Which tool is primarily used to manage LDAP directories in Linux?

The primary tool used to manage LDAP directories in Linux is ldapmodify. This utility allows administrators to modify entries in an LDAP directory, such as updating or deleting existing records and adding new attributes to them.

While ldapsearch, ldapadd, and ldappasswd are important tools in the LDAP toolkit, they serve specific purposes that complement the functions of ldapmodify.

ldapsearch is utilized to retrieve and query entries from an LDAP directory, making it ideal for searching and viewing data rather than modifying it. ldapadd is designed specifically for adding new entries to the directory, thus focusing on entry creation rather than modification. ldappasswd is used for changing passwords associated with LDAP entries, which is a specialized function separate from general directory management.

In summary, when it comes to managing (modifying) LDAP entries, ldapmodify stands out as the tool specifically designed for this purpose.