it-team/lmn-client
3
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Better group handling with keyword 'none'.

Browse source
This commit is contained in:
Andreas B. Mundt 2020-10-26 20:53:53 +01:00
parent 7e34ab8081
commit 9264deb90d
1 changed files with 7 additions and 6 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

13
roles/ldap/templates/debian-lan.j2
View file

@ -8,7 +8,8 @@ set -eu
usage(){ usage(){
cat <<EOF cat <<EOF
Usage: Usage:
$(basename $0) adduser <uid> <password> [<group>] [<given name>] [<family name>] $(basename $0) adduser <uid> <password> <group>|none <given name> <family name>
$(basename $0) adduser <uid> <password> [<group>]
$(basename $0) deluser <uid> $(basename $0) deluser <uid>
$(basename $0) delhost <hostname> $(basename $0) delhost <hostname>
$(basename $0) ldapvi $(basename $0) ldapvi
@ -16,13 +17,13 @@ Usage:
<uid>: User ID (login name) <uid>: User ID (login name)
<password>: Password <password>: Password
<group>: If given, the user is added to this posix group (in addition to his personal group). <group>: If given and not "none", the user is added to this posix group (in addition to his
The group must already exist in the LDAP DT. personal group). The group must already exist in the LDAP DT.
<given name>, <family name>: LDAP attributes 'givenName' and 'sn'. If omitted, <uid> is used. <given name>, <family name>: LDAP attributes 'givenName' and 'sn'. If omitted, <uid> is used.
<file>: File containing lines of the form: <file>: File containing lines of the form:
adduser <uid 1> <password 1> [<group 1>] [<given name 1>] [<family name 1>] adduser <uid 1> <password 1> <group 1> <given name 1> <family name 1>
adduser <uid 2> <password 2> [<group 2>] [<given name 2>] [<family name 2>] adduser <uid 2> <password 2> <group 2> <given name 2> <family name 2>
… …
deluser <uid n> deluser <uid n>
deluser <uid n+1> deluser <uid n+1>
@ -160,7 +161,7 @@ gidNumber: ${gidNumber}
################################## ##################################
EOF EOF
if [ -n "$grp" ] ; then if [ -n "$grp" -a "$grp" != "none" ] ; then
cat <<EOF | ldapmodify -H ldapi:/// -D "$LDAPADMIN" -w "$ADPASSWD" | sed '/^$/d' cat <<EOF | ldapmodify -H ldapi:/// -D "$LDAPADMIN" -w "$ADPASSWD" | sed '/^$/d'
############## LDIF ############## ############## LDIF ##############
dn: cn=${grp},ou=groups,$BASEDN dn: cn=${grp},ou=groups,$BASEDN