dataset/seed/openldap/templates/users_mod.ldif

70 lines
2 KiB
Text
Raw Normal View History

2022-07-07 09:37:49 +02:00
%set groups = {}
2022-03-15 12:12:09 +01:00
# Remote
2022-07-07 09:37:49 +02:00
%set %%acc = []
%for %%idx in %%range(3)
%set %%name = 'remote_test' + %%str(%%idx)
%%acc.append(('cn=' + %%name + ',' + %%ldapclient_base_dn, %%get_password(server_name=%%domain_name_eth0, username=%%name, description="remote account", type="cleartext", hide=%%hide_secret, temporary=True)))%slurp
%end for
2022-03-15 12:12:09 +01:00
%for %%remote in %%accounts.remotes
%set %%name = %%normalize_family(%%remote)
2022-07-07 09:37:49 +02:00
%%acc.append((%%accounts['remote_' + %%name]['dn_' + %%name], %%accounts['remote_' + %%name]['password_' + %%name]))%slurp
%end for
%for %%dn, %%password in %%acc
dn: %%dn
2022-03-15 12:12:09 +01:00
changetype: modify
replace: userPassword
2022-07-07 09:37:49 +02:00
userPassword:: %%ssha_encode(%%password)
2022-03-15 12:12:09 +01:00
%end for
2022-05-23 08:54:15 +02:00
# Users
2022-06-26 19:33:44 +02:00
%set %%users = %%ldap_user_dn
2022-05-23 08:54:15 +02:00
%for %%user in %%accounts.users.ldap_user_mail
2022-07-07 09:37:49 +02:00
%set %%userdn = 'cn=' + %%user + ',' + %%users
%%groups.setdefault('users', []).append(%%userdn)%slurp
dn: %%userdn
2022-05-23 08:54:15 +02:00
changetype: modify
#add: objectClass
#objectClass: inetLocalMailRecipient
#-
replace: mailLocalAddress
mailLocalAddress: %%user
%if %%user.ldap_user_aliases
%for %%alias in %%user.ldap_user_aliases
mailLocalAddress: %%alias
%end for
%end if
%end for
# Families
%for %%family in %%accounts.families
2022-06-24 19:00:16 +02:00
%set %%families = %%calc_ldapclient_base_dn(%%ldapclient_base_dn, %%family)
2022-05-23 08:54:15 +02:00
%for %%user in %%accounts['family_' + %%family]['users_' + %%family]['ldap_user_mail_' + %%family]
2022-07-07 09:37:49 +02:00
%set %%userdn = 'cn=' + %%user + ',' + %%families
%%groups.setdefault(%%family, []).append(%%userdn)%slurp
dn: %%userdn
2022-05-23 08:54:15 +02:00
changetype: modify
#add: objectClass
#objectClass: inetLocalMailRecipient
#-
replace: mailLocalAddress
mailLocalAddress: %%user
%if %%user['ldap_user_aliases_' + %%family]
%for %%alias in %%user['ldap_user_aliases_' + %%family]
mailLocalAddress: %%alias
%end for
%end if
%end for
%end for
2022-07-07 09:37:49 +02:00
# Groups
%set %%groupdn = %%ldap_group_dn
%for %%group, %%members in %%groups.items()
dn: cn=%%group,%%groupdn
changetype: modify
replace: member
%for %%member in %%members
member: %%member
%end for
%end for