' \
 "http://localhost:8080/openidm/managed/user/jdoe"
{
  "_id": "jdoe",
  "_rev": "2",
  "userName": "jdoe",
  "givenName": "John",
  "sn": "Doe",
  "displayName": "John Doe",
   ...
  "ldapPassword": {
    "$crypto": {
      "value": {
        "algorithm": "SHA-256",
        "data": "Vc6hvmzXaSSdG9WroqOTg3PQVdixhpg9tD/uKT610Z/H5iC6vsoOpE0/R5FaiDUg"
      },
      "type": "salted-hash"
    }
  },
 ...
}

$ cd /path/to/opendj
$ bin/ldapsearch \
--hostname localhost \
--port 1389 \
--bindDN uid=jdoe,ou=People,dc=example,dc=com \
--bindPassword TTestw0rd \
--baseDN dc=example,dc=com \
uid=jdoe
dn: uid=jdoe,ou=People,dc=example,dc=com
objectClass: organizationalPerson
objectClass: person
objectClass: inetOrgPerson
objectClass: top
userPassword: {SSHA}pXV9/eZq6L30L/lGTsMV/39Dzjv/zHqIhWpLRw==
uid: jdoe
mail: john.doe@example.com
sn: Doe
givenName: John
cn: John Doe

dn: uid=jdoe,ou=Customers,dc=example,dc=com
objectClass: organizationalPerson
objectClass: person
objectClass: inetOrgPerson
objectClass: top
uid: jdoe
mail: john.doe@example.com
sn: Doe
cn: John Doe
givenName: John

$ curl \
 --header "X-OpenIDM-Username: openidm-admin" \
 --header "X-OpenIDM-Password: openidm-admin" \
 --header "Content-Type: application/json" \
 --request PATCH \
 --data '[ {
   "operation" : "replace",
   "field" : "ldapPassword",
   "value" : "TTestw0rd1"
 } ]' \
 "http://localhost:8080/openidm/managed/user/jdoe"
{
  "_id": "jdoe",
  "_rev": "3",
  "userName": "jdoe",
  "givenName": "John",
  "sn": "Doe",
  "displayName": "John Doe",
  "mail": "john.doe@example.com",
...
  "ldapPassword": {
    "$crypto": {
      "value": {
        "algorithm": "SHA-256",
        "data": "uFacwvr8JsiDwlfI7I/5M+q6jTmQT8e5BaNqxLRcVR+8JxA+/fqyOc8Wo0GhzIz6"
      },
      "type": "salted-hash"
    }
  },
}
$ curl \
 --header "X-OpenIDM-Username: openidm-admin" \
 --header "X-OpenIDM-Password: openidm-admin" \
 --header "Content-Type: application/json" \
 --request PATCH \
 --data '[ {
   "operation" : "replace",
   "field" : "ldapPassword",
   "value" : "TTestw0rd2"
 } ]' \
 "http://localhost:8080/openidm/managed/user/jdoe"
{
  "_id": "jdoe",
  "_rev": "4",
  "userName": "jdoe",
  "givenName": "John",
  "sn": "Doe",
  "displayName": "John Doe",
  ...
  "ldapPassword": {
    "$crypto": {
      "value": {
        "algorithm": "SHA-256",
        "data": "kzxz6Nc38srk28xhaBLNX1DDtVsauKnDERoXyVy/TSYtEiMWd2KitgTn7498lZs0"
      },
      "type": "salted-hash"
    }
  }
}
$ curl \
 --header "X-OpenIDM-Username: openidm-admin" \
 --header "X-OpenIDM-Password: openidm-admin" \
 --header "Content-Type: application/json" \
 --request PATCH \
 --data '[ {
   "operation" : "replace",
   "field" : "ldapPassword",
   "value" : "TTestw0rd3"
 } ]' \
 "http://localhost:8080/openidm/managed/user/jdoe"
{
  "_id": "jdoe",
  "_rev": "5",
  "userName": "jdoe",
  "givenName": "John",
  "sn": "Doe",
  "displayName": "John Doe",
 ...
  "ldapPassword": {
    "$crypto": {
      "value": {
        "algorithm": "SHA-256",
        "data": "5NEEkfSsUHFOyEHa/C6yXl9x8s3Q5yaLYJgF02Lp/hPQ8DBKmwUU0U37cqFlQLQX"
      },
      "type": "salted-hash"
    }
  }
}

$ curl \
 --header "X-OpenIDM-Username: openidm-admin" \
 --header "X-OpenIDM-Password: openidm-admin" \
 --request GET \
 "http://localhost:8080/openidm/managed/user/jdoe?_fields=fieldHistory"
{
  "_id": "jdoe",
  "_rev": "5",
  "fieldHistory": {
    ...
    "ldapPassword": [
      {
        "$crypto": {
          "value": {
            "algorithm": "SHA-256",
            "data": "k1A1udvQo2gAW/5HxFFjs+IG2p34prv36UsVP89YAVv/bALQTAUJjBhml+qrlLBx"
          },
          "type": "salted-hash"
        }
      },
      {
        "$crypto": {
          "value": {
            "algorithm": "SHA-256",
            "data": "LWHaTZYSUp6hP1RChZElfHmfFBQQV+FGtZuHJxsdA/j8sOvjyqeGxk+17IFCX/Ol"
          },
          "type": "salted-hash"
        }
      },
      {
        "$crypto": {
          "value": {
            "algorithm": "SHA-256",
            "data": "I4nR+Kkh0sO53Sy2V7SUc6Hv3eETC9d0HWopgDTBc9FqRZCV2C9ML0kXGJk8FhfV"
          },
          "type": "salted-hash"
        }
      },
      {
        "$crypto": {
          "value": {
            "algorithm": "SHA-256",
            "data": "um9iNdwU7XEVArep2X5I0wr4rRy7nacKXNuzzOc7Oa1f+lINHKwZKxaTyBwGbpX2"
          },
          "type": "salted-hash"
        }
      }
    ]
  }
}

$ curl \
 --header "X-OpenIDM-Username: openidm-admin" \
 --header "X-OpenIDM-Password: openidm-admin" \
 --header "Content-Type: application/json" \
 --request PATCH \
 --data '[ {
   "operation" : "replace",
   "field" : "ldapPassword",
   "value" : "TTestw0rd2"
 } ]' \
 "http://localhost:8080/openidm/managed/user/jdoe"
{
  "code": 403,
  "reason": "Forbidden",
  "message": "Failed policy validation",
  "detail": {
    "result": false,
    "failedPolicyRequirements": [
      {
        "policyRequirements": [
          {
            "policyRequirement": "IS_NEW"
          }
        ],
        "property": "ldapPassword"
      }
    ]
  }
}

$ curl \
 --header "X-OpenIDM-Username: openidm-admin" \
 --header "X-OpenIDM-Password: openidm-admin" \
 --header "Content-Type: application/json" \
 --request PATCH \
 --data '[ {
   "operation" : "replace",
   "field" : "ldapPassword",
   "value" : "TTestw0rd"
 } ]' \
 "http://localhost:8080/openidm/managed/user/jdoe"
{
  "_id": "jdoe",
  "_rev": "5",
  "userName": "jdoe",
  "givenName": "John",
  "sn": "Doe",
  "displayName": "John Doe",
 ...
  "ldapPassword": {
    "$crypto": {
      "value": {
        "algorithm": "SHA-256",
        "data": "5NEEkfSsUHFOyEHa/C6yXl9x8s3Q5yaLYJgF02Lp/hPQ8DBKmwUU0U37cqFlQLQX"
      },
      "type": "salted-hash"
    }
  }
}