path: root/ldap_wizard/Ldap.pm

#!/usr/bin/perl
# version 0.1
# GPL like
# aginies@mandrakesoft.com

package MDK::Wizard::Ldap;
use lib qw(/usr/lib/libDrakX);
use ugtk2 qw(:create);
use strict;
use ldapdef;
use common;
use standalone;
use MDK::Wizard::Varspaceval;
use MDK::Wizard::Wizcommon;
use Expect;
require Net::LDAP;
use Net::LDAP::Util qw(ldap_error_text);



#unless ($> == 0) {
#  die "You are not root Exiting\n";
#}

my $o = {
         name => N("Configuration OpenLDAP Server "),
         var => {
                 defou => 'ou=Users',
                 srv => 'localhost',
                 suffix => '',
                 rootdn => '',
                 rootpass => '',
                 rootpass2 => '',
                 cn => '',
                 sn => '',
                 uid => '',
                 uidpass => '',
                 lshell => '/bin/bash',
                 home => '/home/',
                 uidnb => '1004',
                 gidnb => '1004',
                 container => 'container',
                 objectclass => 'top,account,posixaccount',
                 shadowmax => '99999',
                 shadowmin => '-1',
                 plop => '',
                 tmp => '',
                 nom => '',
                 prenom => '',
                },
        };



my $ldap_suffix=join(',dc=', split(/\./, chomp_(`hostname -f`)));
$ldap_suffix =~ s/[^,]*,//;
my $conf_file = "/etc/sysconfig/ldapconf";
my $LDAPCONF = "/etc/openldap/slapd.conf";
#my $rootdn_cn = "Admin";
##### Read conf file is exist

my $hostname = `hostname`;
$o->{var}{srv} = $hostname;

if (-f $conf_file) {
  my %conf = getVarsFromSh($conf_file);
  $o->{var}{suffix} = $conf{suffix};
  $o->{var}{rootdn} = $conf{rootdn};
  $o->{var}{srv} = $conf{srv};
  $o->{var}{defou} = $conf{users};
} else {
  my $hostname = chomp_(`hostname`);
  $o->{var}{srv} = $hostname;
  $o->{var}{suffix} = $ldap_suffix;
}

my %level = (
             1 => N("Configure OpenLDAP server"),
             2 => N("Add user in OpenLDAP server"),
            );

$o->{pages} = {
               welcome => {
                           name => N("OpenLDAP configuration wizard") . "\n\n" . N("Setup a OpenLDAP server."),
                           no_back => 1,
                           pre => sub { 
                               $o->{var}{wiz_level} ||= 1;
                           },
                           post => sub {
                               if ($o->{var}{wiz_level} == 2) {
                                   ! -f $conf_file and $::in->ask_warn(N("Error"), N("You must setup a OpenLDAP server first.")) and return 'set_srv';
				   return 'add_userposix';
                               }

			 if ($o->{var}{wiz_level} == 1) {
                                   ! -f $conf_file and $::in->ask_yesorno(N("Information "), N("Would you like save an existing OpenLDAP configuration ?")) and return 'sav_old_conf';
                                   return 'set_srv';
                               }
                           },
			   
                           data => [
                                    { label => N("Your choice:") . "\n\n", val => \$o->{var}{wiz_level}, type => 'list', list => [ keys %level ], format => sub { $level{$_[0]} } },
                                   ],
                           next => 'set_srv',
                          },

