Publication des scripts Perl pour une gestion "manuelle" d'un Pack Mail Evolix
This commit is contained in:
Gregory Colpart
parent
d16f85f071
commit
efe0684408
653
scripts/add-mail-unix.pl
Executable file
653
scripts/add-mail-unix.pl
Executable file
|
|
@ -0,0 +1,653 @@
|
|||
#!/usr/bin/perl -w
|
||||
|
||||
# Script de creation de compte mail/LDAP (cas UNIX)
|
||||
# Copyright (c) 2004-2009 Evolix - Tous droits reserves
|
||||
|
||||
use strict;
|
||||
use warnings;
|
||||
|
||||
use Net::LDAP; # libnet-ldap-perl debian package
|
||||
use Getopt::Std;
|
||||
use Term::ReadKey; # libterm-readkey-perl debian package
|
||||
use MIME::Base64; #
|
||||
use Digest::SHA1; # libdigest-sha1-perl debian package
|
||||
use Quota; # libquota-perl debian package
|
||||
use Crypt::SmbHash; # libcrypt-smbhash-perl debian package
|
||||
use MIME::Lite; # libmime-lite-perl debian package
|
||||
use Switch;
|
||||
|
||||
# Parametres LDAP
|
||||
|
||||
our $dn='dc=example,dc=com';
|
||||
our $host='127.0.0.1';
|
||||
our $binddn='cn=perl,ou=ldapuser,dc=example,dc=com';
|
||||
our $password='XXX';
|
||||
|
||||
our $adminmail='admin@example.com';
|
||||
|
||||
our $file='/var/log/evolix.log';
|
||||
my ($sec,$min,$hour,$mday,$mon,$year,$wday,$yday,$isdst)=localtime(time);
|
||||
our $date= sprintf("%4d-%02d-%02d %02d:%02d ",$year+1900,$mon+1,$mday,$hour,$min);
|
||||
|
||||
sub usage()
|
||||
{
|
||||
print STDERR << "EOF";
|
||||
|
||||
usage: $0 [-hualmcdpx]
|
||||
|
||||
-h : aide
|
||||
-u : ajoute un compte
|
||||
-a : ajoute un alias
|
||||
-l : liste les comptes
|
||||
-m : liste les alias
|
||||
-c : modifier compte
|
||||
-d : modifier alias
|
||||
-p : modifier password
|
||||
-x : supprimer un compte
|
||||
|
||||
EOF
|
||||
|
||||
exit;
|
||||
}
|
||||
|
||||
sub add()
|
||||
{
|
||||
printf("Entrez le compte a creer (sans partie @...) : ");
|
||||
my $login = <STDIN>;
|
||||
chomp $login;
|
||||
|
||||
my $ldap = Net::LDAP->new($host) or die "$@";
|
||||
my $mesg = $ldap->bind($binddn,password => $password, version => 3);
|
||||
|
||||
our $edn = 'ou=people,' . $dn;
|
||||
|
||||
# Voir si le compte existe deja
|
||||
|
||||
my $result = $ldap->search(
|
||||
base => $edn,
|
||||
filter => "(uid=$login)",
|
||||
attrs => "uid"
|
||||
);
|
||||
$result->code && die $result->error;
|
||||
if ($result->entries) { printf("Erreur, ce compte existe deja...\n"); exit; }
|
||||
|
||||
# TODO : detecter si un @ dans le login
|
||||
# TODO : generer un mot de passe
|
||||
|
||||
printf("Entrez le mot de passe : ");
|
||||
ReadMode('noecho');
|
||||
my $pass = ReadLine(0);
|
||||
chomp $pass;
|
||||
ReadMode('normal');
|
||||
printf("\n");
|
||||
|
||||
# Recuperer le max(UID) +1
|
||||
$result = $ldap->search(
|
||||
base => $dn,
|
||||
filter => "(objectClass=posixAccount)",
|
||||
attrs => "uidNumber"
|
||||
);
|
||||
$result->code && die $result->error;
|
||||
|
||||
my $uid = 10000; # Les uidNumber commencent a 10000
|
||||
my @entries = $result->entries;
|
||||
my $entr;
|
||||
foreach $entr (@entries) {
|
||||
if ( $entr->get_value("uidNumber") > $uid ) {
|
||||
$uid = $entr->get_value("uidNumber");
|
||||
}
|
||||
}
|
||||
$uid++;
|
||||
|
||||
|
||||
# Ajouter l'enregistrement
|
||||
|
||||
# set SSHA1 LDAP passwd with http://www.taclug.org/documents/openldap_presentation.html
|
||||
my $ctx = Digest::SHA1->new;
|
||||
$ctx->add($pass);
|
||||
$ctx->add('salt');
|
||||
my $hashedPasswd = '{SSHA}' . encode_base64($ctx->digest . 'salt' ,'');
|
||||
|
||||
$result = $ldap->add( 'uid='. $login .','. $edn ,
|
||||
attr => [
|
||||
'uid' => $login,
|
||||
'sn' => $login,
|
||||
'cn' => $login,
|
||||
'objectclass' => ['inetOrgPerson','posixAccount','shadowAccount','mailAccount'],
|
||||
'uidNumber' => $uid,
|
||||
'gidNumber' => '10000',
|
||||
'userPassword' => $hashedPasswd,
|
||||
'homeDirectory' => '/home/' . $login,
|
||||
'loginShell' => '/bin/bash',
|
||||
'mailacceptinggeneralid' => $login,
|
||||
'maildrop' => $login,
|
||||
'accountActive' => 'TRUE',
|
||||
'authsmtpActive' => 'TRUE',
|
||||
'courierActive' => 'TRUE',
|
||||
'webmailActive' => 'TRUE'
|
||||
]
|
||||
) or die "heh : $!";
|
||||
|
||||
$mesg->code && die $mesg->error;
|
||||
$ldap->unbind;
|
||||
|
||||
# $HOME
|
||||
mkdir "/home/$login/",0700 ;
|
||||
# TODO : voir pourquoi les drois ne sont pas pris en compte
|
||||
chmod 0700,"/home/$login/";
|
||||
chown $uid,10000,"/home/$login/";
|
||||
|
||||
# QUOTA
|
||||
Quota::setqlim(Quota::getqcarg("/home"), $uid, 1024000, 1536000, 0, 0, 1, 0);
|
||||
|
||||
# INIT MAIL
|
||||
my $msg = MIME::Lite->new(
|
||||
From => $adminmail,
|
||||
To => $login,
|
||||
CC => '',
|
||||
Subject => "Initialisation du compte",
|
||||
Type => 'TEXT',
|
||||
Data => "Ceci est un mail d'initialisation de votre compte."
