82 lines
2.3 KiB
Ruby
Executable file
82 lines
2.3 KiB
Ruby
Executable file
require "set"
|
|
require "uri"
|
|
require "ldap"
|
|
|
|
conn = nil
|
|
basedn = nil
|
|
|
|
File.readlines("/etc/openldap/ldap.conf").each do |line|
|
|
line = line.strip
|
|
next if line.empty? or line.start_with?("#")
|
|
line = line.split
|
|
if line[0] == "BASE"
|
|
basedn = line[1]
|
|
elsif line[0] == "URI"
|
|
line.shift
|
|
line.each do |uri|
|
|
uri = URI.parse(uri)
|
|
begin
|
|
if uri.scheme == "ldaps"
|
|
uri.port = 636 unless uri.port
|
|
conn = LDAP::SSLConn.new(uri.host, uri.port)
|
|
else
|
|
uri.port = 389 unless uri.port
|
|
conn = LDAP::Conn.new(uri.host, uri.port)
|
|
end
|
|
conn.bind
|
|
break
|
|
rescue LDAP::ResultError
|
|
next
|
|
end
|
|
end
|
|
end
|
|
end
|
|
|
|
groups = {}
|
|
user_pp = []
|
|
group_pp = []
|
|
|
|
filter = "objectClass=posixAccount"
|
|
attrib = %w(uid gidNumber)
|
|
conn.search(basedn, LDAP::LDAP_SCOPE_SUBTREE, filter, attrib) do |entry|
|
|
uid = entry["uid"].first
|
|
next if uid.include?("$") # skip samba machine accounts
|
|
|
|
dn = entry.get_dn
|
|
gidnumber = entry["gidNumber"].first
|
|
|
|
gids = Set.new
|
|
|
|
# find primary group
|
|
filter = "(&(objectClass=posixGroup)(gidNumber=#{gidnumber}))"
|
|
conn.search(basedn, LDAP::LDAP_SCOPE_SUBTREE, filter, ["cn"]) do |group|
|
|
gid = group["cn"].first
|
|
gids << gid
|
|
groups[gid] = Set.new unless groups.has_key?(gid)
|
|
groups[gid] << uid
|
|
end
|
|
|
|
# find supplementary groups
|
|
filter = "(&(objectClass=posixGroup)(|(uniqueMember=#{dn})(memberUid=#{uid})))"
|
|
conn.search(basedn, LDAP::LDAP_SCOPE_SUBTREE, filter, ["cn"]) do |group|
|
|
gid = group["cn"].first
|
|
gids << gid
|
|
groups[gid] = Set.new unless groups.has_key?(gid)
|
|
groups[gid] << uid
|
|
end
|
|
|
|
user_pp << "class user::user::#{uid} inherits user::virtual {\n\n"
|
|
user_pp << " realize(User::Add[\"#{uid}\"])\n"
|
|
gids.sort.each { |gid| user_pp << " realize(Group[\"#{gid}\"])\n" }
|
|
user_pp << "\n}\n\n"
|
|
end
|
|
|
|
groups.each do |gid, uids|
|
|
next if uids.length == 1 and uids.include?(gid)
|
|
group_pp << "class user::group::%s {\n\n" % gid
|
|
uids.sort.each { |uid| group_pp << " include user::user::#{uid}\n" }
|
|
group_pp << "\n}\n\n"
|
|
end
|
|
|
|
puts user_pp if ARGV.include?("-u")
|
|
puts group_pp if ARGV.include?("-g")
|