		sav_old_conf => {
				 name => N("Save an existing configuration"),
                              post => \&sav_conf,
				next => 'set_srv'
				},
               add_userposix => {
                                 name => N("LDAP User Add") . "\n\n" . N("User Create in: ") . $o->{var}{defou} . ", " . $o->{var}{suffix},
				 data => [
                                          { label => N("First Name:"), val => \$o->{var}{sn}, help => N("aide p") },
                                          { label => N("Name:"), val => \$o->{var}{cn}, help => N("aide p") },
                                          { label => N("User Name:"), val => \$o->{var}{uid}, help => N("aide p") },
                                         ],
				 complete => sub {
				   if (!$o->{var}{sn}) {
				     $::in->ask_warn(N("Error"), N("You must enter a valid First Name."));
				     return 1;
				     if (!$o->{var}{cn}) {
				       $::in->ask_warn(N("Error"), N("You must enter a valid Name."));
				       return 1;
				     }
				     if (!$o->{var}{uid}) {
 				       $::in->ask_warn(N("Error"), N("You must enter a valid User Name."));
				       return 1;
				     }
				   }
				 },
                                 next => 'password'
                                },
	       password => {
			    name => N("LDAP User Password"),
			    data => [
                                     { label => N("Password:"), val => \$o->{var}{uidpass}, hidden => 1, help => N("passwords must match") },
                                     { label => N("Password (again):"), val => \$o->{var}{uidpass2}, hidden => 1, help => N("passwords must match") },
                                    ],
                            complete => sub {
			      if (!$o->{var}{uidpass}) {
				$::in->ask_warn(N("Error"), N("You must enter a password for LDAP."));
				return 1;
			      }
			      if ($o->{var}{uidpass} ne $o->{var}{uidpass2}) {
				$::in->ask_warn(N("Error"), N("The passwords do not match"));
                                    return 1;
			      }
                            },
                            next => 'summary_add_user'
                           },
               set_srv => {
                           name => N("Configuring LDAP Server"),
                           data => [
				    { label => N("LDAP Suffix:\n ex: dc=example,dc=com\n"), val => \$o->{var}{suffix}, help => N("aide p") },
				    { label => N("LDAP Administrator:\n "), val => \$o->{var}{rootdn}, help => N("aide p") },
				    { label => N("LDAP Password:"), hidden => 1, val => \$o->{var}{rootpass}, help => N("aide p") },
                                    { label => N("LDAP Password (again):"), hidden => 1, val => \$o->{var}{rootpass2}, help => N("aide p") },
                                   ],
                           complete => sub {
			     if (!$o->{var}{suffix} || $o->{var}{suffix} !~ /dc/) {
			       $::in->ask_warn(N("Error"), N("You must enter a suffix for LDAP."));
			       return 1;
				 }
			     if (!$o->{var}{rootpass}) {
			       $::in->ask_warn(N("Error"), N("You must enter a password for LDAP."));
			       return 1;
				 }
			     if ($o->{var}{rootpass} ne $o->{var}{rootpass2}) {
			       $::in->ask_warn(N("Error"), N("The passwords do not match"));
			       return 1;
			     }
			     #$o->{var}{rootdn} = "cn=".$rootdn_cn.$o->{var}{suffix},
			   },
                           next => 'summary_set_srv'
                          },
               summary_add_user => {
                                    name =>  N("Confirmation of the user to create"),
                                    data => [
                                             { label => N("Name:"), type => 'field', fixed_val => \$o->{var}{sn} },
                                             { label => N("First name:"), type => 'field', fixed_val => \$o->{var}{cn} },
                                             { label => N("User Name:"), type => 'field', fixed_val => \$o->{var}{uid} },
                                             { label => N("Create in:"), type => 'field', fixed_val => \$o->{var}{defou} }, #. \$o->{var}{suffix} },
                                            ],
                                    post => \&do_it_user_add,
                                    next => 'endadd'
                                   },
               summary_set_srv => {
                                   name =>  N("Confirmation Information for create LDAP server"),
                                   data => [
                                            { label => N("Organisation LDAP:"), type => 'field', fixed_val => \$o->{var}{suffix} },
				            { label => N("Administrator LDAP:"), type => 'field', fixed_val => \$o->{var}{rootdn} },
#				            { label => N("Arbo LDAP:"), type => 'field', fixed_val => " " },
				            { label => "", type => 'field', fixed_val => \$o->{var}{suffix} },
                                           ],
                                   post => \&do_it_setldap,
                                   next => 'end'
                                  },
               end => {
                       name => N("Congratulations"),
                       data => [ { label => N("The wizard successfully configured the LDAP.") } ],
                       no_back => 1,
                       end => 1,
                       next => 0
                      },
               endadd => {
                          name => N("Successfully added User"),
                          data => [ { label => N("The wizard successfully added an user in LDAP") } ],
                          no_back => 1,
                          end => 1,
                          next => 0,
                         },
              };