|
||||
);
|
||||
|
||||
MIME::Lite->send('smtp', "localhost", Timeout=>60);
|
||||
$msg -> send;
|
||||
|
||||
printf("Ajout OK\n");
|
||||
|
||||
# on log
|
||||
open F, ">>$file";
|
||||
print F ("$date [add.pl] Ajout compte $login\n");
|
||||
close F;
|
||||
}
|
||||
|
||||
sub aadd()
|
||||
{
|
||||
printf("Entrez l'alias a creer : ");
|
||||
my $alias = <STDIN>;
|
||||
chomp $alias;
|
||||
|
||||
# TODO : voir si l'alias est correct...
|
||||
|
||||
my $ldap = Net::LDAP->new($host) or die "$@";
|
||||
my $mesg = $ldap->bind($binddn,password => $password, version => 3);
|
||||
|
||||
our $edn = 'ou=people,' . $dn;
|
||||
|
||||
# Voir si le compte existe deja
|
||||
|
||||
my $result = $ldap->search(
|
||||
base => $edn,
|
||||
filter => "(mailacceptinggeneralid=$alias)",
|
||||
attrs => "mailacceptinggeneralid"
|
||||
);
|
||||
$result->code && die $result->error;
|
||||
if ($result->entries) { printf("Erreur, cet alias existe deja...\n"); exit; }
|
||||
|
||||
printf("Entrez vers ou l'alias pointe : ");
|
||||
my $drop = <STDIN>;
|
||||
chomp $drop;
|
||||
|
||||
$result = $ldap->add( 'mailacceptinggeneralid='. $alias .','. $edn ,
|
||||
attr => [
|
||||
'mailacceptinggeneralid' => $alias,
|
||||
'maildrop' => $drop,
|
||||
'objectclass' => ['mailAlias'],
|
||||
'accountActive' => 'TRUE'
|
||||
]
|
||||
) or die "heh : $!";
|
||||
|
||||
$mesg->code && die $mesg->error;
|
||||
$ldap->unbind;
|
||||
|
||||
printf("Ajout OK\n");
|
||||
|
||||
# on log
|
||||
open F, ">>$file";
|
||||
print F ("$date [add.pl] Ajout alias $alias\n");
|
||||
close F;
|
||||
|
||||
}
|
||||
|
||||
sub liste1()
|
||||
{
|
||||
|
||||
my $ldap = Net::LDAP->new($host) or die "$@";
|
||||
my $mesg = $ldap->bind($binddn,password => $password, version => 3);
|
||||
|
||||
my $result = $ldap->search(
|
||||
base => $dn,
|
||||
filter => "(objectClass=mailAccount)",
|
||||
attrs => "uid"
|
||||
);
|
||||
$result->code && die $result->error;
|
||||
|
||||
my @entries = $result->entries;
|
||||
my $entr;
|
||||
my @liste;
|
||||
foreach $entr (@entries) {
|
||||
|
||||
my $mailacc ="";
|
||||
foreach my $value ($entr->get_value("mailacceptinggeneralid")) {
|
||||
$mailacc = $value.",".$mailacc;
|
||||
}
|
||||
$mailacc =~ s/,$//;
|
||||
|
||||
my $maildrop ="";
|
||||
foreach my $value ($entr->get_value("maildrop")) {
|
||||
$maildrop = $value.",".$maildrop;
|
||||
}
|
||||
$maildrop =~ s/,$//;
|
||||
|
||||
@liste = ($entr->get_value("uid").":".$mailacc."->".$maildrop,@liste);
|
||||
}
|
||||
|
||||
$ldap->unbind;
|
||||
|
||||
my @out;
|
||||
@out = sort @liste;
|
||||
foreach $entr (@out) {
|
||||
print $entr."\n";
|
||||
}
|
||||
|
||||
}
|
||||
|
||||
sub liste2()
|
||||
{
|
||||
my $ldap = Net::LDAP->new($host) or die "$@";
|
||||
my $mesg = $ldap->bind($binddn,password => $password, version => 3);
|
||||
|
||||
my $result = $ldap->search(
|
||||
base => $dn,
|
||||
filter => "(objectClass=mailAlias)",
|
||||
attrs => "mailacceptinggeneralid"
|
||||
);
|
||||
$result->code && die $result->error;
|
||||
|
||||
my @entries = $result->entries;
|
||||
my $entr;
|
||||
my @liste;
|
||||
foreach $entr (@entries) {
|
||||
my $maildrop ="";
|
||||
foreach my $value ($entr->get_value("maildrop")) {
|
||||
$maildrop = $value.",".$maildrop;
