From: rubin <redacted>
Date: Fri, 9 Feb 2007 03:20:00 +0000 (+0000)
Subject: adding some extra stuff we are using for ldap
X-Git-Tag: 1.9~367
X-Git-Url: https://jfr.im/git/irc/evilnet/x3.git/commitdiff_plain/bf7547765bbc5d5a2292b74da5ab2f4845a38d2e?hp=73d4cc91d7e6df980ab421c7b3b44dc94f0b396a

adding some extra stuff we are using for ldap
---

diff --git a/tools/ldap/inetorganon.schema b/tools/ldap/inetorganon.schema
new file mode 100644
index 0000000..4d91e4a
--- /dev/null
+++ b/tools/ldap/inetorganon.schema
@@ -0,0 +1,15 @@
+# This schema is a work in progress 
+#
+# on debian, you would copy it to your /etc/ldap/schema directory, and add an include for it in ldap.conf
+#
+objectclass    ( 1.3.6.1.4.2.111.114.103.46.97.102.116.101.114.110.101.116.1.10
+     NAME 'inetOrgAnonAccount'
+          DESC 'Anonymous Account'
+     STRUCTURAL
+         MAY (
+             mail $ displayName $ uidNumber $ gidNumber $ cn $ sn $ givenName $
+             userPassword $ title $ loginShell $ gecos $ displayName )
+         MUST (
+             uid )
+     )
+
diff --git a/tools/ldap/ldap_convert.php b/tools/ldap/ldap_convert.php
new file mode 100755
index 0000000..6136026
--- /dev/null
+++ b/tools/ldap/ldap_convert.php
@@ -0,0 +1,133 @@
+#!/usr/bin/php
+<?
+/*
+ *   This script is used to export users from x3.db to an ldap server
+ *   when initially converting to x3's ldap based authentication.
+ * 
+ *   Its expected you would modify and well-test this before running it on 
+ *   a production database. Use at your own risk!
+ *  
+ *   Edit the variables below first..
+ *
+ */
+/* -------------------------------------------- */;
+/* CONFIGURATION */
+/* -------------------------------------------- */;
+
+$db = "/home/you/x3/x3.db";
+$ldap_server = "localhost";
+$ldap_bind = "cn=admin,dc=afternet,dc=org";
+$ldap_pass = "yourpassword";
+$ldap_add = "ou=Users,dc=afternet,dc=org"; /* excludes the uid= part on purpose, dont add in */
+
+/* -------------------------------------------- */;
+
+echo "------------------------------------------\n";
+echo "X3 to LDAP dump script\n";
+echo "Copyright (C) 2007 evilnet development\n";
+echo "------------------------------------------\n\n";
+
+if (!extension_loaded('ldap'))
+    die("PHP Extension LDAP MUST be loaded before using this script.\n");
+
+$handle=fopen($db, r);
+$ns = 0;
+$add = 0;
+$parse = 0;
+
+if ($handle) {
+    echo "Connecting to ldap server\n";
+    $ds=ldap_connect($ldap_server);
+
+    if (!$ds)
+        die("Couldnt connect to ldap server\n");
+
+    echo "Switching to ldap protocol 3\n";
+    ldap_set_option($ds, LDAP_OPT_PROTOCOL_VERSION, 3);
+
+    echo "Binding to ldap server\n";
+    $r=ldap_bind($ds, $ldap_bind, $ldap_pass);
+    if (!$r)
+        die("LDAP bind error - ". ldap_error($ds) ."\n");
+
+    echo "Attempting to read $db\n";
+    while (!feof($handle)) {
+        $line = fgets($handle, 4096);
+        $line = trim($line);
+        $gotpass = 0;
+        $gotemail = 0;
+        $user = NULL;
+        $pass = NULL;
+        $email = NULL;
+        if ($line == "\"NickServ\" {") {
+            $ns = 1;
+            continue;
+        }
+
+        if ($line == "\"ChanServ\" {")
+            $ns = 0;
+
+        if ($ns == 1) {
+            $parse++;
+            $space = " ";
+            $exp = explode($space, $line);
+            $i = sizeof($exp);
+            $i--;
+            while ($exp[$i] != NULL) {
+                if (($exp[$i] == "\"passwd\"") && ($gotpass == 0)) {
+                    $pass = $exp[$i+1];
+                    $gotpass = 1;
+                }
+
+                if (($exp[$i] == "\"email_addr\"") && ($gotemail == 0)) {
+                    $email = $exp[$i+1];
+                    $gotemail = 1;
+                }
+                $i--;
+            }
+
+            $user = $exp[0];
+
+            $user = trim($user, "\";");
+            $pass = trim($pass, "\";");
+            $email = trim($email, "\";");
+            if ($user && $pass && $email && ($user != "}")) {
+                unset($info);
+
+                $info["objectclass"][] = "top";
+                $info["objectclass"][] = "inetOrgAnonAccount";
+                $info["uid"]=$user;
+                $info["mail"]=$email;
+                $info["userPassword"]='{MD5}'.base64_encode(pack('H*',$pass));
+
+#                $r=@ldap_add($ds, "uid=".$user.",$ldap_add", $info);
+                if ($r) {
+                    $add++;
+                    echo "Added $user (email: $email) (pass: $pass)\n";
+                    print_r($info);
+                } else
+                    echo "Failed adding $user (email: $email) (pass: $pass) - ". ldap_error($ds) ."\n";
+
+            } else if (!$user || !$pass || !$email) {
+                if (!$user && !$pass && !$email)
+                    continue; /* misc bits after entries */
+
+                if (($user == "}") && !$pass && !$email)
+                    continue; /* misc bits after entries */
+
+                echo "Missing fields from $db (User: $user Pass: $pass Email: $email)\n";
+            }
+
+        }
+    }
+} else 
+  die("Couldnt read $db\n");
+
+echo "Disconnecting from ldap server\n";
+ldap_close($ds);
+$parse--;
+$parse--;
+echo "Processed $parse accounts.\n";
+echo "Added $add accounts to the ldap server\n";
+
+?>