blob: 37c0c0ae2b9ae8d918db431ff63ad1efa4609ac3 (
plain) (
blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
|
#!/bin/sh
ldap_add(){
# Add a DN if it doesn't already exist. Takes ldif-formatted attributes on stdin.
# $1 = the DN
_ldap_add_dn=$1; shift
if ldapsearch -QLLL -s base -b "$_ldap_add_dn" dn > /dev/null 2>&1; then
log "${_ldap_add_dn} already exists"
else
{ printf 'dn: %s\n' "$_ldap_add_dn"; cat; } | ldapadd -Q "$@"
fi
}
ldap_modify(){
# Modify a DN. Takes ldif-formatted attributes on stdin.
# $1 = the DN
_ldap_modify_dn=$1; shift
{ printf 'dn: %s\nchangetype: modify\n' "$_ldap_modify_dn"; cat; } | ldapmodify -Q "$@"
}
ldap_delete(){
# Delete a DN.
# $1 = the DN
ldapdelete -Q "$@"
}
ldap_search(){
# Perform an LDAP search
# $1..$N = same as ldapsearch.
ldapsearch -QLLL "$@"
}
ldap_add_attribute(){
# Add a single attribute value to an object if it's not already present.
# $1 = DN
# $2 = attribute
# $3 = value
ldap_search -b "$1" -s base "(${2}=${3})" dn | grep -q '^dn:' || ldap_modify "$1" <<EOF
add: ${2}
${2}: ${3}
EOF
}
ldap_replace_attribute(){
# Replace all values for a single attribute.
# $1 = DN
# $2 = attribute
# $3..$N = values
_ldap_replattr_dn=$1; shift
_ldap_replattr_attr=$1; shift
ldap_modify "$_ldap_replattr_dn" <<EOF
replace: ${ldap_replattr_attr}
$(printf "${ldap_replattr_attr}: %s\n" "$@")
EOF
}
ldap_rdn_value(){
# Get the leftmost attribute value from a DN.
# $1 = DN
echo "$1" | sed -E 's/^[^=]+=([^,]+),.*$/\1/'
}
ldap_dn_exists(){
# Return 0 if DN exists, else 1.
# $1 = DN
ldap_search -s base -b "$1" dn > /dev/null 2>&1
}
|
