1 | #!/usr/bin/perl -w
|
---|
2 |
|
---|
3 | # Created by P.Wieleba@iem.pw.edu.pl in 2004
|
---|
4 |
|
---|
5 | use strict;
|
---|
6 | use Getopt::Std;
|
---|
7 | use FindBin;
|
---|
8 | use FindBin qw($RealBin);
|
---|
9 | use lib "$RealBin/";
|
---|
10 | use smbldap_tools;
|
---|
11 |
|
---|
12 | # function declaration
|
---|
13 | sub exist_in_tab;
|
---|
14 |
|
---|
15 | my %Options;
|
---|
16 |
|
---|
17 | my $ok = getopts('f:r:w:h:o:s:?v', \%Options);
|
---|
18 | if ( (!$ok) || ($Options{'?'}) ) {
|
---|
19 | print "Usage: $0 [-frwhosh?] username\n";
|
---|
20 | print " -?|-h show this help message\n";
|
---|
21 | print " -f full_name\n";
|
---|
22 | print " -r room_no\n";
|
---|
23 | print " -w work_ph\n";
|
---|
24 | print " -h home_ph\n";
|
---|
25 | print " -o other\n";
|
---|
26 | print " -s shell\n";
|
---|
27 | print " -v show modified user record\n";
|
---|
28 | exit (1);
|
---|
29 | }
|
---|
30 |
|
---|
31 |
|
---|
32 | my $user;
|
---|
33 | my $pass;
|
---|
34 | if ( $< != 0 ) {
|
---|
35 | my $current_user = getpwuid($<);
|
---|
36 | if ($current_user and $ARGV[0] and $current_user ne $ARGV[0] ) {
|
---|
37 | die "Only root can change other users inormation\n";
|
---|
38 | }
|
---|
39 | } else {
|
---|
40 | if ( $ARGV[0] ) {
|
---|
41 | $user = $ARGV[0];
|
---|
42 | }
|
---|
43 | $pass = 1;
|
---|
44 | }
|
---|
45 |
|
---|
46 | if (!defined($user)) {
|
---|
47 | $user = getpwuid($<);
|
---|
48 | }
|
---|
49 |
|
---|
50 | my ($dn,$ldap_master);
|
---|
51 | # First, connecting to the directory
|
---|
52 | if ($< != 0) {
|
---|
53 | # non-root user
|
---|
54 | if (!defined($pass)) {
|
---|
55 | # prompt for password
|
---|
56 | print "UNIX password: ";
|
---|
57 | system "stty -echo" if (-t STDIN);
|
---|
58 | chomp($pass=<STDIN>);
|
---|
59 | system "stty echo" if (-t STDIN);
|
---|
60 | print "\n";
|
---|
61 |
|
---|
62 | $config{masterDN}="uid=$user,$config{usersdn}";
|
---|
63 | $config{masterPw}="$pass";
|
---|
64 | $ldap_master=connect_ldap_master();
|
---|
65 | $dn=$config{masterDN};
|
---|
66 | if (!is_user_valid($user, $dn, $pass)) {
|
---|
67 | print "Authentication failure\n";
|
---|
68 | exit (10);
|
---|
69 | }
|
---|
70 | }
|
---|
71 | } else {
|
---|
72 | # root user
|
---|
73 | $ldap_master=connect_ldap_master();
|
---|
74 | # test existence of user in LDAP
|
---|
75 | my $dn_line;
|
---|
76 | if (!defined($dn_line = get_user_dn($user))) {
|
---|
77 | print "$0: user $user doesn't exist\n";
|
---|
78 | exit (10);
|
---|
79 | }
|
---|
80 | $dn = get_dn_from_line($dn_line);
|
---|
81 | }
|
---|
82 |
|
---|
83 | my %eng = (
|
---|
84 | 'shell' => 'User Shell',
|
---|
85 | 'name' => 'Full Name',
|
---|
86 | 'office' => 'Room Number',
|
---|
87 | 'wphone' => 'Work Phone',
|
---|
88 | 'hphone' => 'Home Phone',
