Difference between revisions of "Linking to Active Directory Home Directories using CentrifyDN"
m |
m |
||
Line 17: | Line 17: | ||
''' 2. Create Script with adhome.pl based on article above and place in /usr/bin/adhome.pl ''' | ''' 2. Create Script with adhome.pl based on article above and place in /usr/bin/adhome.pl ''' | ||
+ | |||
+ | |||
+ | sudo -i | ||
+ | |||
+ | nano /usr/bin/adhome.pl | ||
+ | ''' 2a. Copy the Shell Script into adhome.pl ''' | ||
+ | |||
+ | <nowiki>#!/bin/sh /usr/share/centrifydc/perl/run | ||
+ | # This script uses ldap to fetch user homeDirectory from AD | ||
+ | # and mount/umount by smbmount and smbumount</nowiki> | ||
+ | <nowiki>use strict;</nowiki> | ||
+ | <nowiki>#use MIME::Base64;</nowiki> | ||
+ | <nowiki>use File::Spec;</nowiki> | ||
+ | <nowiki># get base dn</nowiki> | ||
+ | <nowiki>my $zone_base = `cat /va/centrifydc/kset.zonename`;</nowiki> | ||
+ | <nowiki>#get user CN</nowiki> | ||
+ | <nowiki>my $cn = `adquery user -D ${ARGV[0]} | cut -d, -f1`;</nowiki> | ||
+ | <nowiki>#print $cn;</nowiki> | ||
+ | <nowiki>my @cn = split(/\n/,$cn);</nowiki> | ||
+ | <nowiki>#ldap search</nowiki> | ||
+ | <nowiki>#search for the homeDirectory attribute of user in AD in autozone mode</nowiki> | ||
+ | <nowiki>#also cut the path out and change backward slash to forward slash</nowiki> | ||
+ | <nowiki>my $ldap = `/usr/share/centrifydc/bin/ldapsearch -Q -H "LDAP://" -b "$zone_base" -LLL "(@cn)" homeDirectory | grep homeDirectory | cut -d: -f2 | sed 's:\\\\:/:g' `; <\nowiki> | ||
+ | <nowiki>#print $ldap;<\nowiki> | ||
+ | <nowiki>#split the output into single line</nowiki> | ||
+ | <nowiki>my @line = split(/\n/, $ldap);</nowiki> | ||
+ | <nowiki>#print @line;</nowiki> | ||
+ | <nowiki>#if ldapsearch result is not blank</nowiki> | ||
+ | <nowiki>if (@line )</nowiki> | ||
+ | <nowiki>{</nowiki> | ||
+ | <nowiki>if(${ARGV[2]} eq "mount") {</nowiki> | ||
+ | <nowiki>#mount the homeDirectory with smbmount command on mountpoint with kerberos ticket</nowiki> | ||
+ | <nowiki>my $mount = `smbmount @line ${ARGV[1]} -o sec=krb5i`;</nowiki> | ||
+ | <nowiki># print "mount";</nowiki> | ||
+ | <nowiki> }</nowiki> | ||
+ | <nowiki>}</nowiki> | ||
+ | <nowiki>#if argument3 is umount will umount the share</nowiki> | ||
+ | <nowiki>if(${ARGV[2]} eq "umount" ){</nowiki> | ||
+ | <nowiki>my $mount = `smbumount ${ARGV[1]}`;</nowiki> | ||
+ | <nowiki># print "umount"</nowiki> | ||
+ | <nowiki>}<\nowiki> |
Revision as of 21:49, 19 April 2012
See Article: http://community.centrify.com/t5/DirectControl-Express-for-UNIX/Automounting-home-directories-defined-in-AD/td-p/1044
* Disclaimer: I did not create (write) this script, or have I tested this well. Please change any errors or omissions in these instructions! *
1. Install SAMBA.
OPEN TERMINAL with Ctrl-T if it is not already open
sudo -i
apt-get update apt-get install samba
2. Create Script with adhome.pl based on article above and place in /usr/bin/adhome.pl
sudo -i
nano /usr/bin/adhome.pl
2a. Copy the Shell Script into adhome.pl
#!/bin/sh /usr/share/centrifydc/perl/run # This script uses ldap to fetch user homeDirectory from AD # and mount/umount by smbmount and smbumount use strict; #use MIME::Base64; use File::Spec; # get base dn my $zone_base = `cat /va/centrifydc/kset.zonename`; #get user CN my $cn = `adquery user -D ${ARGV[0]} | cut -d, -f1`; #print $cn; my @cn = split(/\n/,$cn); #ldap search #search for the homeDirectory attribute of user in AD in autozone mode #also cut the path out and change backward slash to forward slash my $ldap = `/usr/share/centrifydc/bin/ldapsearch -Q -H "LDAP://" -b "$zone_base" -LLL "(@cn)" homeDirectory | grep homeDirectory | cut -d: -f2 | sed 's:\\\\:/:g' `; <\nowiki> <nowiki>#print $ldap;<\nowiki> <nowiki>#split the output into single line my @line = split(/\n/, $ldap); #print @line; #if ldapsearch result is not blank if (@line ) { if(${ARGV[2]} eq "mount") { #mount the homeDirectory with smbmount command on mountpoint with kerberos ticket my $mount = `smbmount @line ${ARGV[1]} -o sec=krb5i`; # print "mount"; } } #if argument3 is umount will umount the share if(${ARGV[2]} eq "umount" ){ my $mount = `smbumount ${ARGV[1]}`; # print "umount" <nowiki>}<\nowiki>