|
||||
}
|
||||
$maildrop =~ s/,$//;
|
||||
|
||||
@liste = ($entr->get_value("mailacceptinggeneralid").":".$maildrop,@liste);
|
||||
}
|
||||
|
||||
$ldap->unbind;
|
||||
|
||||
my @out;
|
||||
@out = sort @liste;
|
||||
foreach $entr (@out) {
|
||||
print $entr."\n";
|
||||
}
|
||||
|
||||
}
|
||||
|
||||
sub adel() {
|
||||
|
||||
printf("Entrez l'alias a effacer : ");
|
||||
my $alias = <STDIN>;
|
||||
chomp $alias;
|
||||
|
||||
my $ldap = Net::LDAP->new($host) or die "$@";
|
||||
my $mesg = $ldap->bind($binddn,password => $password, version => 3);
|
||||
|
||||
my $dndelete = 'mailacceptinggeneralid=' . $alias .',ou=people,'. $dn;
|
||||
|
||||
$ldap->delete( $dndelete );
|
||||
|
||||
$ldap->unbind;
|
||||
|
||||
printf("Suppression OK\n");
|
||||
|
||||
}
|
||||
|
||||
# modification d'un compte
|
||||
sub mod() {
|
||||
|
||||
printf("Entrez le compte a modifier: ");
|
||||
my $login = <STDIN>;
|
||||
chomp $login;
|
||||
|
||||
my $ldap = Net::LDAP->new($host) or die "$@";
|
||||
my $mesg = $ldap->bind($binddn,password => $password, version => 3);
|
||||
|
||||
my $result = $ldap->search(
|
||||
base => $dn,
|
||||
filter => "(uid=$login)",
|
||||
);
|
||||
$result->code && die $result->error;
|
||||
|
||||
print "Compte " . $result->entry(0)->get_value("uid") . " trouvé\n\n";
|
||||
|
||||
print "=> Mail(s) accepté(s) pour ce compte :\n";
|
||||
foreach my $value ($result->entry(0)->get_value("mailacceptinggeneralid")) {
|
||||
print "- " . $value . "\n";
|
||||
}
|
||||
|
||||
print "\n";
|
||||
print "=> Ce compte est renvoyé vers :\n";
|
||||
|
||||
foreach my $value ($result->entry(0)->get_value("maildrop")) {
|
||||
print "- " . $value . "\n";
|
||||
}
|
||||
|
||||
print "\n";
|
||||
print "Que voulez-vous faire ?\n";
|
||||
print "(activer|desactiver|ajouter-mail|suppr-mail|ajouter-redir|suppr-redir)\n";
|
||||
|
||||
my $action = <STDIN>;
|
||||
chomp $action;
|
||||
|
||||
my $actiondn = 'uid=' . $login .',ou=people,'. $dn;
|
||||
|
||||
switch ($action) {
|
||||
case (/^activer/i) {
|
||||
$ldap->modify( $actiondn, replace => { 'AccountActive' => 'TRUE' } );
|
||||
print "compte $login activé\n";
|
||||
# on log
|
||||
open F, ">>$file";
|
||||
print F ("$date [add.pl] Activation compte $login\n");
|
||||
close F;
|
||||
|
||||
}
|
||||
|
||||
case (/^d.sactiver/i) {
|
||||
$ldap->modify( $actiondn, replace => { 'AccountActive' => 'FALSE' } );
|
||||
print "compte $login desactivé\n";
|
||||
|
||||
open F, ">>$file";
|
||||
print F ("$date [add.pl] Desactivation compte $login\n");
|
||||
close F;
|
||||
}
|
||||
|
||||
case (/^ajouter.?mail/i) {
|
||||
printf("Entrez le mail a ajouter : ");
|
||||
my $newmail = <STDIN>;
|
||||
chomp $newmail;
|
||||
|
||||
$ldap->modify( $actiondn, add => { 'mailacceptinggeneralid' => $newmail } );
|
||||
print "Ajout $newmail OK\n";
|
||||
|
||||
open F, ">>$file";
|
||||
print F ("$date [add.pl] Ajout mail $newmail sur compte $login\n");
|
||||
close F;
|
||||
}
|
||||
|
||||
case (/^suppr.?mail/i) {
|
||||
printf("Entrez le mail a supprimer : ");
|
||||
my $oldmail = <STDIN>;
|
||||
chomp $oldmail;
|
||||
|
||||
$ldap->modify( $actiondn, delete => { 'mailacceptinggeneralid' => $oldmail } );
|
||||
print "Suppression $oldmail OK\n";
|
