#!/bin/bash -x

function cleanup {

    /opt/IDEALX/sbin/smbldap-userdel -r $USERNAME
    echo exiting!!!!
    exit 1

}

function get_role {

    echo Please assign a role to this account.
    echo "(admins,network,developers,vendors)"

    read role

    if [[ "$role" = "admins" || "$role" = "network" || "$role" = "developers" || "$role" = "vendors" ]]; then

        /opt/IDEALX/sbin/smbldap-useradd -G 1513,$GUSER,26 -o $role,$organization -s /bin/ksh -d /home/operations/$USERNAME -a $USERNAME

        echo Setting the inital LDAP password for $USERNAME.
        /opt/IDEALX/sbin/smbldap-passwd $USERNAME
        if [ $? -ne 0 ] ; then
                cleanup
        fi

        echo Enforcing password expiration upon first login!!!!!!

        cat $TMPFILE2 | sed -e "s/USER/$USERNAME/g" /db/backups/tmp-expire-ou.ldif > /db/backups/variable3-ou.ldif
        cat $TMPFILE3 | sed "s/role/$role/g"  /db/backups/variable3-ou.ldif > /db/backups/variable4-ou.ldif
        cat $TMPFILE4 | sed "s/organization/$organization/g" /db/backups/variable4-ou.ldif > /db/backups/variable5-ou.ldif

        ldapadd -f /db/backups/variable5-ou.ldif -x -D cn=root,dc=mdvcat,dc=lott -W
        if [ $? -ne 0 ] ; then
                cleanup
        fi

    else
        echo You entered an invalid role!!!
        exit 1
    fi

}

# Main routine...
TMPFILE=/db/backups/tmp-expire.ldif
TMPFILE2=/db/backups/tmp-expire-ou.ldif
TMPFILE3=/db/backups/variable3-ou.ldif
TMPFILE4=/db/backups/variable4-ou.ldif

echo Please enter the username you would like to add to LDAP!

read USERNAME

if getent passwd $USERNAME
then
        echo $USERNAME already exists in the LDAP database!
        exit 1
fi

echo Please enter the menu group to associate with this account!
echo "(guser1,guser2,gsuer3,guser4,guser5,guser6,guser7,guser8,guser9,gadmin,gsuper)"

read GUSER
if [[ "$GUSER" = guser* || "$GUSER" = "gadmin" || "$GUSER" = "gsuper" ]]; then
        echo You entered an invalid group!!
        exit 1
fi

echo Which LDAP organizational container do you want to add the user to?
echo "(EXAMPLE1,example2,Default)"
echo If you are unsure please enter Default for the LDAP organizational container.

read organization

if [[ "$organization" = "EXAMPLE1" || "$organization" = "example2" ]]; then
        get_role

elif [ "$organization" = "Default" ]; then
        /opt/IDEALX/sbin/smbldap-useradd -G 1513,$GUSER,26 -s /bin/ksh -d /home/operations/$USERNAME -a $USERNAME

        echo Setting the inital LDAP password for $USERNAME.
        /opt/IDEALX/sbin/smbldap-passwd $USERNAME

        echo Enforcing password expiration upon first login!!!!!!
        cat $TMPFILE | sed "s/USER/$USERNAME/g" /db/backups/tmp-expire.ldif > /db/backups/variable3.ldif
        ldapadd -f /db/backups/variable3.ldif -x -D cn=root,dc=mdvcat,dc=lott -W
        if [ $? -ne 0 ] ; then
                cleanup
        fi

else
        echo You entered an invalid Organizational Unit!!
        exit 1

fi

exit 0