NAME

ldapops.pl - perform operations on an LDAP directory from the command line

SYNOPISIS

Perform operations on the OSS ldap directory

This code uses the module for OSS directory actions, "OSS::LDAPops." Please see OSS::LDAPops for more details.

This program will return nothing on sucess and will die with an error message to STDERR on fail.

All operations required to administer the directory are avaliable via this program apart from changing objects outside of the user and group space. These must be altered manuaelly.

This code does not have to run on the LDAP server as it is network enabled and can be used over the network from a suitable location, ACL permitting of course!

CONFIG

A configuration file is required in /etc/ldapops.conf or ~/.ldapopsrc. An example is below:

$GLOBAL::config =
{
	LDAPHOST	=>	'ldap01.mydomain.net',
	BINDDN		=>	'uid=webportal, ou=writeaccess, dc=auth, dc=mydomain,dc=net',
	BASEDN		=> 	'dc=auth,dc=mydomain,dc=net',
	NISDOMAIN	=>	'auth.mydomain.net',
	PASSWORD	=>	'xyzzy',
};

#These config options are used within this script
$GLOBAL::localconfig =
{
	SHADOWMAX	=>	90,
	SHADOWMIN	=>	10,
	SHADOWWARNING	=>	10,
	SHELL		=>	'/bin/bash',
	#Trailing '/' please!
	HOMEPREFIX	=>	'/home/',
	GID		=>	300
};

#This 1 is required!
1;

This example file is also included in the source distribution.

USAGE

ldapops.pl -su <string>                       | search user
ldapops.pl -sg <string>                       | search netgroup
ldapops.pl -sx <string>                       | search unix/posix group
ldapops.pl -ah <hostname>                     | add host
ldapops.pl -ahg <group>                       | add hostgroup
ldapops.pl -aug <user>                        | add usergroup
ldapops.pl -axg <group> <gid>                 |add unix/posix group
ldapops.pl -auug <userid> <group>             | add user to user group
ldapops.pl -duug <userid> <group>             | delete user from user group
ldapops.l -auh <userid> <host>               | add user to host
ldapops.pl -duh <userid> <host>               | delete user from host
ldapops.pl -ahhg <host> <group>               | add host to host group
ldapops.pl -dhhg <host> <group>               | delete host from host group
ldapops.pl -augug <addgroup> <togroup>        | add user group to user group
ldapops.pl -dugug <delgroup> <fromgroup>      | delete user group from user group
ldapops.pl -ahghg <addgroup> <togroup>        | add host group to host group
ldapops.pl -dhghg <delgroup> <fromgroup>      | delete host group from host group
ldapops.pl -aung <userid> <unix group>        | add user to unix group
ldapops.pl -dung <userid> <unix group>        | del user from unix group
ldapops.pl -au                                | add user
ldapops.pl -up <userid> <password>            | update password for user
ldapops.pl -upr <userid> <password>           | update password for user and force reset on next login
ldapops.pl -upo <userid> <password> <ou>      | update password for user in non-standard ou
ldapops.pl -b <csv file>                      | batch add users from CSV file (see batchadd.csv for format)
ldapops.pl -d '<dn>'                          | delete dn (note the quotes)

Note: the wildcard '*' can be used, but must be escaped as \*