File Coverage

blib/lib/PixieLdap.pm

Criterion	Covered	Total	%
statement	24	249	9.6
branch	0	120	0.0
condition	0	51	0.0
subroutine	8	24	33.3
pod	0	16	0.0
total	32	460	6.9

package PixieLdap;

use 5.010000;
use strict;
use warnings;
use Net::LDAPS;
use Net::LDAP;
use Crypt::PasswdMD5;
use YAML;

require Exporter;

our @ISA = qw(Exporter);

our %EXPORT_TAGS = ( 'all' => [ qw(viewSearch deleteMember deleteEntry addMember addGroup getMaxUID getMaxGID getInput viewBind addUser getGIDNumber changeUserPasswd
) ] );

our @EXPORT_OK = ( @{ $EXPORT_TAGS{'all'} } );

our @EXPORT = qw(viewSearch deleteMember deleteEntry addMember addGroup getMaxUID getMaxGID getInput viewBind addUser getGIDNumber changeUserPasswd
);

our $VERSION = '0.01';

my $scope = 'sub';


sub viewBind {
	my $configfile = shift;
	unless (defined $configfile) { die "No Config File Specified\n";}
	my $config = YAML::LoadFile($configfile);
	my $conn;

	if ($config->{secure} == '1'){
		$conn = Net::LDAPS->new($config->{server}, verify => 'none' ) or die "Unable to Connect: $@\n";
	}
	else {
		$conn = Net::LDAP->new($config->{server} ) or die "Unable to Connect: $@\n";
	}
	my $message = $conn->bind($config->{user}->[1]->{dn}, password => $config->{user}->[1]->{password});

	if ( $message->code){
		die 'Unable to bind: '. $message->error . "\n";
	}

	return ($conn, $config->{basedn});
}


sub rootBind {
	my $configfile = shift;
	unless (defined $configfile) { die "No Config File Specified\n";}
	my $config = YAML::LoadFile($configfile);
	my $conn;

	if ($config->{secure} == '1'){
		$conn = Net::LDAPS->new($config->{server}, verify => 'none' ) or die "Unable to Connect: $@\n";
	}
	else {
		$conn = Net::LDAP->new($config->{server}, verify => 'none' ) or die "Unable to Connect: $@\n";
	}
	my $message = $conn->bind($config->{user}->[0]->{dn}, password => $config->{user}->[0]->{password});

	if ( $message->code){
		die 'Unable to bind: '. $message->error . "\n";
	}

	return ($conn, $config->{basedn});
}


sub viewSearch {
	my $configfile = shift;
	unless (defined $configfile) { die "No Config File Specified\n";}
	my $filter = shift;
	unless (defined $filter) { die "No Filter Specified\n";}
	my $base = shift;
	unless (defined $base) { die "No Group/User Base Specified\n";}

	my ($vconn, $basedn) = viewBind($configfile);
	my $search = $vconn->search(base => $base.$basedn,
		scope => $scope,
		filter => $filter );
		die "Bad Search: " . $search->error() if $search->code();

	$vconn->unbind;
	return $search;
}


sub addMember{
	my $configfile = shift;
	unless (defined $configfile) { die "No Config File Specified\n";}
	my $group = shift;
	unless (defined $group) { die "No Group Specified\n";}
	my $uid = shift;
	unless (defined $uid) { die "No UserID Specified\n";}

	my ($rconn, $basedn) = rootBind($configfile);
	my $search = $rconn->search(base => "ou=group,".$basedn,
		scope => $scope,
		filter => "cn=".$group,
		attrs => [''],
		typesonly => 1 );
		die "Error in Search: " . $search->error() if $search->code();

	if ($search){
		my @entries = $search->entries;
		for (@entries){
			print "Adding " . $uid . " to " . $_->dn() ."\n";
			my $modify = $rconn->modify($_->dn(), add => {'memberUid'=> $uid});
			die 'Unable to modify, errorcode #' . $modify->error() if $modify->code();
		}
	}

        $rconn->unbind;
        return;
}


sub addGroup{
	my $configfile = shift;
	unless (defined $configfile) { die "No Config File Specified\n";}
	my $group = shift;
	unless (defined $group) { die "No Group Specified\n";}

	my $gidNumber = (&getMaxGID($configfile) + 1 );

	my ($rconn, $basedn) = rootBind($configfile);
	my $dn = "cn=" . $group . ",ou=group," . $basedn;

	my $add = $rconn->add(
		dn => $dn,
		attr => [	'cn'			=> $group,
					'gidNumber'		=> $gidNumber,
					'objectClass'	=> [qw( top posixGroup)]]
	);
		die 'Error in add: ' . $add->error()."\n" if $add->code();

