Using command-line (Linux) or LDIF, I could find many examples of creating a new group and defining its members, but no examples of this:

How to add a user to an existing group?

Let's say the person also already exists.

For instance adding user uid=fred,ou=people,dc=example,dc=com to group cn=vipb,ou=groups,dc=example,dc=com.


You add a memberUid attribute to the group. For example:

$ ldapmodify -D <admin DN> -h <ldaphost>
password: [enter password]
dn: cn=vipb,ou=groups,dc=example,dc=com
changetype: modify
add: memberUid
memberUid: fred


For the record, the LDAP schema is described in RFC 2307.

  • By the way, I recommend using a point-and-click LDAP browser to get a feel for your LDAP structure and schema. Back in the day I used JXplorer but there may be better ones these days. – Tom Shaw Jun 1 '11 at 12:30
  • 2
    Apache Directory Studio is a good alternative. – kara deniz Nov 23 '15 at 19:43

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.