||||
|
||||
open F, ">>$file";
|
||||
print F ("$date [add.pl] Suppression mail $oldmail sur compte $login\n");
|
||||
close F;
|
||||
}
|
||||
|
||||
case (/^ajouter.?redir/i) {
|
||||
printf("Entrez la redirection a ajouter : ");
|
||||
my $newredir = <STDIN>;
|
||||
chomp $newredir;
|
||||
|
||||
$ldap->modify( $actiondn, add => { 'maildrop' => $newredir } );
|
||||
print "Ajout $newredir OK\n";
|
||||
|
||||
open F, ">>$file";
|
||||
print F ("$date [add.pl] Ajout redirection $newredir sur compte $login\n");
|
||||
close F;
|
||||
}
|
||||
|
||||
case (/^suppr.?redir/i) {
|
||||
printf("Entrez la redirection a supprimer : ");
|
||||
my $oldredir = <STDIN>;
|
||||
chomp $oldredir;
|
||||
|
||||
$ldap->modify( $actiondn, delete => { 'maildrop' => $oldredir } );
|
||||
print "Suppression $oldredir OK\n";
|
||||
|
||||
open F, ">>$file";
|
||||
print F ("$date [add.pl] Suppression redirection $oldredir sur compte $login\n");
|
||||
close F;
|
||||
}
|
||||
|
||||
}
|
||||
|
||||
$ldap->unbind;
|
||||
}
|
||||
|
||||
# modification d'un alias
|
||||
sub amod() {
|
||||
|
||||
printf("Entrez l'alias a modifier: ");
|
||||
my $alias = <STDIN>;
|
||||
chomp $alias;
|
||||
|
||||
my $ldap = Net::LDAP->new($host) or die "$@";
|
||||
my $mesg = $ldap->bind($binddn,password => $password, version => 3);
|
||||
|
||||
my $result = $ldap->search(
|
||||
base => $dn,
|
||||
filter => "(&(mailacceptinggeneralid=$alias)(objectClass=mailAlias))",
|
||||
);
|
||||
$result->code && die $result->error;
|
||||
|
||||
print "Alias " . $result->entry(0)->get_value("mailacceptinggeneralid") . " trouvé\n\n";
|
||||
|
||||
print "=> Mail(s) accepté(s) pour cet alias :\n";
|
||||
foreach my $value ($result->entry(0)->get_value("mailacceptinggeneralid")) {
|
||||
print "- " . $value . "\n";
|
||||
}
|
||||
|
||||
print "\n";
|
||||
print "=> Cet alias est renvoyé vers :\n";
|
||||
|
||||
foreach my $value ($result->entry(0)->get_value("maildrop")) {
|
||||
print "- " . $value . "\n";
|
||||
}
|
||||
|
||||
print "\n";
|
||||
print "Que voulez-vous faire ?\n";
|
||||
print "(activer|desactiver|suppr|ajouter-mail|suppr-mail|ajouter-redir|suppr-redir)\n";
|
||||
|
||||
my $action = <STDIN>;
|
||||
chomp $action;
|
||||
|
||||
my $actiondn = 'mailacceptinggeneralid=' . $alias .',ou=people,'. $dn;
|
||||
|
||||
switch ($action) {
|
||||
case (/^activer/i) {
|
||||
$ldap->modify( $actiondn, replace => { 'AccountActive' => 'TRUE' } );
|
||||
print "Alias $alias activé\n";
|
||||
|
||||
open F, ">>$file";
|
||||
print F ("$date [add.pl] Activation alias $alias\n");
|
||||
close F;
|
||||
}
|
||||
|
||||
case (/^d.sactiver/i) {
|
||||
$ldap->modify( $actiondn, replace => { 'AccountActive' => 'FALSE' } );
|
||||
print "Alias $alias desactivé\n";
|
||||
|
||||
open F, ">>$file";
|
||||
print F ("$date [add.pl] Desactivation alias $alias\n");
|
||||
close F;
|
||||
}
|
||||
|
||||
case (/^ajouter.?mail/i) {
|
||||
printf("Entrez le mail a ajouter : ");
|
||||
my $newmail = <STDIN>;
|
||||
chomp $newmail;
|
||||
|
||||
$ldap->modify( $actiondn, add => { 'mailacceptinggeneralid' => $newmail } );
|
||||
print "Ajout $newmail OK\n";
|
||||
|
||||
open F, ">>$file";
|
||||
print F ("$date [add.pl] Ajout mail $newmail pour alias $alias\n");
|
