compile with -DLDAP_DEBUG for debugging
usage: ldapmodify [options]
options:
    -n		show what would be done but don't actually do it
    -v		run in verbose mode (diagnostics to standard output)
    -h host	LDAP server name or IP address
    -p port	LDAP server TCP port number
    -V n	LDAP protocol version number (2 or 3; default is 3)
    -Z		make an SSL-encrypted connection
    -P pathname	path to SSL certificate database
    -N		name of certificate to use for SSL client authentication
    -K pathname	path to key database to use for SSL client authentication
    -m pathname	path to security module database
    -W		SSL key password
    -Q [token][:certificate name]	PKCS 11
    -X pathname	FORTEZZA compromised key list (CKL)
    -I pin	card password file
    -D binddn	bind dn
    -w passwd	bind passwd (for simple authentication)
    -R		do not automatically follow referrals
    -O hop lim	maximum number of referral hops to traverse
    -M		manage references (treat them as regular entries)
    -i charset	character set for command line input (default is locale)
    -k dir	conversion routine directory (default is .)
    -y proxydn	DN used for proxy authentication
    -H		display usage information
    -c		continuous mode (do not stop on errors)
    -f file	read modifications from file instead of standard input
    -a		add entries
    -b		read values that start with / from files (for bin attrs)
    -F		force application of all changes, regardless of replica lines
    -e rejfile	save rejected entries in "rejfile"
