Horizon » horizon-admin-tools

#!/bin/bash

#gere et corrige les collisions entre LDAP et PASSWD

# (c) Eric Seigne 2011 <eric.seigne@ryxeo.com>

#on shoote a partir de 150, quasi impossible qu'on ait de nouveau des collisions

#sinon c'est qu'on a un probleme autrement plus serieux !!!

typeset -i MINNEWUID

MINNEWUID=150

LDAPSECRET=`cat /etc/ldap.secret`

function add_line() {

  ABEUSER=$1

  ABETX=$2

  ABEUSERNAME=$3

  ABETXNAME=$4

  #echo "arg1 $1 :: $2 :: $3 :: $4 :: $0"

  if [ "${ABEUSER}" != "0" -a -n "${ABETX}" ]; then

      #grep -v ${ABETX} ${FICRES} > ${FICRES}.tmp

      #mv ${FICRES}.tmp ${FICRES}

      echo "${ABEUSERNAME} ($ABEUSER) -> ${ABETXNAME} (${ABETX})" >> ${FICRES}

  else

      if ! grep -w "${ABETX}" ${FICRES} >/dev/null; then

	  echo "Poste disponible (waiting) -> ${ABETXNAME} (${ABETX})" >> ${FICRES}

      fi

  fi

}

function next_uid() {

    uidarg=$1

    typeset -i uidcalcule

    typeset -i uidres

    typeset -i nbuid

    uidcalcule=${uidarg}+1

    nbuid=`ldapsearch -x -D "cn=admin,dc=abuledu" -w${LDAPSECRET} -b "ou=utilisateurs,dc=abuledu" "uidnumber=${uidcalcule}" | grep "^dn:" | wc -l`

    if [ "${nbuid}" == "0" ]; then

	uidres=${uidcalcule}

    else

	uidres=$(next_uid $uidcalcule)

    fi

    echo "${uidres}"

}

function next_gid() {

    gidarg=$1

    typeset -i gidcalcule

    typeset -i gidres

    typeset -i nbgid

    gidcalcule=${gidarg}+1

    nbgid=`ldapsearch -x -D "cn=admin,dc=abuledu" -w${LDAPSECRET} -b "dc=abuledu" "gidnumber=${gidcalcule}" | grep "^dn:" | wc -l`

    if [ "${nbgid}" == "0" ]; then

	gidres=${gidcalcule}

    else

	gidres=$(next_gid $gidcalcule)

    fi

    echo "${gidres}"

}

echo "======================== Groupes ==============================="

typeset -i MINNEWGID

MINNEWGID=150

for SEARCHGID in `seq 100 1000`

do

    rm -f /tmp/orig.ldiff

    NUMREP=`ldapsearch -x -D "cn=admin,dc=abuledu" -w${LDAPSECRET} -b "ou=groupes,dc=abuledu" "gidnumber=${SEARCHGID}" | grep ^dn: | wc -l`

    if [ "${NUMREP}" -gt "1" ]; then

	NEWGID=$(next_gid ${SEARCHGID})

	echo "Il y a une collision pour GID ${SEARCHGID}, on l'update en ${NEWGID}"

	echo "relancez le script pour le suivant ..."

	ldapsearch -x -D "cn=admin,dc=abuledu" -w${LDAPSECRET} -b "ou=groupes,dc=abuledu" "gidnumber=${SEARCHGID}"

	exit

	#GIDGRP=`grep ^dn /tmp/orig.ldiff`

	#rm -f /tmp/modify.ldiff

	#cat >> /tmp/modify.ldiff <<EOF

#${GIDGRP}

#changetype: modify

#replace: gidNumber

#gidNumber: $MINNEWGID

#EOF

	#ldapmodify -x -D "cn=admin,dc=abuledu" -w`cat /etc/ldap.secret` -f /tmp/modify.ldiff

	#echo -n "propagating rights update due to LDAP collision (${SEARCHGID} -> ${MINNEWGID} ... "

	#find /home          -uid ${SEARCHUID} -exec chown ${MINNEWUID} {} \;

	#echo -n "."

	#find /etc/abuledu   -uid ${SEARCHUID} -exec chown ${MINNEWUID} {} \;

	#echo -n "."

	#find /etc/bind      -uid ${SEARCHUID} -exec chown ${MINNEWUID} {} \;

	#echo -n "."

	#find /etc/dhcp3     -uid ${SEARCHUID} -exec chown ${MINNEWUID} {} \;

	#echo -n "."

	#find /etc/cups      -uid ${SEARCHUID} -exec chown ${MINNEWUID} {} \;

	#echo -n "."

	#find /var/lib/samba -uid ${SEARCHUID} -exec chown ${MINNEWUID} {} \;

	#echo -n "."

	#echo "[ok]"

	#MINNEWGID=${MINNEWGID}+1

	#update files

    else

	echo -n "."

    fi

done

exit

for SEARCHUID in `seq 150 1000`

do

    rm -f /tmp/orig.ldiff

    NUMREP=`ldapsearch -x -D "cn=admin,dc=abuledu" -w${LDAPSECRET} -b "ou=utilisateurs,dc=abuledu" "uidnumber=${SEARCHUID}" | grep "^dn:" | wc -l`

    if [ "${NUMREP}" -gt "1" ]; then

	echo "NUMREP: ${NUMREP} pour ${SEARCHUID}"

	NEWUID=$(next_uid ${SEARCHUID})

	echo "Il y a une collision pour ${SEARCHUID}, on l'update en ${NEWUID} :: "

	#ldapsearch -x -D "cn=admin,dc=abuledu" -w${LDAPSECRET} -b "ou=utilisateurs,dc=abuledu" "uidnumber=${SEARCHUID}" > /tmp/orig.ldiff

	#UIDUSER=`grep ^dn /tmp/orig.ldiff`

	#rm -f /tmp/modify.ldiff

	#cat >> /tmp/modify.ldiff <<EOF

#${UIDUSER}

#changetype: modify

#replace: uidNumber

#uidNumber: $NEWUID

#EOF

	#ldapmodify -x -D "cn=admin,dc=abuledu" -w`cat /etc/ldap.secret` -f /tmp/modify.ldiff

	#echo -n "propagating rights update due to LDAP collision (${SEARCHUID} -> ${NEWUID} ... "

	#find /home          -uid ${SEARCHUID} -exec chown ${MINNEWUID} {} \;

	#echo -n "."

	#find /etc/abuledu   -uid ${SEARCHUID} -exec chown ${MINNEWUID} {} \;

	#echo -n "."

	#find /etc/bind      -uid ${SEARCHUID} -exec chown ${MINNEWUID} {} \;

	#echo -n "."

	#find /etc/dhcp3     -uid ${SEARCHUID} -exec chown ${MINNEWUID} {} \;

	#echo -n "."

	#find /etc/cups      -uid ${SEARCHUID} -exec chown ${MINNEWUID} {} \;

	#echo -n "."

	#find /var/lib/samba -uid ${SEARCHUID} -exec chown ${MINNEWUID} {} \;

	#echo -n "."

	#echo "[ok]"

	echo "relancez le script pour le suivant ..."

	exit

	#update files

    else

	echo -n "."

   fi

done