||||
close F;
|
||||
}
|
||||
|
||||
case (/^suppr.?mail/i) {
|
||||
printf("Entrez le mail a supprimer : ");
|
||||
my $oldmail = <STDIN>;
|
||||
chomp $oldmail;
|
||||
|
||||
$ldap->modify( $actiondn, delete => { 'mailacceptinggeneralid' => $oldmail } );
|
||||
print "Suppression $oldmail OK\n";
|
||||
|
||||
open F, ">>$file";
|
||||
print F ("$date [add.pl] Suppresion mail $oldmail pour alias $alias\n");
|
||||
close F;
|
||||
}
|
||||
|
||||
case (/^ajouter.?redir/i) {
|
||||
printf("Entrez la redirection a ajouter : ");
|
||||
my $newredir = <STDIN>;
|
||||
chomp $newredir;
|
||||
|
||||
$ldap->modify( $actiondn, add => { 'maildrop' => $newredir } );
|
||||
print "Ajout $newredir OK\n";
|
||||
|
||||
open F, ">>$file";
|
||||
print F ("$date [add.pl] Ajout redirection $newredir pour alias $alias\n");
|
||||
close F;
|
||||
}
|
||||
|
||||
case (/^suppr.?redir/i) {
|
||||
printf("Entrez la redirection a supprimer : ");
|
||||
my $oldredir = <STDIN>;
|
||||
chomp $oldredir;
|
||||
|
||||
$ldap->modify( $actiondn, delete => { 'maildrop' => $oldredir } );
|
||||
print "Suppression $oldredir OK\n";
|
||||
|
||||
open F, ">>$file";
|
||||
print F ("$date [add.pl] Suppression redirection $oldredir pour alias $alias\n");
|
||||
close F;
|
||||
}
|
||||
|
||||
case (/^suppr/i) {
|
||||
|
||||
$ldap->delete( $actiondn );
|
||||
print "Suppression alias $alias OK\n";
|
||||
|
||||
open F, ">>$file";
|
||||
print F ("$date [add.pl] Suppression alias $alias\n");
|
||||
close F;
|
||||
}
|
||||
|
||||
}
|
||||
|
||||
$ldap->unbind;
|
||||
|
||||
}
|
||||
|
||||
# modification d'un password
|
||||
sub passwd() {
|
||||
|
||||
printf("Entrez le compte pour réinitialiser le mot de passe : ");
|
||||
my $login = <STDIN>;
|
||||
chomp $login;
|
||||
|
||||
my $ldap = Net::LDAP->new($host) or die "$@";
|
||||
my $mesg = $ldap->bind($binddn,password => $password, version => 3);
|
||||
|
||||
my $result = $ldap->search(
|
||||
base => $dn,
|
||||
filter => "(uid=$login)",
|
||||
);
|
||||
$result->code && die $result->error;
|
||||
|
||||
print "Compte " . $result->entry(0)->get_value("uid") . " trouvé\n";
|
||||
|
||||
my $actiondn = 'uid=' . $login .',ou=people,'. $dn;
|
||||
|
||||
print "Entrez le nouveau mot de passe : ";
|
||||
ReadMode('noecho');
|
||||
my $pass = ReadLine(0);
|
||||
chomp $pass;
|
||||
ReadMode('normal');
|
||||
printf("\n");
|
||||
|
||||
# set SSHA1 LDAP passwd with http://www.taclug.org/documents/openldap_presentation.html
|
||||
my $ctx = Digest::SHA1->new;
|
||||
$ctx->add($pass);
|
||||
$ctx->add('salt');
|
||||
my $hashedPasswd = '{SSHA}' . encode_base64($ctx->digest . 'salt' ,'');
|
||||
|
||||
$ldap->modify( $actiondn, replace => { 'userPassword' => $hashedPasswd } );
|
||||
print "Réinitialisation password $login OK\n";
|
||||
|
||||
open F, ">>$file";
|
||||
print F ("$date [add.pl] Modification passwd sur le compte $login\n");
|
||||
close F;
|
||||
|
||||
$ldap->unbind;
|
||||
}
|
||||
|
||||
|
||||
# suppression d'un compte
|
||||
sub del()
|
||||
{
|
||||
printf("Entrez le compte a supprimer : ");
|
||||
my $login = <STDIN>;
|
||||
chomp $login;
|
||||
|
||||
# initialisation de la connexion LDAP
|
||||
my $ldap = Net::LDAP->new($host) or die "$@";
|
||||
