Red Hat

Hello there everyone.

I have a question. How can you make querys to LDAP server to get the users that hav access on a names server.I'll explain:

I have a lot of servers, and I use LDAP for user authentication. What I want is to make a script that will give me on the server that I want the people who are allowed to access. So for this I should query the LDAP server. But how can I do this precise query ?

Forgot to mentions that I want this script to work on RedHat ans Solaris to

Thank you for your help.

I guess the access is being granted by having the user(s) added into LDAP group(s). You should know or ask someone who set up the permissions and then you should be able to check with an ldapsearch, who is a member of that group(s).

You might also check your /etc/ldap.conf (or wherever your openldap(?) configuration files are located), which group(s) is configured there, especially the parameter pam_groupdn could be a helpful.

Yes the access is granted by group. But what I whant is for example to type : scriptname hostname and have all the users allowed to access that host name. Is that possible with the ldapsearch command ? cause I can't see this option to show the hosts ?!

Thank you for your help

You might need to write filters in your ldapsearch to
a) find the group associated to the host or vice versa
b) search for all members of that group

The syntax for ldapsearch can be looked up on it's man page or typing

Code:

ldapsearch --help

Depending if you use SSL etc. there is some different switches that may apply or not. Try to get a plain ldapsearch working befor you go for the filter part maybe.
For writing filters there are several tutorials/examples for that on the web (just google for "ldapsearch filter"). The filter is part of the ldapsearch.
The rest is a little bit of shell script around this which is very easy.
I am not firm in those filters myself so maybe if you get familiar with them, you can maybe search for the host, group and member criteria in one line of ldapsearch.