On 10/14/12 11:23 +0200, Yoann Gini wrote:
Hello,
I’m new on this list. I actually try to configure a LDAP server to manage my identities (and use Kerberos as authentication backend). In my goal, I want to minimize information that need to be set by administrator to create entry.
Here is a basic example :
dn: uid=yoann,ou=people,dc=example,dc=com objectClass: inetOrgPerson objectClass: organizationalPerson objectClass: person objectClass: top objectClass: posixAccount cn: Yoann Gini gidNumber: 20 homeDirectory: /home/users/yoann sn: Gini uid: yoann uidNumber: 2000 givenName: Yoann loginShell: /usr/local/bin/zsh mail: yoann@example.com userPassword: {SASL}yoann@EXAMPLE.COM
As you can see, they have many redundant informations…
What I looking for is a way to fix some field for posixAccount or *,ou=people,dc=example,dc=com.
For example, userPassword should be construct with a static text, a ldap entry and a global variable… {SASL}$uid$#KRB_REALM#. Like the mail : $uid$#domain#
#!/bin/sh
username=$1 domainname=$2 firstname=$3 lastname=$4 uidnumber=$5 gidnumber=$6 uc_domainname=`echo $domainname | tr 'a-z' 'A-Z'`
cat << EOF dn: uid=$username,ou=people,dc=example,dc=com objectClass: inetOrgPerson objectClass: organizationalPerson objectClass: person objectClass: top objectClass: posixAccount cn: $firstname $lastname gidNumber: $gidnumber homeDirectory: /home/users/$username sn: $lastname uid: $username uidNumber: $uidnumber givenName: $lastname loginShell: /usr/local/bin/zsh mail: $username@$domainname userPassword: {SASL}$username@$uc_domainname EOF