|
---|
89 | 'other' => 'Other'
|
---|
90 | );
|
---|
91 |
|
---|
92 | # obtain old values
|
---|
93 | my $entry = read_user_entry($user);
|
---|
94 | my $gecos = $entry->get_value('gecos');
|
---|
95 | my %old;
|
---|
96 | ( $old{'name'},
|
---|
97 | $old{'office'},
|
---|
98 | $old{'wphone'},
|
---|
99 | $old{'hphone'},
|
---|
100 | $old{'other'}
|
---|
101 | ) = split(/,/,$gecos);
|
---|
102 | $old{'shell'} = $entry->get_value('LoginShell');
|
---|
103 | # unbind from LDAP
|
---|
104 | $ldap_master->unbind();
|
---|
105 |
|
---|
106 | foreach my $key (keys %old) {
|
---|
107 | !defined($old{$key}) and $old{$key}="";
|
---|
108 | }
|
---|
109 |
|
---|
110 | # read new values
|
---|
111 | my %new;
|
---|
112 | if ($Options{'f'}) {
|
---|
113 | $new{'name'} = $Options{'f'};
|
---|
114 | }
|
---|
115 | if ($Options{'r'}) {
|
---|
116 | $new{'office'} = $Options{'r'};
|
---|
117 | }
|
---|
118 | if ($Options{'w'}) {
|
---|
119 | $new{'wphone'} = $Options{'w'};
|
---|
120 | }
|
---|
121 | if ($Options{'h'}) {
|
---|
122 | $new{'hphone'} = $Options{'h'};
|
---|
123 | }
|
---|
124 | if ($Options{'o'}) {
|
---|
125 | $new{'other'} = $Options{'o'};
|
---|
126 | }
|
---|
127 | if ($Options{'s'}) {
|
---|
128 | $new{'shell'} = $Options{'s'};
|
---|
129 | }
|
---|
130 | if ( keys(%Options) < 1 or keys(%Options) == 1 and $Options{'v'} ) {
|
---|
131 | print "Changing the user information for $user\n";
|
---|
132 | print "Enter the new value, or press ENTER for the default\n";
|
---|
133 |
|
---|
134 | print " $eng{'shell'} [$old{'shell'}]:";
|
---|
135 | $new{'shell'} = readline(*STDIN);
|
---|
136 | print " $eng{'name'} [$old{'name'}]:";
|
---|
137 | $new{'name'} = readline(*STDIN);
|
---|
138 | print " $eng{'office'} [$old{'office'}]:";
|
---|
139 | $new{'office'} = readline(*STDIN);
|
---|
140 | print " $eng{'wphone'} [$old{'wphone'}]:";
|
---|
141 | $new{'wphone'} = readline(*STDIN);
|
---|
142 | print " $eng{'hphone'} [$old{'hphone'}]:";
|
---|
143 | $new{'hphone'} = readline(*STDIN);
|
---|
144 | print " $eng{'other'} [$old{'other'}]:";
|
---|
145 | $new{'other'} = readline(*STDIN);
|
---|
146 | }
|
---|
147 |
|
---|
148 |
|
---|
149 | foreach my $key (keys %old) {
|
---|
150 | if (!$new{$key}) {
|
---|
151 | $new{$key} = $old{$key};
|
---|
152 | }
|
---|
153 | }
|
---|
154 |
|
---|
155 | # simple check of new values
|
---|
156 | foreach my $key (keys %new) {
|
---|
157 | chop($new{$key}) if ( $new{$key}=~/\n$/ );
|
---|
158 | if ($new{$key} =~ /^\s+$/ and $key ne 'shell') {
|
---|
159 | $new{$key} = "";
|
---|
160 | } elsif ($new{$key} =~ /^$/) {
|
---|
161 | $new{$key} = $old{$key};
|
---|
162 | } elsif ($key ne 'other' and $new{$key} =~ /.*,.*/) {
|
---|
163 | print "Comma cannot be used with $key.\n";
|
---|
164 | exit(6);
|
---|
