summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorGerald Carter <jerry@samba.org>2003-05-14 04:37:40 +0000
committerGerald Carter <jerry@samba.org>2003-05-14 04:37:40 +0000
commitb2b381f3a472dd20e6b0df7ba0f9713ea60db972 (patch)
treee8e2751f610f71d24adf6498d9588c1301b6be1f
parent5d16254f560ba26929bc473c28b85c87317ca368 (diff)
downloadsamba-b2b381f3a472dd20e6b0df7ba0f9713ea60db972.tar.gz
samba-b2b381f3a472dd20e6b0df7ba0f9713ea60db972.tar.bz2
samba-b2b381f3a472dd20e6b0df7ba0f9713ea60db972.zip
perl script to convert from sambaAccount to sambaSamAccount; requires Net::LDAP::LDIF
(This used to be commit 9cde1aa32aed55a3d7cb28881c6acd9800b02065)
-rwxr-xr-xexamples/LDAP/convertSambaAccount105
1 files changed, 105 insertions, 0 deletions
diff --git a/examples/LDAP/convertSambaAccount b/examples/LDAP/convertSambaAccount
new file mode 100755
index 0000000000..9fccf6a8b2
--- /dev/null
+++ b/examples/LDAP/convertSambaAccount
@@ -0,0 +1,105 @@
+#!/usr/bin/perl -w
+##
+## Convert an LDIF file containing sambaAccount entries
+## to the new sambaSamAccount objectclass
+##
+## Copyright Gerald (Jerry) Carter 2003
+##
+## Usage: convertSambaAccount <Domain SID> <input ldif> <output ldif>
+##
+
+
+use strict;
+use Net::LDAP::LDIF;
+
+my ( $domain, $domsid );
+my ( $ldif, $ldif2 );
+my ( $entry, @objclasses, $obj );
+my ( $is_samba_account );
+my ( %attr_map, $key );
+
+if ( $#ARGV != 2 ) {
+ print "Usage: convertSambaAccount domain_sid input_ldif output_ldif\n";
+ exit 1;
+}
+
+%attr_map = (
+ lmPassword => 'sambaLMPassword',
+ ntPassword => 'sambaNTPassword',
+ pwdLastSet => 'sambaPwdLastSet',
+ pwdMustChange => 'sambaPwdMustChange',
+ pwdCanChange => 'sambaPwdCanChange',
+ homeDrive => 'sambaHomeDrive',
+ smbHome => 'sambaHomePath',
+ scriptPath => 'sambaLogonScript',
+ profilePath => 'sambaProfilePath',
+ kickoffTime => 'sambaKickoffTime',
+ logonTime => 'sambaLogonTime',
+ logoffTime => 'sambaLogoffTime',
+ userWorkstations => 'sambaUserWorkstations',
+ domain => 'sambaDomainName',
+ acctFlags => 'sambaAcctFlags',
+);
+
+$domsid = $ARGV[0];
+
+$ldif = Net::LDAP::LDIF->new ($ARGV[1], "r")
+ or die $!;
+$ldif2 = Net::LDAP::LDIF->new ($ARGV[2], "w")
+ or die $!;
+
+while ( !$ldif->eof ) {
+ undef ( $entry );
+ $entry = $ldif->read_entry();
+
+ ## skip entry if we find an error
+ if ( $ldif->error() ) {
+ print "Error msg: ",$ldif->error(),"\n";
+ print "Error lines:\n",$ldif->error_lines(),"\n";
+ next;
+ }
+
+ ##
+ ## check to see if we have anything to do on this
+ ## entry. If not just write it out
+ ##
+ @objclasses = $entry->get_value( "objectClass" );
+ undef ( $is_samba_account );
+ foreach $obj ( @objclasses ) {
+ if ( "$obj" eq "sambaAccount" ) {
+ $is_samba_account = 1;
+ }
+ }
+
+ if ( !defined ( $is_samba_account ) ) {
+ $ldif2->write_entry( $entry );
+ next;
+ }
+
+ ##
+ ## start editing the sambaAccount
+ ##
+
+ $entry->delete( 'objectclass' => [ 'sambaAccount' ] );
+ $entry->add( 'objectclass' => 'sambaSamAccount' );
+
+ $entry->add( 'sambaSID' => $domsid."-".$entry->get_value( "rid" ) );
+ $entry->delete( 'rid' );
+
+ if ( $entry->get_value( "primaryGroupID" ) ) {
+ $entry->add( 'primaryGroupSID' => $domsid."-".$entry->get_value( "primaryGroupID" ) );
+ $entry->delete( 'primaryGroupID' );
+ }
+
+
+ foreach $key ( keys %attr_map ) {
+ if ( $entry->get_value($key) ) {
+ $entry->add( $attr_map{$key} => $entry->get_value($key) );
+ $entry->delete( $key );
+ }
+ }
+
+ $ldif2->write_entry( $entry );
+}
+
+