	$rconn->unbind;

	my $answer='O';
	my $member;
	my $memberadd;
	while ( lc $answer ne 'n' ) {
		$answer = getInput("Would you like to add a user to the group Y/N? ");
		if ( lc $answer eq 'y' ) {
			$member = getInput("Enter Member UID :");
    		$memberadd = addMember($group, $member);
		}
	}

	return;
}


sub addUser {
	my $configfile = shift;
	unless (defined $configfile) { die "No Config File Specified\n";}
	my $uid = shift;
	unless (defined $uid) { die "No UserID Specified\n";}
	my $cli = shift;
	unless (defined $cli) { die "No CLI Specified, 1 eq cli, 0 eq non interactive\n";}
	my $cn = shift 							|| getAddUserInput("Enter Users First Name: ", $cli);
	my $sn = shift 							|| getAddUserInput("Enter Users Surname Name: ", $cli);
	my $shadowMax = shift 					|| getAddUserInput("Enter Max Password Valid Days [90]: ", $cli);
	my $loginShell = shift 					|| getAddUserInput("Enter Required Login Shell [/bin/bash]: ", $cli);
	my $homeDirectory = shift 				|| getAddUserInput("Enter Users Home Directory: ", $cli);
	my $group = shift 						|| getAddUserInput("Enter Users Primary Group: ", $cli);
	my $street = shift 						|| getAddUserInput("Enter Users Street: ", $cli);
	my $mail = shift 						|| getAddUserInput("Enter Users Email Address: ", $cli);
	my $o = shift	 						|| getAddUserInput("Enter Users Organisation: ", $cli);
	my $ou = shift	 						|| getAddUserInput("Enter Users Department: ", $cli);
	my $title = shift						|| getAddUserInput("Enter Users title: ", $cli);
	my $mobile = shift	 					|| getAddUserInput("Enter Users Mobile Number: ", $cli);
	my $telephoneNumber = shift 			|| getAddUserInput("Enter Users Telephone Number: ", $cli);
	my $facsimileTelephoneNumber = shift 	|| getAddUserInput("Enter Users Faxcimile Telephone Number: ", $cli);
	my $l = shift 							|| getAddUserInput("Enter Users City: ", $cli);
	my $st = shift 							|| getAddUserInput("Enter Users State: ", $cli);
	my $postalCode = shift 					|| getAddUserInput("Enter Users Post Code: ", $cli);
	my $givenName = $cn . " " . $sn;
	my $gecos = $givenName . " " . $group;

	$shadowMax = '90' if ($shadowMax eq 'Unknown');
	$loginShell = '/bin/bash' if ($loginShell eq 'Unknown');

	my ($passwd, $cryptPasswd) = genPasswd();
	my $gidNumber = getGIDNumber($configfile, $group);

	unless (defined $gidNumber){
		die	"No Such Group\n";
	}

	my $uidNumber = (&getMaxUID($configfile) + 1 );

	my ($rconn, $basedn) = rootBind($configfile);
	my $dn = "uid=" . $uid . ",ou=people," . $basedn;

	my $add = $rconn->add(
		dn => $dn,
		attr => [	'uid'						=> $uid,
					'cn'						=> $cn,
					'sn'						=> $sn,
					'shadowMax'					=> $shadowMax,
					'shadowWarning' 			=> '7',
					'shadowInactive' 			=> '3',
					'shadowLastChange'			=> today(),
					'loginShell' 				=> $loginShell,
					'userPassword'				=> $cryptPasswd,
					'uidNumber'					=> $uidNumber,
					'homeDirectory'				=> $homeDirectory,
					'street' 					=> $street,
					'gecos' 					=> $gecos,
					'mail' 						=> $mail,
					'o' 						=> $o,
					'ou'						=> $ou,
					'title' 					=> $title,
					'mobile' 					=> $mobile,
					'telephoneNumber' 			=> $telephoneNumber,
					'facsimileTelephoneNumber'	=> $facsimileTelephoneNumber,
					'givenName' 				=> $cn,
					'l' 						=> $l,
					'st' 						=> $st,
					'postalCode'				=> $postalCode,
					'gidNumber'					=> $gidNumber,
					'objectClass'				=> [qw( top  posixAccount inetOrgPerson organizationalPerson shadowAccount)]]
	);
		die 'Error in add: ' . $add->error()."\n" if $add->code();