165 | }
|
---|
166 | # $new{$key} eq ""
|
---|
167 | }
|
---|
168 |
|
---|
169 | # [TODO] check if shell really exists
|
---|
170 | if ( $new{'shell'} and !($new{'shell'}=~/^\/.+\/.+/)
|
---|
171 | and ($old{'shell'}=~/^\/.+\/.+/)
|
---|
172 | ) {
|
---|
173 | $new{'shell'} = $old{'shell'};
|
---|
174 | } elsif ( $new{'shell'} and !($new{'shell'}=~/^\/.+\/.+/)
|
---|
175 | or !$new{'shell'} and !$old{'shell'}
|
---|
176 | ) {
|
---|
177 | $new{'shell'} = '/bin/sh';
|
---|
178 | }
|
---|
179 |
|
---|
180 | if ( !$new{'name'} ) {
|
---|
181 | $new{'name'} = $user;
|
---|
182 | }
|
---|
183 |
|
---|
184 | # prepare gecos field
|
---|
185 | $gecos = join(',',
|
---|
186 | ( $new{'name'},
|
---|
187 | $new{'office'},
|
---|
188 | $new{'wphone'},
|
---|
189 | $new{'hphone'},
|
---|
190 | $new{'other'}
|
---|
191 | )
|
---|
192 | );
|
---|
193 |
|
---|
194 | my @tmp = split(/\s+/,$new{'name'});
|
---|
195 | my $sn = $tmp[$#tmp];
|
---|
196 | pop(@tmp);
|
---|
197 | my $givenName = join(' ',@tmp);
|
---|
198 |
|
---|
199 | $entry->replace( 'gecos' => $gecos );
|
---|
200 | $entry->replace( 'cn' => $new{'name'} );
|
---|
201 |
|
---|
202 | if ( exist_in_tab( [$entry->get_value('objectClass')],'inetOrgPerson') ) {
|
---|
203 | if ( $sn ) {
|
---|
204 | $entry->replace('sn' => $sn);
|
---|
205 | } else {
|
---|
206 | $entry->replace('sn' => $user);
|
---|
207 | }
|
---|
208 | if ( $givenName ) {
|
---|
209 | $entry->replace('givenName' => $givenName);
|
---|
210 | } else {
|
---|
211 | $entry->get_value('givenName') and $entry->delete('givenName');
|
---|
212 | }
|
---|
213 | if ( $new{'office'} ) {
|
---|
214 | $entry->replace('roomNumber' => $new{'office'});
|
---|
215 | } else {
|
---|
216 | $entry->get_value('roomNumber') and $entry->delete('roomNumber');
|
---|
217 | }
|
---|
218 | if ( $new{'wphone'} ) {
|
---|
219 | $entry->replace('telephoneNumber' => $new{'wphone'});
|
---|
220 | } else {
|
---|
221 | $entry->get_value('telephoneNumber') and $entry->delete('telephoneNumber');
|
---|
222 | }
|
---|
223 | if ( $new{'hphone'} ) {
|
---|
224 | $entry->replace('homePhone' => $new{'hphone'});
|
---|
225 | } else {
|
---|
226 | $entry->get_value('homePhone') and $entry->delete('homePhone');
|
---|
227 | }
|
---|
228 | } #end of inetOrgPerson
|
---|
229 | if ( $new{'shell'} ) {
|
---|
230 | $entry->replace('loginShell' => $new{'shell'});
|
---|
231 | } else {
|
---|
232 | $entry->get_value('loginShell') and $entry->delete('loginShell');
|
---|
233 | }
|
---|
234 |
|
---|
235 | if ($Options{'v'}) {
|
---|
236 | $entry->dump();
|
---|
237 | }
|
---|
238 | # bind to LDAP and update entry
|
---|
239 | $ldap_master = connect_ldap_master();
|
---|
240 | my $mesg = $entry->update($ldap_master);
|
---|
241 | if ($mesg->is_error()) {
|
---|
