puppet - Mageia Infrastructure Configuration

diff options

Diffstat (limited to 'deployment/lists')

-rwxr-xr-x

1 files changed, 5 insertions, 3 deletions

#!/usr/bin/perl # version 1.35 # GPL like # vguardiola@mandrakesoft.com package MDK::Wizard::Ldap; use lib qw(/usr/lib/libDrakX); use ugtk2 qw(:create); use strict; use MDK::Wizard::ldapdef; use interactive; use services; use common; use standalone; use MDK::Wizard::Varspaceval; use MDK::Wizard::Wizcommon; use Expect; require Net::LDAP; use Net::LDAP::Util qw(ldap_error_text); #unless ($> == 0) { # die "You are not root Exiting\n"; #} my $wiz = new MDK::Wizard::Wizcommon; my $wiz_domain_name = $wiz->{net}->network_get("DOMAINNAME"); my $wiz_host_name = $wiz->{net}->network_get("HOSTNAME"); my $o = { name => N("Ldap wizard"), var => { defou => 'ou=People', srv => 'localhost', suffix => '', rootdn => '', rootpass => '', rootpass2 => '', cn => '', sn => '', uid => '', uidpass => '', lshell => '/bin/bash', home => '/home/', uidnb => '1004', gidnb => '1004', container => 'container', objectclass => 'top,account,posixaccount', shadowmax => '99999', shadowmin => '-1', plop => '', tmp => '', nom => '', prenom => '', }, needed_rpm => [ 'openldap-servers', 'openldap-clients', 'nss_ldap' ], defaultimage => "$ENV{__WIZ_HOME__}ldap_wizard/images/ldap.png", init => sub { test_host_domain($wiz_host_name, $wiz_domain_name); } }; my $ldap_suffix=join(',dc=', split(/\./, chomp_(`hostname -f`))); $ldap_suffix =~ s/[^,]*,//; my $conf_file = "/etc/sysconfig/ldapwiz"; my $LDAPCONF = "/etc/openldap/slapd.conf"; #my $rootdn_cn = "Admin"; ##### Read conf file is exist my $hostname = `hostname`; $o->{var}{srv} = $hostname; if (-f $conf_file) { my %conf = getVarsFromSh($conf_file); $o->{var}{suffix} = $conf{suffix}; $o->{var}{rootdn} = $conf{rootdn}; $o->{var}{srv} = $conf{srv}; $o->{var}{defou} = $conf{users}; $o->{var}{rootpass} = $conf{rootpass}; } else { my $hostname = chomp_(`hostname`); $o->{var}{srv} = $hostname; $o->{var}{suffix} = $ldap_suffix; } my %level = ( 1 => N("Show Ldap configuration"), 2 => N("Add user in Ldap server"), 3 => N("Delete Ldap configuration"), ); $o->{pages} = { welcome => { name => N("Ldap configuration wizard") . "\n\n" . N("LDAP stands for Lightweight Directory Access Protocol.") . "\n\n" . N("It is a lightweight protocol for accessing directory services, specifically X.500-based directory services."), no_back => 1, post => sub { ! -f $conf_file and 'set_srv'; }, next => 'ask_menu', }, ask_menu => { name => N("Ldap configuration wizard"), no_back => 1, pre => sub { $o->{var}{wiz_level} ||= 1; }, post => sub { if ($o->{var}{wiz_level} == 2) { ! -f $conf_file and $::in->ask_warn(N("Error"), N("You must setup an Ldap server first.")) and return 'set_srv'; return 'add_userposix'; } if ($o->{var}{wiz_level} == 1) { -f $conf_file and return 'resume'; } if ($o->{var}{wiz_level} == 3) { ! -f $conf_file and $::in->ask_warn(N("Error"), N("You must setup an Ldap server first.")) and return 'set_srv'; return 'del_conf'; } }, data => [ { label => " " }, { label => N("Your choice:") . "\n\n", val => \$o->{var}{wiz_level}, type => 'list', list => [ keys %level ], format => sub { $level{$_[0]} } }, ], next => 'set_srv', }, del_conf => { name => N("Delete configuration") . "\n\n" . N("Saving existing base in /root/ldap-sav.ldiff"), post => \&sav_conf, next => 'welcome', }, add_userposix => { name => N("LDAP Adding User") . "\n\n" , data => [ { label => " " }, { label => N("User Created in: %s, %s", $o->{var}{defou}, $o->{var}{suffix}) }, { label => " " }, { label => N("First Name:"), val => \$o->{var}{sn}, help => "aide p" }, { label => N("Name:"), val => \$o->{var}{cn}, help => "aide p" }, { label => N("User Login:"), val => \$o->{var}{uid}, help => "aide p" }, ], complete => sub { if (!$o->{var}{sn}) { $::in->ask_warn(N("Error"), N("You must enter a valid First Name.")); return 1; } if (!