133 lines
3.8 KiB
Perl
Executable File
133 lines
3.8 KiB
Perl
Executable File
#!/usr/bin/perl -w
|
|
|
|
#----------------------------------------------------------------------
|
|
# copyright (C) 1999-2005 Mitel Networks Corporation
|
|
#
|
|
# This program is free software; you can redistribute it and/or modify
|
|
# it under the terms of the GNU General Public License as published by
|
|
# the Free Software Foundation; either version 2 of the License, or
|
|
# (at your option) any later version.
|
|
#
|
|
# This program is distributed in the hope that it will be useful,
|
|
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
# GNU General Public License for more details.
|
|
#
|
|
# You should have received a copy of the GNU General Public License
|
|
# along with this program; if not, write to the Free Software
|
|
# Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
|
|
#
|
|
#----------------------------------------------------------------------
|
|
|
|
package esmith;
|
|
|
|
use strict;
|
|
use Errno;
|
|
use esmith::ConfigDB;
|
|
use esmith::util;
|
|
use Net::LDAP;
|
|
|
|
my $db = esmith::ConfigDB->open_ro or die "Could not open config db";
|
|
|
|
exit(0) if ($db->get('ldap')->prop('Authentication') || 'disabled') eq 'enabled';
|
|
|
|
unless ($db->get('ldap')->prop('status') eq "enabled" )
|
|
{
|
|
warn "Not running action script $0, LDAP service not enabled!\n";
|
|
exit(0);
|
|
}
|
|
|
|
my $event = $ARGV [0];
|
|
my $name = $ARGV [1];
|
|
|
|
die "Username argument missing." unless defined ($name);
|
|
|
|
#------------------------------------------------------------
|
|
# Delete user from LDAP directory. First read LDAP password
|
|
#------------------------------------------------------------
|
|
my $pw = esmith::util::LdapPassword();
|
|
my $base = esmith::util::ldapBase ($db->get('DomainName')->value);
|
|
|
|
#------------------------------------------------------------
|
|
# Delete LDAP entry.
|
|
#------------------------------------------------------------
|
|
my $ldap = Net::LDAP->new('localhost')
|
|
or die "$@";
|
|
|
|
$ldap->bind(
|
|
dn => "cn=root,$base",
|
|
password => $pw
|
|
);
|
|
|
|
my $mesg;
|
|
|
|
# Delete any user object with this name
|
|
$mesg = $ldap->search( base=> "uid=$name,ou=Users,$base", filter => '(ObjectClass=*)', scope => 'base' );
|
|
if ($mesg->code && $mesg->code != 32)
|
|
{
|
|
warn "Failed ldap search uid=$name,ou=Users,$base: ", $mesg->error;
|
|
}
|
|
else
|
|
{
|
|
$ldap->delete($mesg->entry(0));
|
|
}
|
|
|
|
# Delete any computer object with this name
|
|
$mesg = $ldap->search( base=> "uid=$name,ou=Computers,$base", filter => '(ObjectClass=*)', scope => 'base' );
|
|
if ($mesg->code && $mesg->code != 32)
|
|
{
|
|
warn "Failed ldap search uid=$name,ou=Computers,$base: ", $mesg->error;
|
|
}
|
|
else
|
|
{
|
|
$ldap->delete($mesg->entry(0));
|
|
}
|
|
|
|
# Delete any (old) user/computer object with this name
|
|
$mesg = $ldap->search( base=> "uid=$name,$base", filter => '(ObjectClass=*)', scope => 'base' );
|
|
if ($mesg->code && $mesg->code != 32)
|
|
{
|
|
warn "Failed ldap search uid=$name,$base: ", $mesg->error;
|
|
}
|
|
else
|
|
{
|
|
$ldap->delete($mesg->entry(0));
|
|
}
|
|
|
|
# Delete any group object with this name
|
|
$mesg = $ldap->search( base=> "cn=$name,ou=Groups,$base", filter => '(ObjectClass=*)', scope => 'base' );
|
|
if ($mesg->code && $mesg->code != 32)
|
|
{
|
|
warn "Failed ldap search cn=$name,ou=Groups,$base: ", $mesg->error;
|
|
}
|
|
else
|
|
{
|
|
$ldap->delete($mesg->entry(0));
|
|
}
|
|
|
|
# Delete any (old) group object with this name
|
|
$mesg = $ldap->search( base=> "cn=$name,$base", filter => '(ObjectClass=*)', scope => 'base' );
|
|
if ($mesg->code && $mesg->code != 32)
|
|
{
|
|
warn "Failed ldap search cn=$name,$base: ", $mesg->error;
|
|
}
|
|
else
|
|
{
|
|
$ldap->delete($mesg->entry(0));
|
|
}
|
|
|
|
# Remove group membership for the account we are deleting
|
|
$mesg = $ldap->search( base=> "ou=Groups,$base", filter => "(memberUid=$name)", scope => 'one' );
|
|
if ($mesg->code && $mesg->code != 32)
|
|
{
|
|
warn "Failed ldap search memberUid=$name,ou=Groups,$base: ", $mesg->error;
|
|
}
|
|
else
|
|
{
|
|
$ldap->delete($_, 'memberUid' => [ $name ] ) foreach $mesg->entries();
|
|
}
|
|
|
|
$ldap->unbind;
|
|
|
|
exit (0);
|