Re:command line (Score 1)

One word: Net::LDAP. If you know a little bit of perl, this can be of huge help. It's well documented, has a pretty complete implementation of the ldap v3 specs, and works well with any vendor soft. Once you have a couple of working scripts, you can whoop your own tools in a matter of minutes, and coupled with cgi, you're halfway towards your own user admin gui, or a white pages application. I use it all the time at work, and it's been a lifesaver. (especially since the Netscape/iPlanet/whatever gui isn't the most user friendly...