sub do_it_setldap {
  return if $::testing;
  if (!-f $LDAPCONF) {
    die "no $LDAPCONF found";
  }
  cp_af($LDAPCONF, $LDAPCONF . '.save');
  if (!-f "$LDAPCONF.example") {
    cp_af($LDAPCONF, $LDAPCONF . '.example');
  }
  cp_af($LDAPCONF . '.example', $LDAPCONF);
  # set suffix
  if (any { /^suffix/ } cat_($LDAPCONF)) {
    substInFile {
      s/suffix.*/suffix\t"$o->{var}{suffix}"/;
    } $LDAPCONF;
  } else {
    append_to_file($LDAPCONF, qq(suffix\t"$o->{var}{suffix}"));
  }

  # s/example/$dcall
  substInFile {
    s/example/$o->{var}{suffix}/g;
  } $LDAPCONF;

  # set rootdn
  if (any { /^rootdn/ } cat_($LDAPCONF)) {
    substInFile {
      s/rootdn.*/rootdn\t"$o->{var}{rootdn}"/;
    } $LDAPCONF;
  } else {
    append_to_file($LDAPCONF, qq(rootdn\t"$o->{var}{rootdn},$o->{var}{suffix}"));
  }

  # set rootpass
  my $_cryptpass = crypt($o->{var}{rootpass}, "crypt");
  if (any { /^rootpw/ } cat_($LDAPCONF)) {
    substInFile {
	    #s/rootpw.*/rootpw             $cryptpass/;
      s/rootpw.*/rootpw             $o->{var}{rootpass}/;
    } $LDAPCONF;
  } else {
	  #append_to_file($LDAPCONF, "rootpw             {CRYPT}$cryptpass");
    append_to_file($LDAPCONF, "rootpw             $o->{var}{rootpass}");
  }


    # create config file in /etc/sysconfig/ldapconf

  output($conf_file, <<EOF);
srv=$o->{var}{srv}
suffix=$o->{var}{suffix}
rootdn=$o->{var}{rootdn}
rootpass=$o->{var}{rootpass}
users=$o->{var}{defou}
EOF

  # reset premisions
  system("chown -R root.ldap /etc/openldap");
  system("service ldap restart");
  init_ldap();
}


sub init_ldap {
  my $_root_cn = (split('=', (split(/,/, $o->{var}{rootdn}))[0]))[1];
  my $ldap_dc = (split('=', (split(/,/, $o->{var}{suffix}))[0]))[1];

  $o->{var}{rootdn} =~ /cn=(\w+),/ and my $cnadmin = $1;

 print "$o->{var}{rootdn}\n";
 print "$o->{var}{rootpass}\n";
 print "$o->{var}{srv}\n";

 my $LDAP;
 open($LDAP, "| ldapadd -x -D '$o->{var}{rootdn}' -w $o->{var}{rootpass}");

 print $LDAP <<RootLdif;
dn: $o->{var}{suffix}
dc: $ldap_dc
objectClass: dcObject
objectClass: organization
o:  Company

dn: $o->{var}{rootdn}
objectClass: organizationalRole
cn: $cnadmin 

dn: ou=Hosts,$o->{var}{suffix}
ou: Hosts
description: OU Hosts
objectClass: top
objectClass: organizationalUnit

dn: ou=Users,$o->{var}{suffix}
ou: Users
description: OU Users
objectClass: top
objectClass: organizationalUnit

dn: ou=Groups,$o->{var}{suffix}
ou: Groups
description: OU Groups
objectClass: top
objectClass: organizationalUnit


RootLdif

  close($LDAP)

}

sub do_it_user_add {
  return if $::testing;
  add_user($o);
}

sub sav_conf {
  my $cmd = "slapcat -l /root/ldap-sav.ldiff";
  system($cmd) == 0 or !$::testing and err_dialog(N("Error!"), N("%s Failed", $cmd));
  system("cp /etc/openldap/slapd.conf /root/");
  system("rm -fr /var/lib/ldap/*")
}

sub new {
  my ($class) = @_;
  bless {
	 o   => $o,
	}, $class;
}

1;