Login or Register to Ask a Question and Join Our Community


Shell Programming and Scripting

Parser ldapsearch to mysql

Login to Discuss or Reply to this Discussion in Our Community

 
Thread Tools Search this Thread
Top Forums Shell Programming and Scripting Parser ldapsearch to mysql
# 1  
Old 08-31-2018
Parser ldapsearch to mysql
Hi,


I'm trying to make a bash script to read LDAP (from MS active directory with ldapsearch), extract the fields 'mail', 'division', 'memberOf', 'userAccountControl', 'uidNumber', 'name', 'sAMAccountName' and save in a mysql database.

I have extracted the fields with ldapsearch but I am not clear how to parse user by user and enter it in the database.


Code:
ldapsearch -W -H ldaps://my.domainldap.com:3269 -D "CN=botreader,OU=accountsNoPerson,OU=Usuarios,DC=office,DC=domain,DC=com" "(&(objectCategory=person)(objectClass=user)(userAccountControl:1.2.840.113556.1.4.803:=0))" -LLL "(&(objectclass=posixaccount)(mail=*))" 'mail' 'division' 'memberOf' 'userAccountControl' 'uidNumber' 'name' 'sAMAccountName'

But when i tried to use this ldapsearch and parser i have the last user in the result, example:
Code:
ldapsearch -W -H ldaps://my.domainldap.com:3269 -D  "CN=botreader,OU=accountsNoPerson,OU=Usuarios,DC=office,DC=domain,DC=com"   "(&(objectCategory=person)(objectClass=user)(userAccountControl:1.2.840.113556.1.4.803:=0))"  -LLL "(&(objectclass=posixaccount)(mail=*))" 'mail' 'division'  'memberOf' 'userAccountControl' 'uidNumber' 'name' 'sAMAccountName' \
    | gawk -F":" ' $1=="mail" { mail = $2; sub(/^  */,"", mail); next}
    $1=="division" { division = $2; sub(/^  */,"", division);next}
    $1=="memberOf" { memberOf = $2; sub(/^  */,"", memberOf);next}
    $1=="userAccountControl" { userAccountControl = $2; sub(/^  */,"", userAccountControl);next}
    END {
        printf("%s,%s,%s,%s\n", mail,division,memberOf,userAccountControl)
          }'

Result:


Code:
EMAIL_USER,a0335f6393561hqwd4557ff5b67,CN=group01,OU=persons01,OU=Users,DC=office,DC=at,512

Anybody know any easy way to do this?

Thanks in advance.
# 2  
Old 08-31-2018
Welcome to the forum.


What exactly is your problem? Also, pls provide some sample data.
# 3  
Old 09-03-2018
Hi,


The output is like this:


Code:
....

dn: CN=User 1,OU=ACT-RES,OU=DT,OU=Person,OU=Users,DC=
 ffices,DC=domain,DC=com
memberOf: CN=vpn,OU=DT,OU=Person,OU=Users,DC=Offices,
 DC=domain,DC=com
memberOf: CN=Dept1,CN=Builtin,DC=Offices,DC=domain,DC=com
memberOf: CN=Developers,OU=DT,OU=Person,OU=Users,DC=Offices,DC
 =domain,DC=com
name: User 1
userAccountControl: 512
sAMAccountName: user1
division: 42a740c784db1612bba443d7262bba4se3a85622b0
mail: suser1@domain.com
uidNumber: 11235

dn: CN=User 2,OU=ACT-RES,OU=DT,OU=Person,OU=Users,DC=o
 ffice,DC=domain,DC=com
memberOf: CN=Dept_HCD,CN=Builtin,DC=Offices,DC=domain,DC=com
memberOf: CN=Dept_HCR,CN=Builtin,DC=Offices,DC=domain,DC=com
memberOf: CN=Dept1,CN=Builtin,DC=Offices,DC=domain,DC=com
memberOf: CN=Admins,OU=Person,OU=Users,DC=Offices,DC=domai
 n,DC=com
name: User 2
userAccountControl: 512
sAMAccountName: user2
division: baa5939bf3b161c2bba443d726af9b957e4dd77b0
mail: user2@domain.com
uidNumber: 13092

...

