playbooks/trixie
3
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Implement posix group for all users in LDAP.

Browse source
This commit is contained in:
Andreas B. Mundt 2019-12-01 18:21:24 +01:00
parent 43cb4dcf13
commit 8c896c90e6
2 changed files with 36 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

17
roles/ldap/templates/debian-lan.j2
View file

@ -123,6 +123,14 @@ dn: cn=${id},ou=groups,$BASEDN
objectClass: posixGroup
gidNumber: ${gidNumber}
##################################
EOF
cat <<EOF | ldapmodify -H ldapi:/// -D "$LDAPADMIN" -w "$ADPASSWD" | sed '/^$/d'
############## LDIF ##############
dn: cn=ldapuser,ou=groups,$BASEDN
add: memberUid
memberUid: ${id}
##################################
EOF
if [ $KRB5 ] ; then
@ -132,6 +140,7 @@ EOF
echo "uidNumber: ${uidNumber} gidNumber: ${gidNumber}"
cp -r /etc/skel ${HOMES}/${id}
chown -R ${uidNumber}:${gidNumber} ${HOMES}/${id}
#chmod -R o= ${HOMES}/${id}
ls -nld ${HOMES}/${id}
fi
fi
@ -150,6 +159,14 @@ del-user(){
ldapdelete -v -H ldapi:/// -D "$LDAPADMIN" -w "$ADPASSWD" "uid=${id},ou=people,$BASEDN" "cn=${id},ou=groups,$BASEDN" 2>&1 \
| sed '/ldap_initialize/d'
cat <<EOF | ldapmodify -H ldapi:/// -D "$LDAPADMIN" -w "$ADPASSWD" | sed '/^$/d'
############## LDIF ##############
dn: cn=ldapuser,ou=groups,$BASEDN
delete: memberUid
memberUid: ${id}
##################################
EOF
if [ -d ${HOMES}/${id} ] ; then
KEEPDIR="${HOMES}/rm_$(date '+%Y%m%d')_${id}"
mv ${HOMES}/${id} "${KEEPDIR}"