$o->{var}{cn}) { $::in->ask_warn(N("Error"), N("You must enter a valid Name.")); return 1; } if (!$o->{var}{uid}) { $::in->ask_warn(N("Error"), N("You must enter a valid User Name.")); return 1; } }, next => 'password', }, password => { name => N("LDAP User Password"), data => [ { label => " " }, { label => N("Password:"), val => \$o->{var}{uidpass}, hidden => 1, help => N("passwords must match") }, { label => N("Password (again):"), val => \$o->{var}{uidpass2}, hidden => 1, help => N("passwords must match") }, ], complete => sub { if (!$o->{var}{uidpass}) { $::in->ask_warn(N("Error"), N("You must enter a password for LDAP.")); $o->{var}{uidpass} = ""; return 1; } if ($o->{var}{uidpass} ne $o->{var}{uidpass2}) { $::in->ask_warn(N("Error"), N("The passwords do not match")); $o->{var}{uidpass} = ""; $o->{var}{uidpass2} = ""; return 1; } }, next => 'summary_add_user', }, set_srv => { name => N("Configuring LDAP Server") . "\n\n" . N("LDAP directory tree") . "\n" . N("The DNS naming is used for LDAP directory tree definition") . "\n" . N("Domain name: %s", $wiz_domain_name) . "\n" . ("LDAP Diretory Tree: %s", $o->{var}{suffix}) . "\n\n" . N("LDAP Administrator") . "\n" . N("Administrator is a power user with grant access on LDAP database") . "\n" . "cn=" . N("Administrator,%s", $o->{var}{suffix}) . "\n\n", data => [ { label => " " }, { label => N("LDAP directory tree:"), val => \$o->{var}{suffix}, help => "aide p" }, { label => N("LDAP Administrator:"), val => \$o->{var}{rootdn}, help => "aide p" }, { label => N("LDAP Password:"), hidden => 1, val => \$o->{var}{rootpass}, help => "aide p" }, { label => N("LDAP Password (again):"), hidden => 1, val => \$o->{var}{rootpass2}, help => "aide p" }, ], pre => sub { $o->{var}{rootdn} = "cn=" . N("Administrator,%s", $o->{var}{suffix}); my $_cryptpass = crypt($o->{var}{rootpass}, "crypt"); # $o->{var}{rootpass} = $_cryptpass; }, complete => sub { if (!$o->{var}{suffix} || $o->{var}{suffix} !~ /dc/) { $::in->ask_warn(N("Error"), N("You must enter a valid LDAP directory tree.")); return 1; } if (!$o->{var}{rootpass}) { $::in->ask_warn(N("Error"), N("You must enter a password for LDAP.")); $o->{var}{rootpass} = ""; return 1; } if ($o->{var}{rootpass} ne $o->{var}{rootpass2}) { $::in->ask_warn(N("Error"), N("The passwords do not match")); $o->{var}{rootpass} = ""; $o->{var}{rootpass2} = ""; return 1; } #$o->{var}{rootdn} = "cn=".$rootdn_cn.$o->{var}{suffix}, }, next => 'summary_set_srv', }, summary_add_user => { name => N("Confirmation of the user to create"), data => [ { label => " " }, { label => N("Name:"), type => 'field', fixed_val => \$o->{var}{sn} }, { label => N("First name:"), type => 'field', fixed_val => \$o->{var}{cn} }, { label => N("User Name:"), type => 'field', fixed_val => \$o->{var}{uid} }, { label => N("Create in:"), type => 'field', fixed_val => \$o->{var}{defou} }, #. \$o->{var}{suffix} }, ], post => \&do_it_user_add, next => $o->{var}{useraddisnogood}, }, summary_set_srv => { name => N("Confirmation Information for create an LDAP server"), data => [ { label => " " }, { label => N("LDAP directory tree:"), type => 'field', fixed_val => \$o->{var}{suffix} }, { label => N("LDAP Administrator:"), type => 'field', fixed_val => \$o->{var}{rootdn} }, { label => N("Users Container:"), type => 'field', fixed_val => \$o->{var}{defou} }, ], post => \&do_it_setldap, next => 'end', }, end => { name => N("Congratulations"), data => [ { label => " " }, { label => N("The wizard successfully configured the LDAP.") } ], no_back => 1, end => 1, next => 0, }, add_user_good => { name => N("Successfully added User"), data => [ { label => " " }, { label => "\n" , fixed_val => \$o->{var}{error_user_add} }, ], no_back => '1', next => 'ask_menu', }, add_user_nogood => { name => N("Error when adding user in Ldap database"), data => [ { label => " " }, { label => "\n" , fixed_val => \$o->{var}{error_user_add} }, ], no_back => '1', next => 'add_userposix', }, resume => { name => N("Server already configured") . "\n\n" . N("You have already configured your Ldap Server") , post => sub { my $container_ou = $o->{var}{wiz_level} . "," . $o->{var}{suffix}; }, data => [ { label => " " } , { label => N("LDAP directory tree:"), type => 'field', fixed_val => \$o->{var}{suffix} }, { label => N("LDAP Administrator:"), type => 'field', fixed_val => \$o->{var}{rootdn} }, { label => N("Users Container:"), type => 'field', fixed_val => \$o->{var}{defou} }, ], no_back => '1', next => 'ask_menu', }, }; sub do_it_setldap { return if $::testing; if (!-f $LDAPCONF) { die "no $LDAPCONF found"; } cp_af($LDAPCONF, $LDAPCONF . '.save'); if (!-f "$LDAPCONF.example") { cp_af($LDAPCONF, $LDAPCONF . '.example'); } cp_af($LDAPCONF . '.example', $LDAPCONF); # set suffix if (any { /^suffix/ } cat_($LDAPCONF)) { substInFile { s/suffix.*/suffix\t"$o->{var}{suffix}"/; } $LDAPCONF; } else { append_to_file($LDAPCONF, qq(suffix\t"$o->{var}{suffix}")); } # s/example/$dcall substInFile { s/dc=example,dc=com/$o->{var}{suffix}/g; } $LDAPCONF; # set rootdn if (any { /^rootdn/ } cat_($LDAPCONF)) { substInFile { s/rootdn.*/rootdn\t"$o->{var}{rootdn}"/; } $LDAPCONF; } else { append_to_file($LDAPCONF, qq(rootdn\t"$o->{var}{rootdn},$o->{var}{suffix}")); } # set rootpass my $_cryptpass = crypt($o->{var}{rootpass}, "crypt"); if (any { /^rootpw/ } cat_($LDAPCONF)) { substInFile { #s/rootpw.*/rootpw $cryptpass/; s/rootpw.*/rootpw $o->{var}{rootpass}/; } $LDAPCONF; } else { #append_to_file($LDAPCONF, "rootpw {CRYPT}$cryptpass"); append_to_file($LDAPCONF, "rootpw $o->{var}{rootpass}"); } # Modify /etc/ldap.conf # require authentication; authentication::update_ldap_conf( host => $o->{var}{srv}, base => $wiz_domain_name, nss_base_shadow => "ou=People,$o->{var}{suffix}", nss_base_passwd => "ou=People,$o->{var}{suffix}", nss_base_group => "ou=Group,$o->{var}{suffix}", ); # reset premisions system("chown -R root.ldap /etc/openldap"); services::restart('ldap'); sleep(4); init_ldap(); } sub init_ldap { my $_root_cn = (split('=', (split(/,/, $o->{var}{rootdn}))[0]))[1]; my $ldap_dc = (split('=', (split(/,/, $o->{var}{suffix}))[0]))[1]; $o->{var}{rootdn} =~ /cn=(\w+),/ and my $cnadmin = $1; my $LDAP; open($LDAP, "| ldapadd -x -D '$o->{var}{rootdn}' -w $o->{var}{rootpass}"); print $LDAP <<RootLdif; dn: $o->{var}{suffix} dc: $ldap_dc objectClass: dcObject objectClass: organization o: Company dn: $o->{var}{rootdn} objectClass: organizationalRole cn: $cnadmin dn: ou=Hosts,$o->{var}{suffix} ou: Hosts description: OU Hosts objectClass: top objectClass: organizationalUnit dn: ou=People,$o->{var}{suffix} ou: People description: OU People objectClass: top objectClass: organizationalUnit dn: ou=Groups,$o->{var}{suffix} ou: Groups description: OU Groups objectClass: top objectClass: organizationalUnit RootLdif close($LDAP); # create config file in /etc/sysconfig/ldapwiz output($conf_file, <<EOF); srv=$o->{var}{srv} suffix=$o->{var}{suffix} rootdn=$o->{var}{rootdn} rootpass=$o->{var}{rootpass} users=$o->{var}{defou} EOF system("chmod 700 /etc/sysconfig/ldapwiz"); } sub do_it_user_add { return if $::testing; my $uid = "10000"; while (defined(getpwuid($uid))) { $uid++; } $o->{var}{uidnb} = $uid; $o->{var}{gidnb} = $uid; ($o->{var}{code_return}, $o->{var}{error_user_add}) = add_user($o); if ($o->{var}{code_return} =~ /success/i) { $o->{var}{useraddisnogood} = "add_user_good"; } else { $o->{var}{useraddisnogood} = "add_user_nogood"; } } sub sav_conf { services::stop('ldap'); my $cmd = "slapcat -l /root/ldap-sav.ldiff"; system($cmd) == 0 or !$::testing and err_dialog(N("Error!"), N("%s Failed", $cmd)); system("cp /etc/openldap/slapd.conf /root/slapd.save"); system("rm /etc/sysconfig/ldapwiz"); system("rm -fr /var/lib/ldap/*"); } sub new { my ($class) = @_; bless { o => $o, }, $class; } 1;


context:
space:
mode: