93 lines
3.5 KiB
Go
93 lines
3.5 KiB
Go
package user
|
|
|
|
import (
|
|
"errors"
|
|
"fmt"
|
|
"log"
|
|
"strconv"
|
|
|
|
"github.com/spf13/cobra"
|
|
"github.com/spf13/viper"
|
|
ldap "gopkg.in/ldap.v2"
|
|
|
|
"git.metaunix.net/metaunix.net/muldap/lib/util"
|
|
)
|
|
|
|
func init() {
|
|
// define user add subcommand flags
|
|
userAddCmd.Flags().StringP("base_ou", "o", "", "LDAP OU to create the new user entry under")
|
|
userAddCmd.Flags().StringP("uid_attribute", "a", "uid", "LDAP DN attribute for users")
|
|
userAddCmd.Flags().StringP("home_directory", "d", "/home/%s", "User's home directory")
|
|
userAddCmd.Flags().StringVarP(&flagUserUsername, "username", "u", "", "Username for a new user")
|
|
userAddCmd.Flags().StringVarP(&flagUserEmail, "email", "e", "", "Email address for a new user")
|
|
userAddCmd.Flags().StringVarP(&flagUserFirstName, "first_name", "f", "", "First name of a new user")
|
|
userAddCmd.Flags().StringVarP(&flagUserLastName, "last_name", "l", "", "Last name of a new user")
|
|
userAddCmd.Flags().IntVarP(&flagUserIdNumber, "id_number", "i", -1, "ID Number for a new user")
|
|
// bind config file values to user add flags
|
|
viper.BindPFlag("user.base_ou", userAddCmd.Flags().Lookup("base_ou"))
|
|
viper.BindPFlag("user.uid_attr", userAddCmd.Flags().Lookup("uid_attribute"))
|
|
viper.BindPFlag("user.home_directory", userAddCmd.Flags().Lookup("home_directory"))
|
|
}
|
|
|
|
// define user add subcommand
|
|
var userAddCmd = &cobra.Command{
|
|
Use: "add",
|
|
Short: "Add an LDAP user to the directory",
|
|
Long: `Create and add an LDAP user resource to your directory.`,
|
|
Run: func(cmd *cobra.Command, args []string) {
|
|
// chck if a user id was provided
|
|
if flagUserUsername == "" {
|
|
uidErr := errors.New("You must supply a user ID")
|
|
log.Fatal(uidErr)
|
|
}
|
|
|
|
// check if the provided user id is valid
|
|
if util.ContainsString(viper.GetStringSlice("user.uid_reserved"), flagUserUsername) {
|
|
uidErr := errors.New("The user ID name that you provided is in the reserved list")
|
|
log.Fatal(uidErr)
|
|
}
|
|
|
|
// create new LDAP connection
|
|
l, err := ldap.Dial("tcp", fmt.Sprintf("%s:%d", viper.GetString("host"), viper.GetInt("port")))
|
|
if err != nil {
|
|
log.Fatal(err)
|
|
}
|
|
defer l.Close()
|
|
|
|
// bind as the admin user
|
|
err = l.Bind(viper.GetString("bind_dn"), viper.GetString("bind_pw"))
|
|
if err != nil {
|
|
log.Fatal(err)
|
|
}
|
|
|
|
// set up user attributes
|
|
userDn := fmt.Sprintf("%s=%s,%s", viper.GetString("user.uid_attr"), flagUserUsername, viper.GetString("user.base_ou"))
|
|
userDisplayName := fmt.Sprintf("%s %s", flagUserFirstName, flagUserLastName)
|
|
userHome := fmt.Sprintf(viper.GetString("user.home_directory"), flagUserUsername)
|
|
|
|
// create a new add request object
|
|
addRequest := ldap.NewAddRequest(userDn)
|
|
// add user attributes to the request
|
|
addRequest.Attribute(viper.GetString("user.uid_attr"), []string{flagUserUsername})
|
|
addRequest.Attribute("objectClass", viper.GetStringSlice("user.object_class"))
|
|
addRequest.Attribute("mail", []string{flagUserEmail})
|
|
addRequest.Attribute("givenName", []string{flagUserFirstName})
|
|
addRequest.Attribute("sn", []string{flagUserLastName})
|
|
addRequest.Attribute("cn", []string{flagUserFirstName})
|
|
addRequest.Attribute("displayName", []string{userDisplayName})
|
|
addRequest.Attribute("uidNumber", []string{strconv.Itoa(flagUserIdNumber)})
|
|
addRequest.Attribute("gidNumber", []string{strconv.Itoa(flagUserIdNumber)})
|
|
addRequest.Attribute("homeDirectory", []string{userHome})
|
|
// loop through extra attributes
|
|
for key, value := range viper.GetStringMapString("user.extra_attributes") {
|
|
addRequest.Attribute(key, []string{value})
|
|
}
|
|
|
|
// perform the add operation
|
|
err = l.Add(addRequest)
|
|
if err != nil {
|
|
log.Fatal(err)
|
|
}
|
|
},
|
|
}
|