242 | print "Error: " . $mesg->error() . "\n";
|
---|
243 | } else {
|
---|
244 | print "LDAP updated\n";
|
---|
245 | }
|
---|
246 | $ldap_master and $ldap_master->unbind;
|
---|
247 |
|
---|
248 | # Check if a $text element exists in @table
|
---|
249 | # eg. exist_in_tab(\@table,$text);
|
---|
250 | sub exist_in_tab
|
---|
251 | {
|
---|
252 | my($ref_tab,$text) = @_;
|
---|
253 | my @tab = @$ref_tab;
|
---|
254 |
|
---|
255 | foreach my $elem (@tab) {
|
---|
256 | if ( lc($elem) eq lc($text) ) {
|
---|
257 | return 1;
|
---|
258 | }
|
---|
259 | }
|
---|
260 | return 0;
|
---|
261 | }
|
---|
262 |
|
---|
263 | ########################################
|
---|
264 |
|
---|
265 | =head1 NAME
|
---|
266 |
|
---|
267 | smbldap-chfn - change user real name, information and shell
|
---|
268 |
|
---|
269 | =head1 SYNOPSIS
|
---|
270 |
|
---|
271 | smbldap-chfn [-f full_name] [-r room_no] [-w work_ph] [-h home_ph]
|
---|
272 | [-o other] [-s login_shell] [-?] [-v]
|
---|
273 |
|
---|
274 | =head1 DESCRIPTION
|
---|
275 |
|
---|
276 | This command changes user gecos fields and login shell.
|
---|
277 | The normal user can change only the fields for his own account,
|
---|
278 | the super user may change the fiels for any account.
|
---|
279 |
|
---|
280 | If none of the options are selected, the command is run
|
---|
281 | in an interactive mode for the current user account. User is
|
---|
282 | asked for all fields. To accept a default value you should
|
---|
283 | just press <ENTER>, otherwise write text and press <ENTER>.
|
---|
284 |
|
---|
285 | posixAccount objectClasses has to be present in the modified
|
---|
286 | entry. If inetOrgPerson objectClass is also present additional
|
---|
287 | attributes will be changed (givenName,sn,roomNumber,telephoneNumber,
|
---|
288 | homePhone)
|
---|
289 |
|
---|
290 | -f full_name
|
---|
291 | affected attributes: 'gecos', 'cn' (and 'givenName', 'sn'
|
---|
292 | if inetOrgPerson is present)
|
---|
293 |
|
---|
294 | -r room_number
|
---|
295 | affected attributes: 'gecos' (and 'roomNumber'
|
---|
296 | if inetOrgPerson is present)
|
---|
297 |
|
---|
298 | -w work_phone
|
---|
299 | affected attributes: 'gecos' (and 'telephoneNumber'
|
---|
300 | if inetOrgPerson is present)
|
---|
301 |
|
---|
302 | -h home_phone
|
---|
303 | affected attributes: 'gecos' (and 'homePhone'
|
---|
304 | if inetOrgPerson is present)
|
---|
305 |
|
---|
306 | -o other
|
---|
307 | affected attributes: 'gecos'
|
---|
308 |
|
---|
309 | -s login_shell
|
---|
310 | affected attributes: 'loginShell'
|
---|
311 |
|
---|
312 | -? show the help message
|
---|
313 |
|
---|
314 | -v verbose - show modified user entry
|
---|
315 |
|
---|
316 | =cut
|
---|
317 |
|
---|
318 | #'
|
---|
319 |
|
---|
320 | # The End
|
---|
321 |
|
---|