Linux Certif

Toute la documentation sur la certification Linux LPI

ldapscripts

NAME

ldapscripts - Scripts to manage POSIX accounts in your LDAP directory.

DESCRIPTION

The ldapscripts are a set of shell (sh) scripts to manage POSIX accounts in an OpenLDAP directory. They can be used as standalone tools or within Samba's smb.conf file. Each scripts matches a specific smb.conf option, except those beginning with an underscore ("_"), which are just "useful".

REQUIREMENTS

The main requirements are the OpenLDAP client tools (ldapadd, ldapsearch, ldapdelete, ...). Other commands are called in the scripts but shoud come with your distro (sed, grep, cut, ...).

CONFIGURATION

The main configuration of the ldapscripts is usually the /etc/ldapscripts/ldapscripts.conf file (or /usr/local/etc/ldapscripts/ldapscripts.conf, depending on your system). Modify it to fit your needs before using the scripts. Each script also uses a "runtime" file, usually /etc/ldapscripts/runtime (or /usr/local/etc/ldapscripts/runtime). You don't need to modify this file.

USING AS STANDALONE TOOLS

The scripts can be used as standard command-line tools. Just call the script using correct arguments. Check the man page of the script or call it without any argument to get help.

USING WITH SAMBA

As I've already explained, each script is designed to fit one configuration option of Samba. Modify you smb.conf file to call the scripts :

 # [...]
 add machine script = /usr/local/bin/ldapaddmachine '%u' sambamachines
 add user script = /usr/local/bin/ldapadduser '%u' sambausers
 add group script = /usr/local/bin/ldapaddgroup '%g'
 add user to group script = /usr/local/bin/ldapaddusertogroup '%u' '%g'
 delete user script = /usr/local/bin/ldapdeleteuser '%u'
 delete group script = /usr/local/bin/ldapdeletegroup '%g'
 delete user from group script = /usr/local/bin/ldapdeleteuserfromgroup '%u' '%g'
 set primary group script = /usr/local/bin/ldapsetprimarygroup '%u' '%g'
 rename user script = /usr/local/bin/ldaprenameuser '%uold' '%unew'
 # [...]
 
 

 

SEE ALSO

_ldapdeletemachine(1), _ldapmodifymachine(1), _ldaprenamemachine(1), ldapadduser(1), ldapdeleteuserfromgroup(1), _ldapfinger(1), _ldapmodifyuser(1), _lsldap(1), ldapaddusertogroup(1), ldaprenameuser(1), _ldapinit(1), _ldappasswd(1), ldapaddgroup(1), ldapdeletegroup(1), ldapsetprimarygroup(1), _ldapmodifygroup(1), _ldaprenamegroup(1), ldapaddmachine(1), ldapdeleteuser(1).

AVAILABILITY

The ldapscripts are provided under the GNU General Public License v2 (see COPYING for more details). The latest version of the ldapscripts is available on : http://contribs.martymac.com