Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Using command-line (Linux) or LDIF, I could find many examples of creating a new group and defining its members, but no examples of this:

How to add a user to an existing group?

Let's say the person also already exists.

For instance adding user uid=fred,ou=people,dc=example,dc=com to group cn=vipb,ou=groups,dc=example,dc=com.

share|improve this question
up vote 10 down vote accepted

You add a memberUid attribute to the group. For example:

$ ldapmodify -D <admin DN> -h <ldaphost>
password: [enter password]
dn: cn=vipb,ou=groups,dc=example,dc=com
changetype: modify
add: memberUid
memberUid: fred


For the record, the LDAP schema is described in RFC 2307.

share|improve this answer
By the way, I recommend using a point-and-click LDAP browser to get a feel for your LDAP structure and schema. Back in the day I used JXplorer but there may be better ones these days. – Tom Shaw Jun 1 '11 at 12:30
Apache Directory Studio is a good alternative. – kara deniz Nov 23 '15 at 19:43

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.