my $mesg = $ldap->bind($binddn,password => $password, version => 3);
|
||||
|
||||
my $result = $ldap->search(
|
||||
base => $dn,
|
||||
filter => "(uid=$login)",
|
||||
);
|
||||
$result->code && die $result->error;
|
||||
if (! $result->entries) {
|
||||
$ldap->unbind;
|
||||
printf("Erreur, ce compte n'existe pas...\n"); exit;
|
||||
}
|
||||
|
||||
print "Compte " . $result->entry(0)->get_value("uid") . " trouvé\n";
|
||||
|
||||
my $dndelete = 'uid=' . $login .',ou=people,'. $dn;
|
||||
|
||||
$ldap->delete( $dndelete );
|
||||
print "Suppression de l'annuaire LDAP OK\n";
|
||||
|
||||
# On vire le $HOME
|
||||
my $day = $date;
|
||||
$day =~ s/ .*//;
|
||||
`mv /home/$login /home/$login.backup$day`;
|
||||
print "Suppression du repertoire /home/$login\n";
|
||||
|
||||
open F, ">>$file";
|
||||
print F ("$date, suppression compte $login\n");
|
||||
close F;
|
||||
|
||||
$ldap->unbind;
|
||||
}
|
||||
|
||||
|
||||
# main() : options possibles
|
||||
|
||||
my %options=();
|
||||
my $opt_string = 'hualmcdpx';
|
||||
getopts("$opt_string",\%options);
|
||||
|
||||
if ($options{h}) { &usage; }
|
||||
elsif ($options{u}) { &add; }
|
||||
elsif ($options{a}) { &aadd; }
|
||||
elsif ($options{l}) { &liste1; }
|
||||
elsif ($options{m}) { &liste2; }
|
||||
elsif ($options{c}) { &mod; }
|
||||
elsif ($options{d}) { &amod; }
|
||||
elsif ($options{p}) { &passwd; }
|
||||
elsif ($options{x}) { &del; }
|
||||
else { &usage; }
|
||||
|
||||
332
scripts/add-mail-virtual.pl
Executable file
332
scripts/add-mail-virtual.pl
Executable file
|
|
@ -0,0 +1,332 @@
|
|||
#!/usr/bin/perl -w
|
||||
|
||||
# Script de creation de compte mail/LDAP (cas virtuel)
|
||||
# Copyright (c) 2004-2009 Evolix - Tous droits reserves
|
||||
|
||||
use strict;
|
||||
use warnings;
|
||||
use diagnostics;
|
||||
|
||||
# Doc Net::LDAP
|
||||
# http://ldap.perl.org/
|
||||
# http://search.cpan.org/~gbarr/perl-ldap-0.33/lib/Net/LDAP.pod
|
||||
# http://search.cpan.org/~gbarr/perl-ldap/lib/Net/LDAP/Examples.pod
|
||||
# http://search.cpan.org/~gbarr/perl-ldap/lib/Net/LDAP/FAQ.pod
|
||||
# http://search.cpan.org/~gbarr/perl-ldap-0.33/lib/Net/LDAP/Extension/SetPassword.pm
|
||||
#
|
||||
# Doc Quota
|
||||
# http://search.cpan.org/~tomzo/Quota-1.5.1/Quota.pm
|
||||
|
||||
use Net::LDAP; # libnet-ldap-perl debian package
|
||||
use Getopt::Std;
|
||||
use Term::ReadKey; # libterm-readkey-perl debian package
|
||||
use MIME::Base64; #
|
||||
#use Digest::MD5; # libmd5-perl debian package
|
||||
use Digest::SHA1; # libdigest-sha1-perl debian package
|
||||
use MIME::Lite; # libmime-lite-perl debian package
|
||||
use Quota; # libquota-perl debian package
|
||||
|
||||
our $dn='dc=example,dc=com';
|
||||
our $host='127.0.0.1';
|
||||
our $binddn='cn=perl,ou=ldapuser,dc=example,dc=com';
|
||||
our $password='XXX';
|
||||
|
||||
our $adminmail='admin@example.com';
|
||||
|
||||
sub usage()
|
||||
{
|
||||
print STDERR << "EOF";
|
||||
|
||||
usage: $0 [-hud]
|
||||
|
||||
-h : aide
|
||||
-u : ajoute un compte
|
||||
-d : ajoute un domaine
|
||||
|
||||
EOF
|
||||
exit;
|
||||
}
|
||||
|
||||
sub execldap();
|
||||
{
|
||||
my $test;
|
||||
}
|
||||
|
||||
sub add()
|
||||
{
|
||||
printf("Entrez le mail a creer : ");
|
||||
my $mail = <STDIN>;
|
||||
chomp $mail;