Login or Register to Ask a Question

Previous Thread | Next Thread

10 More Discussions You Might Find Interesting

1. UNIX for Beginners Questions & Answers

Ldapsearch using variable will not work

When I execute the code below with cn set to the $adgroup variable, I get the following error: Invalid DN syntax (34) Additional information: 0000208F: NameErr: DSID-031001F7, problem 2006 (BAD_NAME), data 8349, best match of: ,ou=Resource,ou=groups,dc=abc,dc=somecompany,dc=com' If I set cn... (6 Replies)
Discussion started by: who10
6 Replies

2. Solaris

Ldapsearch command not exiting

All, New to this forum and unix here so please forgive any silly questions. I am on a Solaris 10 machine and need a script to query our Windows Domain controller to determine if a user is active or not. Man files were helpful enough and it worked. The Challenge is the program doesn't exit... (1 Reply)
Discussion started by: daniel333
1 Replies

3. Red Hat

Ldapsearch problem

Hi I'm not familiar with ldap and I hope someone to help me. I need to get some attribute value from ldap DB. When i run the following command is OK: ldapsearch -h localhost -p 16611 -x -D cn=user -w passwd -b msisdn=359502479649,dc=MSISDN,DC=C-NTDB "(objectClass=SUBINNSS)" refinmocNAME the... (0 Replies)
Discussion started by: vasil
0 Replies

4. UNIX for Dummies Questions & Answers

Need assistance on using ldapsearch

Never knew of this command ldapsearch, but I would like to use it to lookup a single user and return where their office is. Is this possible? I'm totally starting from scratch. I already saw some of the gurus say read the man page, which is pretty greek when you don't know the details of... (1 Reply)
Discussion started by: srhadden
1 Replies

5. Programming

LDAPSEARCH in C

Hi all, I've been searching for ldapsearch function these few days. Still I couldn't found the solution. I would like to translate this query ldapsearch -x -LLL -h new_IP -p new_Port -D "cn=jw" -w "dummy" -b "id=2311,o=WC,c=jp" -s sub to ldap_search_ext_s() function in C program. ... (0 Replies)
Discussion started by: tailangong
0 Replies

6. UNIX for Advanced & Expert Users

Counting the ldapsearch results

Hi, Is there way to count the number of results in the ldapsearch, looking at the manpages i dont see an option, Using the following ldapsearch command to list attribute (User-Id=100) under my ObjectClass=my-Process, returns the entries matching the User-Id=100, and the problem i face here is... (0 Replies)
Discussion started by: ennstate
0 Replies

7. UNIX for Advanced & Expert Users

ldapsearch and XML

Hello all I would like to know if it's possible to extract users from Active Directory and parse the output to obtain a XML file with specific format. So the AD is a windows machine, and I would like to extract from a red hat linux serveur. I try ldapsearch command and ok I'm abble to extract... (5 Replies)
Discussion started by: ldiaz2106
5 Replies

8. UNIX for Dummies Questions & Answers

How to trim ldapsearch results

I have a script that iterates through all the users that have logged in to the system for the past day and pulls out their role(s), adding them to a file. The iteration part is working just fine, but the issue I have is with the result. When I do the LDAP query, the results I get are: ... (2 Replies)
Discussion started by: a_calder
2 Replies

9. UNIX for Dummies Questions & Answers

ldapsearch time limit

We have an application that uses Active directory to authenticate the users. the admins of the app. were complaining because the windows domain controller they are going against is not very stable. I wrote a shell script using ldapsearch to look up a user against the domain controller their app... (2 Replies)
Discussion started by: jayjabour
2 Replies

10. IP Networking

Help Needed regarding Ldapsearch script

Hi guys, I very appreciate for answering to my previous query. I have encountered another problem.I have a perl script to display required networking information like DNS,gateway,etc. to be changed in a remote computer which is to be added to a computing cluster. I need a script which... (0 Replies)
Discussion started by: pranav.mehta3
0 Replies
Login or Register to Ask a Question