Re: [Fedora-directory-users] Useful script to extract LDAP based user posixGroup memberships information

[Rich Megginson]

Thanks Gary!

Tay, Gary wrote:

> Assuming you are using posixGroup objectclass and memberUid attribute
> to
> store your membership information, you may find my shell script useful
> and handy.
>
> It works on Solaris LDAP Client with "ldapaddent" and "ldaplist"
> commands, and works against FDS, SUN DS or OpenLDAP.
>
> #! /bin/sh
> #
> # get_ldap_memberUids.sh
> #
> # Gary Tay, 08-Sep-2005, written
> #
> if [ $# -le 0 ]
> then
>    echo ""
>    echo "Usage:"
>    echo "$0 [SHOW_UID_ONLY||SHOW_DN|SHOW_UIDNUMBER|SHOW__NAME"
>    echo ""
>    echo "Purpose: get a list of memberships for LDAP posixGroups"
>    echo "Examples: "
>    echo "1) $0 SHOW_UID_ONLY"
>    echo "2) $0 SHOW_DN"
>    echo "3) $0 SHOW_UIDNUMBER"
>    echo "4) $0 SHOW_NAME"
>    echo ""
>    exit
> fi
> OPTION=$1
> ldapaddent -d group | cut -d: -f1,3 >groups.txt
> for i in `cat groups.txt | cut -d: -f2 | sort -n`
> do
>    GIDN=$i; GNAME=`grep $GIDN groups.txt | cut -d: -f1`
>    echo memberUids for Group $GNAME, gidNumber=$GIDN
>    ldapaddent -d passwd | sort -n -t: +3 -4 | cut -d: -f1,3,4 >users.txt
>    cat users.txt | grep $GIDN | cut -d: -f1 >uids.txt
>    case "$OPTION" in
>       "SHOW_UID_ONLY") cat uids.txt;;
>       "SHOW_DN") for j in `cat uids.txt`
>          do
>             ldaplist passwd $j
>          done;;
>       "SHOW_UIDNUMBER") for j in `cat uids.txt`
>          do
>             UIDN=`ldaplist -l passwd $j | grep -i 'uidNumber:' | cut -d:
> -f2`
>             echo $j,$UIDN
>          done;;
>       "SHOW_NAME") for j in `cat uids.txt`
>          do
>             NAME=`ldaplist -l passwd $j | grep -i 'cn:' | cut -d: -f2`
>             echo $j,$NAME
>          done;;
>       *) echo "$1 is an invalid option."; exit 1
>    esac
>    echo ""
> done
>
> Hope this helps.
>
> Gary
>
> --
> Fedora-directory-users mailing list
> Fedora-directory-users(a)redhat.com
> https://www.redhat.com/mailman/listinfo/fedora-directory-users
>   
>