|
||||
# TODO : Voir si le mail est correct...
|
||||
|
||||
printf("Entrez le mot de passe (vide pour aleatoire) : ");
|
||||
ReadMode('noecho');
|
||||
my $pass = ReadLine(0);
|
||||
chomp $pass;
|
||||
ReadMode('normal');
|
||||
printf("\n");
|
||||
|
||||
# Generation aleatoire
|
||||
if($pass eq "") {
|
||||
$pass = `apg -n1 -E oOlL10\&\\\/`;
|
||||
chomp $pass;
|
||||
print "Mot de passe pseudo-aleatoire genere : $pass\n";
|
||||
}
|
||||
|
||||
my ($login,$domain) = split(/@/,$mail);
|
||||
|
||||
my $ldap = Net::LDAP->new($host) or die "$@";
|
||||
my $mesg = $ldap->bind($binddn,password => $password, version => 3);
|
||||
|
||||
my $result = $ldap->search(
|
||||
base => $dn,
|
||||
filter => "(uid=$mail)",
|
||||
attrs => "mail"
|
||||
);
|
||||
$result->code && die $result->error;
|
||||
if ($result->entries) { printf("Erreur, ce compte mail existe deja...\n"); exit; }
|
||||
|
||||
# Voir si le domaine existe deja et recuperer son GID
|
||||
my $gid;
|
||||
$result = $ldap->search(
|
||||
base => $dn,
|
||||
filter => "(cn=$domain)",
|
||||
attrs => "postfixGID"
|
||||
);
|
||||
$result->code && die $result->error;
|
||||
|
||||
if ($result->count != 1) { printf("Erreur, ce domaine n'existe pas...\n"); exit;
|
||||
} else {
|
||||
my @entries = $result->entries;
|
||||
$gid = $entries[0]->get_value("postfixGID");
|
||||
}
|
||||
|
||||
# Recuperer le max(UID) +1
|
||||
$result = $ldap->search(
|
||||
base => $dn,
|
||||
filter => "(objectClass=vMailAccount)",
|
||||
attrs => "uidNumber"
|
||||
);
|
||||
$result->code && die $result->error;
|
||||
|
||||
my $uid = 10000; # Les virtual UIDs commencent a 10000
|
||||
my @entries = $result->entries;
|
||||
my $entr;
|
||||
foreach $entr (@entries) {
|
||||
if ( $entr->get_value("uidNumber") > $uid ) {
|
||||
$uid = $entr->get_value("uidNumber");
|
||||
}
|
||||
}
|
||||
$uid++;
|
||||
|
||||
# Ajouter l'enregistrement
|
||||
my $ctx = Digest::SHA1->new;
|
||||
$ctx->add($pass);
|
||||
$ctx->add('salt');
|
||||
my $hashedPasswd = '{SSHA}' . encode_base64($ctx->digest . 'salt' ,'');
|
||||
$result = $ldap->add( 'uid='. $mail .',cn=' . $domain .','. $dn ,
|
||||
attr => [
|
||||
'mail' => $mail,
|
||||
'cn' => $mail,
|
||||
'mailacceptinggeneralid' => $mail,
|
||||
'objectclass' => ['organizationalRole','posixAccount','mailAccount'],
|
||||
'uidNumber' => $uid,
|
||||
'gidNumber' => $gid,
|
||||
'userPassword' => $hashedPasswd,
|
||||
'isActive' => 'TRUE',
|
||||
'courierActive' => 'TRUE',
|
||||
'accountActive' => 'TRUE',
|
||||
'webmailActive' => 'TRUE',
|
||||
'authsmtpActive' => 'FALSE',
|
||||
'homeDirectory' => "/home/$domain/$login/",
|
||||
'amavisSpamTagLevel' => '-1999.0',
|
||||
'amavisSpamTag2Level' => '6.3'
|
||||
]
|
||||
);
|
||||
|
||||
$mesg->code && die $mesg->error;
|
||||
$ldap->unbind;
|
||||
|
||||
# HOMEDIR (obsolete ?)
|
||||
#mkdir "/home/vmail/$domain/$login/",0700 ;
|
||||
#chown $uid,$gid,"/home/vmail/$domain/$login/";
|
||||
|
||||
# mail
|
||||
my $msg = MIME::Lite->new(
|
||||
From => $adminmail,
|
||||
To => $mail,
|
||||
CC => '',
|
||||
Subject => "Creation du compte",
|
||||
Type => 'TEXT',
|
||||
Data => "Ceci est un mail d'initialisation de votre compte."
|
||||
);
|
||||
|
||||
MIME::Lite->send('smtp', "localhost", Timeout=>60);
|
||||
$msg -> send;
|
||||
|
||||
# QUOTA
|
||||
Quota::setqlim(Quota::getqcarg("/home"), $uid, 102400, 153600, 0, 0, 1, 0);
|
||||
|
||||
# HTML > PS > PDF
|
||||
my $html;
|
||||
open(FILE,">param-mail.html") or die("erreur, ouverture fichier html");
|
||||
print FILE <<EOF;
|
||||
|
||||
<html>
|
||||
<title>Paramètres hébergement mail</title>
|
||||
</head>
|
||||
<body>
|
||||
|
||||
<img src="logo_care_5_ecran.png">
|
||||
|
||||
<center><h1>Paramètres hébergement mail</h1></center>
|
||||
|
||||
<h2>Vos paramètres</h2>
|
||||
|
||||
<p>Voici vos paramètres à retenir :</p>
|
||||
|
||||
<center>
|
||||
<table border="1">
|
||||
<tr><td align="right">Identifiant :</td><td><strong>$mail</strong></td></tr>
|
||||
<tr><td align="right">Mot de passe :</td><td><strong>$pass</strong></td></tr>
|
||||
</table>
|
||||
</center>
|
||||
|
||||
<p>Votre quota actuel est de 100 Mo.
|
||||
Votre boîte aux lettres est dotée d'une protection Antivirus et Antispam.</p>
|
||||
|
||||
<h2>Détails pour l'utilisation</h2>
|
||||
|
||||
<p>Vous pouvez envoyer et consulter vos mails par un webmail securisé à l'adresse :</p>
|
||||
|
||||
<strong>http://webmail.example.com/</strong>
|
||||
|
||||
<p>Vous pouvez également consulter votre messagerie avec votre logiciel
|
||||
habituel de messagerie (Microsoft Outlook, Mozilla Thunderbird, etc.)
