new_object

Use the new_object command to create a new Active Directory object and set the new object as the currently selected Active Directory object in memory. The new object has no field values set. The new_object command does not save the new object to Active Directory. To save the new object, you must use save_object. If you don’t save a new object, it will disappear when you select a new object or when the ADEdit session ends.

The new_object command does not check to see if the new object conforms to Active Directory’s expectations for the new object in the location you specify. Active Directory will report any errors when you try to save the object.

Zone Type

Not applicable

Syntax

new_object dn

Abbreviation

newo

Options

This command takes no options.

Arguments

This command takes the following argument:

Argument Type Description
dn DN Required. Specifies the distinguished name for the new object.

Return Value

This command returns nothing if it runs successfully.

Examples

new_object “ou=Acme,cn=Program Data,dc=acme,dc=com”

This example creates a new organizational unit Delinea in the container Program Data in the domain acme.com and stores it in memory as the currently selected Active Directory object.

Related Commands

The following commands enable you to view and select Active Directory objects:

  • get_objects performs an LDAP search of Active Directory and returns a Tcl list of the distinguished names of objects matching the specified search criteria.
  • select_object retrieves an object with its attributes from Active Directory and stores it in memory.

After you have an object stored in memory, you can use the following commands to work with that object:

  • add_object_value adds a value to a multi-valued field attribute of the currently selected Active Directory object.
  • delete_object deletes the selected Active Directory object from Active Directory and from memory.
  • delete_sub_tree deletes an Active Directory object and all of its children from Active Directory.
  • get_object_field reads a field value from the currently selected Active Directory object.
  • remove_object_value removes a value from a multi-valued field attribute of the currently selected Active Directory object.
  • save_object saves the selected Active Directory object with its current settings to Active Directory.
  • set_object_fieldsets a field value in the currently selected Active Directory object.

new_pam_app

Use the new_pam_app command to create a new PAM application right for the current zone and set the new PAM application as the currently selected PAM application in memory. The new PAM application has no field values set.

The new_pam_app does not save the new PAM application to Active Directory. To save the PAM application right, you must first set at least the “application” field using set_pam_field, then use save_pam_app. If you don’t save a new PAM application, it will disappear when you select a new PAM application or when the ADEdit session ends.

You can only use the new_pam_app to create PAM application rights if the currently selected zone is a classic4 or hierarchical zone. The command does not work in other types of zones.

Zone Type

Classic and hierarchical

Syntax

new_pam_app name

Abbreviation

newpam

Options

This command takes no options.

Arguments

This command takes the following argument:

Argument Type Description
name string Required. Specifies the name to assign to the new PAM application access right.

Return Value

This command returns nothing if it runs successfully.

Examples

new_pam_app basic

This example creates a new PAM application access right named basic in the current zone.

Before you use this command, you must have a currently selected zone stored in memory. The following commands enable you to view and select PAM application rights:

  • get_pam_apps returns a Tcl list of PAM application rights in the current zone.
  • list_pam_apps lists to stdout the PAM application rights in the currently selected zone.
  • select_pam_app retrieves a PAM application right from Active Directory and stores it in memory.

After you have a PAM application right stored in memory, you can use the following commands to work with that PAM application right:

  • delete_pam_app deletes the selected PAM application right from Active Directory and from memory.
  • get_pam_field reads a field value from the currently selected PAM application right.
  • save_pam_app saves the selected PAM application right with its current settings to Active Directory.
  • set_pam_field sets a field value in the currently selected PAM application right.