	$rconn->unbind;
	return ($givenName, $passwd);
}


sub deleteMember{
	my $configfile = shift;
	unless (defined $configfile) { die "No Config File Specified\n";}
	my $filter = shift;
	unless (defined $filter) { die "No Filter Specified\n";}
	my $base = shift;
	unless (defined $base) { die "No base Group or People Specified\n";}
	my $uid = shift;
	unless (defined $uid) { die "No UserID Specified\n";}

	my ($rconn, $basedn) = rootBind($configfile);
	my $search = $rconn->search(base => $base.$basedn,
		scope => $scope,
		filter => $filter,
		attrs => [''],
		typesonly => 1 );
		die "Error in Search: " . $search->error() if $search->code();

	if ($search){
		my @entries = $search->entries;
		for (@entries){
			print "Removing " . $uid . " from " . $_->dn() ."\n";
			my $delete = $rconn->modify($_->dn(), delete => {'memberUid'=> $uid});
			die 'Unable to modify, errorcode #' . $delete->error() if $delete->code();
		}
	}

        $rconn->unbind;
        return;
}


sub deleteEntry{
	my $configfile = shift;
	unless (defined $configfile) { die "No Config File Specified\n";}
	my $filter = shift;
	unless (defined $filter) { die "No Filter Specified\n";}
	my $base = shift;
	unless (defined $base) { die "No base Group or People Specified\n";}

	my ($rconn, $basedn) = rootBind($configfile);
	my $dn=$filter.",".$base.$basedn;
	print "Deleting ".$dn."\n";
	my $delete = $rconn->delete($dn);
		die 'Error in delete: ' . $delete->error() . "\n" if $delete->code();

	$rconn->unbind;
	return;
}


sub changeUserPasswd{
	my $configfile = shift;
	unless (defined $configfile) { die "No Config File Specified\n";}
	my $uid = shift;
	unless (defined $uid) { die "No UserID Specified\n";}

	my ($passwd, $cryptPasswd) = genPasswd();

	my ($rconn, $basedn) = rootBind($configfile);
	my $dn = "uid=" . $uid . ",ou=people," . $basedn;

	my $modify = $rconn->modify(
		dn => $dn,
		replace => [	'shadowLastChange'			=> today(),
						'userPassword'				=> $cryptPasswd,]
	);
		die 'Error in Password Change: ' . $modify->error()."\n" if $modify->code();

	$rconn->unbind;
	return $passwd;
}


sub getMaxUID {
	my $configfile = shift;
	unless (defined $configfile) { die "No Config File Specified\n";}

	my ($vconn, $basedn) = viewBind($configfile);
	my $uids = $vconn->search(base => "ou=people,".$basedn,
		scope => $scope,
		filter => "uidNumber=*",
		attrs  => [ 'uidNumber' ]
        );
		die "Bad Search: " . $uids->error() if $uids->code();

	return unless $uids->count;

	my ($highest) = sort {$b <=> $a} grep $_ ne 65534, map $_->get_value('uidNumber'), $uids->all_entries;
	die "Couldn't find new id" unless ($highest);

	return $highest;
}


sub getMaxGID {
	my $configfile = shift;
	unless (defined $configfile) { die "No Config File Specified\n";}

	my ($vconn, $basedn) = viewBind($configfile);
	my $gids = $vconn->search(base => "ou=group,".$basedn,
		scope => $scope,
		filter => "gidNumber=*",
		attrs  => [ 'gidNumber' ]
        );
		die "Bad Search: " . $gids->error() if $gids->code();

	return unless $gids->count;

	my ($highest) = sort {$b <=> $a} grep $_ ne 65534, map $_->get_value('gidNumber'), $gids->all_entries;
	die "Couldn't find new id" unless ($highest);

	return $highest;
}


sub getGIDNumber{
	my $configfile = shift;
	unless (defined $configfile) { die "No Config File Specified\n";}
	my $group = shift;
	unless (defined $group) { die "No Group Specified\n";}

	my $search = viewSearch( $configfile, "cn=".$group, 'ou=group,' );
	my $entry;
	return ($entry->get_value('gidNumber')) if defined ($entry = $search->entry('0'));

	return;
}


sub getInput {
	my $question = shift;
	print $question;
	my $answer = ;
	chomp ($answer);
	return $answer;
}


sub getAddUserInput {
	my $question = shift;
	unless (defined $question) { die "No Question Specified\n";}
	my $cli = shift;
	unless (defined $cli) { die "No CLI Specified, 1 eq cli, 0 eq non interactive\n";}
	return 'Unknown' if ($cli != '1' );
	my $answer = getInput($question);
	$answer = 'Unknown' if (!$answer);
	return $answer;
}


sub today {
	my $sdt = time();
	return int($sdt / (60 * 60 * 24));
}


sub genPasswd {
	no strict "subs";
	my $passwd = join '',map{((A..Z),(0..9))[int(rand(36))]}(0..7);
    my $salt = join '', (qw#. /#,(0..9),('A'..'Z'),('a'..'z'))[map rand(64), (1..8)];
    my $cryptPasswd = "{crypt}".unix_md5_crypt($passwd, $salt);
	return ($passwd, $cryptPasswd);
}

# Preloaded methods go here.

1;
__END__