|
||||
avec le protocole POP ou IMAP en précisant comme adresse de serveur :</p>
|
||||
<strong>mail.example.com</strong>
|
||||
|
||||
<p>Vous pouvez aussi utiliser un serveur SMTP
|
||||
<u>authentifié</u> en précisant l'adresse du serveur :</p>
|
||||
<strong>mail.example.com</strong>
|
||||
|
||||
<p>Notez bien qu'il faut utiliser l'authentification SMTP sinon cela ne
|
||||
fonctionnera pas (il faut souvent cocher une case du type "mon serveur
|
||||
recquiert une authentification").</p>
|
||||
|
||||
<p>Enfin, notez qu'il est fortement recommandé d'utiliser une connexion
|
||||
sécurisée pour tous les protocoles cités auparavant (POP, IMAP ou encore SMTP).</p>
|
||||
|
||||
<h2>Support</h2>
|
||||
|
||||
<p>Pour toute précision vous pouvez consulter site :</p>
|
||||
<strong>http://www.evolix.fr/serv/hebergement/mail.html</strong>
|
||||
|
||||
<p>ou nous contacter à l'adresse :</p>
|
||||
<strong>$adminmail</strong>
|
||||
|
||||
</body>
|
||||
</html>
|
||||
EOF
|
||||
|
||||
close(FILE);
|
||||
system("cd /usr/share/scripts && html2ps param-mail.html > param-mail.ps && ps2pdf param-mail.ps");
|
||||
|
||||
# mail
|
||||
$msg = MIME::Lite->new(
|
||||
From => $adminmail,
|
||||
To => $adminmail,
|
||||
Subject => "Creation du compte $mail",
|
||||
Type => 'multipart/mixed',
|
||||
);
|
||||
|
||||
my $data;
|
||||
$data = "Bonjour,\n\nVeuillez trouvez vos parametres mail en piece jointe (PDF).\n\n";
|
||||
$data .= "Cordialement,\n--\nEquipe Informatique <$adminmail>\n";
|
||||
|
||||
$msg->attach(Type =>'TEXT',
|
||||
Data => $data
|
||||
);
|
||||
$msg->attach(Type => 'application/pdf',
|
||||
Path => '/usr/share/scripts/param-mail.pdf',
|
||||
Filename => 'param-mail.pdf',
|
||||
Disposition => 'attachment'
|
||||
);
|
||||
|
||||
MIME::Lite->send('smtp', "localhost", Timeout=>60);
|
||||
$msg -> send;
|
||||
|
||||
printf("Ajout OK\n");
|
||||
}
|
||||
|
||||
sub gadd()
|
||||
{
|
||||
printf("Entrez le domaine a creer : ");
|
||||
my $domain = <STDIN>;
|
||||
chomp $domain;
|
||||
# TODO : Voir si le domaine est correct...
|
||||
|
||||
my $ldap = Net::LDAP->new($host) or die "$@";
|
||||
my $mesg = $ldap->bind($binddn,password => $password, version => 3);
|
||||
|
||||
my $result = $ldap->search(
|
||||
base => $dn,
|
||||
filter => "(cn=$domain)",
|
||||
attrs => "gidNumber"
|
||||
);
|
||||
$result->code && die $result->error;
|
||||
if ($result->entries) { printf("Erreur, ce domaine existe deja...\n"); exit; }
|
||||
|
||||
# Recuperer le max(GID) +1
|
||||
$result = $ldap->search(
|
||||
base => $dn,
|
||||
filter => "(objectClass=postfixDomain)",
|
||||
attrs => "gidNumber"
|
||||
);
|
||||
$result->code && die $result->error;
|
||||
|
||||
my $gid = 10000; # Les virtual GIDs commencent a 10000
|
||||
my @entries = $result->entries;
|
||||
my $entr;
|
||||
foreach $entr (@entries) {
|
||||
if ( $entr->get_value("gidNumber") > $gid ) {
|
||||
$gid = $entr->get_value("gidNumber");
|
||||
}
|
||||
}
|
||||
$gid++;
|
||||
|
||||
# Ajouter l'enregistrement
|
||||
$result = $ldap->add( 'cn='. $domain .','. $dn ,
|
||||
attr => [
|
||||
'cn' => $domain,
|
||||
'objectclass' => ['postfixDomain','posixGroup'],
|
||||
'gidNumber' => $gid,
|
||||
'isActive' => 'TRUE',
|
||||
'postfixTransport' => 'virtual:'
|
||||
]
|
||||
);
|
||||
|
||||
$mesg->code && die $mesg->error;
|
||||
$ldap->unbind;
|
||||
|
||||
# HOMEDIR
|
||||
mkdir "/home/vmail/$domain/",0770 ;
|
||||
chown 127,$gid,"/home/vmail/$domain/";
|
||||
chmod 0770,"/home/vmail/$domain/";
|
||||
|
||||
# QUOTA
|
||||
Quota::setqlim(Quota::getqcarg("/home"), $gid, 1024000, 1536000, 0, 0, 1, 1);
|
||||
|
||||
printf("Ajout OK\n");
|
||||
|
||||
}
|
||||
|
||||
# main() : options possibles
|
||||
|
||||
my %options=();
|
||||
my $opt_string = 'hud';
|
||||
getopts("$opt_string",\%options);
|
||||
&usage() if $options{h};
|
||||
&add() if $options{u};
|
||||
&gadd() if $options{d};
|
||||
|
||||
Loading…
Reference in a new issue