Allow to enter ldap_user and ldap_passwd commands

duplicati/create.homedir.sh

@@ -19,6 +19,10 @@ export DEBUG
 # Default values for some vars
 readonly LDAP_GROUP_BASE_DEFAULT="ou=grouper,dc=univ-rennes1,dc=fr"
 readonly LDAP_SERVER_DEFAULT="ldap://ldap.univ-rennes1.fr"
+if [ -f /etc/nslcd.conf ]; then
+	readonly LDAP_PASSWD_CMD_DEFAULT=$(sed -n 's/\(^bindpw \)\(.*\)/\2/p' /etc/nslcd.conf)
+	readonly LDAP_USER_CMD_DEFAULT=$(sed -n 's/\(^binddn \)\(.*\)/\2/p' /etc/nslcd.conf)
+fi
 
 ## Colors
 readonly PURPLE='\033[1;35m'
@@ -29,7 +33,7 @@ readonly COLOR_DEBUG="${PURPLE}"
 usage() {                                                       # {{{
 
 	cat <<- EOF
-usage: $PROGNAME [-b|-d|-g|-h|-s]
+usage: $PROGNAME [-b|-d|-g|-h|-p|-s|-u]
 
 Create homedir for members of the given LDAP group.
 
@@ -37,6 +41,9 @@ EXAMPLES :
     - Create homedir for members of "ldap:group:my_group"
         ${PROGNAME} --group "ldap:group:my_group"
 
+    - Use default SSSD user for ldap requests
+        ${PROGNAME} --user-cmd "sed -n 's/\(^ldap_default_bind_dn = \)\(.*\)/\2/p' /etc/sssd/sssd.conf"
+
 OPTIONS :
     -b,--base LDAP_BASE
         Set different LDAP base (default: ${LDAP_GROUP_BASE_DEFAULT}).
@@ -52,9 +59,17 @@ OPTIONS :
     -h,--help
         Print this help message.
 
+    -p,--password,--password-cmd "sed -n … /etc/…"
+        Command to get LDAP bind password from a file (by default,
+        works with NSLCD − /etc/nslcd.conf).
+
     -s,--server ldap://ldap.domain.tld
         LDAP url to use for ldapsearch request (default: ${LDAP_SERVER_DEFAULT}).
 
+    -u,--user,--user-cmd "sed -n … /etc/…"
+        Command to get LDAP bind user from a file (by default,
+        works with NSLCD − /etc/nslcd.conf).
+
 	EOF
 
 }
@@ -100,6 +115,20 @@ define_vars() {                                                 # {{{
 		ldap_server="${LDAP_SERVER_DEFAULT}"
 	fi
 	# }}}
+	# If ldap_passwd wasn't defined (argument) {{{
+	if [ -z "${ldap_passwd}" ]; then
+		## Use default command
+		ldap_passwd="${LDAP_PASSWD_CMD_DEFAULT}"
+		debug_message "Use default command to get LDAP password."
+	fi
+	# }}}
+	# If ldap_user wasn't defined (argument) {{{
+	if [ -z "${ldap_user}" ]; then
+		## Use default command
+		ldap_user="${LDAP_USER_CMD_DEFAULT}"
+		debug_message "Use default command to get LDAP user."
+	fi
+	# }}}
 
 }
 # }}}
@@ -193,12 +222,24 @@ if [ ! "${NBARGS}" -eq "0" ]; then
 			## Exit after help informations
 			exit 0
 			;;
+		-p|--password|--password-cmd )        ## Define ldap_passwd
+			## Move to the next argument
+			shift
+			## Define var
+			readonly ldap_passwd="${1}"
+			;;
 		-s|--server)                          ## Define ldap_server
 			## Move to the next argument
 			shift
 			## Define var
 			readonly ldap_server="${1}"
 			;;
+		-u|--user|--user-cmd )                ## Define ldap_user
+			## Move to the next argument
+			shift
+			## Define var
+			readonly ldap_user="${1}"
+			;;
 		* )                                   ## unknow option
 			printf '%b\n' "${RED}Invalid option: ${1}${RESET}"
 			printf '%b\n' "---"