Difference between revisions of "Linking to Active Directory Home Directories using CentrifyDN"

From ubermix Wiki
Jump to: navigation, search
m
m
Line 33: Line 33:
 
   <nowiki># use MIME::Base64;</nowiki>
 
   <nowiki># use MIME::Base64;</nowiki>
 
   <nowiki>use File::Spec;</nowiki>
 
   <nowiki>use File::Spec;</nowiki>
−
  <nowiki># get the base dn</nowiki>
+
 
 
    
 
    
 
   <nowiki>my $zone_base = `cat /va/centrifydc/kset.zonename`;</nowiki>
 
   <nowiki>my $zone_base = `cat /va/centrifydc/kset.zonename`;</nowiki>
−
   <nowiki># get user CN</nowiki>
+
     
 +
   <nowiki>my $cn = `adquery user -D ${ARGV[0]} | cut -d, -f1`;</nowiki>
 
    
 
    
−
  <nowiki>my $cn = `adquery user -D ${ARGV[0]} | cut -d, -f1`;</nowiki>
 
−
  <nowiki>#print $cn;</nowiki>
 
 
   <nowiki>my @cn = split(/\n/,$cn);</nowiki>
 
   <nowiki>my @cn = split(/\n/,$cn);</nowiki>
−
   <nowiki>#ldap search</nowiki>
+
    
−
  <nowiki>#search for the homeDirectory attribute of user in AD in autozone mode</nowiki>
 
−
  <nowiki>#also cut the path out and change backward slash to forward slash</nowiki>
 
 
   <nowiki>my $ldap = `/usr/share/centrifydc/bin/ldapsearch -Q -H "LDAP://" -b "$zone_base"  -LLL "(@cn)" homeDirectory | grep homeDirectory | cut -d: -f2 | sed 's:\\\\:/:g' `;
 
   <nowiki>my $ldap = `/usr/share/centrifydc/bin/ldapsearch -Q -H "LDAP://" -b "$zone_base"  -LLL "(@cn)" homeDirectory | grep homeDirectory | cut -d: -f2 | sed 's:\\\\:/:g' `;
−
  #print $ldap;
+
 
−
  #split the output into single line</nowiki>
 
 
   <nowiki>my @line = split(/\n/, $ldap);</nowiki>
 
   <nowiki>my @line = split(/\n/, $ldap);</nowiki>
−
  <nowiki>#print @line;</nowiki>
+
 
−
  <nowiki>#if ldapsearch result is not blank</nowiki>
 
 
   <nowiki>if (@line )</nowiki>
 
   <nowiki>if (@line )</nowiki>
 
   <nowiki>{</nowiki>
 
   <nowiki>{</nowiki>
−
   <nowiki>if(${ARGV[2]} eq "mount") {</nowiki>
+
   <nowiki>   if(${ARGV[2]} eq "mount") {</nowiki>
−
   <nowiki>#mount the homeDirectory with smbmount command on mountpoint with kerberos ticket</nowiki>
+
    
 
   <nowiki>my $mount = `smbmount @line ${ARGV[1]} -o sec=krb5i`;</nowiki>
 
   <nowiki>my $mount = `smbmount @line ${ARGV[1]} -o sec=krb5i`;</nowiki>
−
   <nowiki>#    print "mount";</nowiki>
+
    
 
   <nowiki>  }</nowiki>
 
   <nowiki>  }</nowiki>
 
   <nowiki>}</nowiki>
 
   <nowiki>}</nowiki>
−
  <nowiki>#if argument3 is umount will umount the share</nowiki>
+
 
−
   <nowiki>if(${ARGV[2]} eq "umount" ){</nowiki>
+
   <nowiki>if(${ARGV[2]} eq "umount" )
−
   <nowiki>my $mount = `smbumount ${ARGV[1]}`;</nowiki>
+
    {</nowiki>
−
  <nowiki>#    print "umount"</nowiki>
+
   <nowiki> my $mount = `smbumount ${ARGV[1]}`;</nowiki>
 
     }
 
     }
  
 
''' -- WORK IN PROGRESS -- '''
 
''' -- WORK IN PROGRESS -- '''

Revision as of 22:07, 19 April 2012

See Article: http://community.centrify.com/t5/DirectControl-Express-for-UNIX/Automounting-home-directories-defined-in-AD/td-p/1044

* Disclaimer: I did not create (write) this script, or have I tested this well. Please change any errors or omissions in these instructions! *



1. Install SAMBA.

OPEN TERMINAL with Ctrl-T if it is not already open 

   sudo -i

   apt-get update
  
   apt-get install samba

2. Create Script with adhome.pl based on article above and place in /usr/bin/adhome.pl

OPEN TERMINAL with Ctrl-T if it is not already open 

   sudo -i

   nano /usr/bin/adhome.pl

2a. Copy the Shell Script into adhome.pl 

   #!/bin/sh /usr/share/centrifydc/perl/run
   #This script uses ldap to fetch user homeDirectory from AD 
   #and mount/umount by smbmount and smbumount
    
  use strict;

  # use MIME::Base64;
  use File::Spec;



  my $zone_base = `cat /va/centrifydc/kset.zonename`;
     
  my $cn = `adquery user -D ${ARGV[0]} | cut -d, -f1`;
  
  my @cn = split(/\n/,$cn);
  
  my $ldap = `/usr/share/centrifydc/bin/ldapsearch -Q -H "LDAP://" -b "$zone_base"  -LLL "(@cn)" homeDirectory | grep homeDirectory | cut -d: -f2 | sed 's:\\\\:/:g' `;

   <nowiki>my @line = split(/\n/, $ldap);

  if (@line )
  {
     if(${ARGV[2]} eq "mount") {
  
  my $mount = `smbmount @line ${ARGV[1]} -o sec=krb5i`;
  
    }
  }

  if(${ARGV[2]} eq "umount" )
    {
    my $mount = `smbumount ${ARGV[1]}`;
   }

-- WORK IN PROGRESS --

Retrieved from "https://wiki.ubermix.org/index.php?title=Linking_to_Active_Directory_Home_Directories_using_CentrifyDN&oldid=303"