DragonSlayer_14/Linux-Active-Directory-join-script
1
0
Fork 0
mirror of https://github.com/PierreGode/Linux-Active-Directory-join-script.git synced 2025-12-21 08:50:12 +01:00
Code Issues Packages Projects Releases Wiki Activity

Update ADconnection.sh

Browse Source
This commit is contained in:
PierreGode 2020-04-27 23:19:06 +02:00 committed by GitHub
parent 3c88cde1d2
commit f02d992334
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 14 additions and 14 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

28
ADconnection.sh
View File

@ -261,8 +261,8 @@ sasl=$( sudo grep LDAPS readfile | awk '{print $3}' )
then echo "No root CA found, check your path to file" then echo "No root CA found, check your path to file"
else else
echo "Applied config from readfile" echo "Applied config from readfile"
sed -i "/krb5_realm = /a ldap_uri = $LdapsDC" /etc/sssd/sssd.conf sed -i "/krb5_realm = /a ldap_uri = $sasl" /etc/sssd/sssd.conf
sed -i "/krb5_realm = /a ldap_tls_cacert = $cacert" /etc/sssd/sssd.conf sed -i "/krb5_realm = /a ldap_tls_cacert = $cacer" /etc/sssd/sssd.conf
echo "Applied config from readfile" echo "Applied config from readfile"
fi fi
fi fi
@ -277,9 +277,9 @@ cacert=$( ls /usr/share/ca-certificates/root/ | grep .cer | head -1 )
echo "Type in address of your Domaincontroller: ex: dc01.com" echo "Type in address of your Domaincontroller: ex: dc01.com"
read -r yourDC read -r yourDC
clear clear
LdapsDC=$( echo "ldaps://"$yourDC":636" ) sasl=$( echo "ldaps://"$yourDC":636" )
echo "DC sssd configuration will be $LdapsDC" echo "DC sssd configuration will be $sasl"
echo "Found certificate $cacert" echo "Found certificate $cacer"
read -r -p "Is this information correct (y/n)?" yn read -r -p "Is this information correct (y/n)?" yn
case $yn in case $yn in
[Yy]* ) [Yy]* )
@ -289,8 +289,8 @@ tlsca=$( sudo grep ldap_tls_cacert /etc/sssd/sssd.conf | awk '{print $1}' )
echo "ldap_tls_cacert already in file" echo "ldap_tls_cacert already in file"
exit 1 exit 1
else else
sed -i "/krb5_realm = /a ldap_uri = $LdapsDC" /etc/sssd/sssd.conf sed -i "/krb5_realm = /a ldap_uri = $sasl" /etc/sssd/sssd.conf
sed -i "/krb5_realm = /a ldap_tls_cacert = $cacert" /etc/sssd/sssd.conf sed -i "/krb5_realm = /a ldap_tls_cacert = $cacer" /etc/sssd/sssd.conf
#sed -i -e 's/id_provider = ad/id_provider = ldap/g' /etc/sssd/sssd.conf # failing line: giving no on configured: and user is unable to update password. #sed -i -e 's/id_provider = ad/id_provider = ldap/g' /etc/sssd/sssd.conf # failing line: giving no on configured: and user is unable to update password.
sudo service sssd restart sudo service sssd restart
fi;; fi;;
@ -600,8 +600,8 @@ sasl=$( sudo grep LDAPS readfile | awk '{print $3}' )
then echo "No root CA found, check your path to file" then echo "No root CA found, check your path to file"
else else
echo "Applied config from readfile" echo "Applied config from readfile"
sed -i "/krb5_realm = /a ldap_uri = $LdapsDC" /etc/sssd/sssd.conf sed -i "/krb5_realm = /a ldap_uri = $sasl" /etc/sssd/sssd.conf
sed -i "/krb5_realm = /a ldap_tls_cacert = $cacert" /etc/sssd/sssd.conf sed -i "/krb5_realm = /a ldap_tls_cacert = $cacer" /etc/sssd/sssd.conf
echo "Applied config from readfile" echo "Applied config from readfile"
fi fi
fi fi
@ -616,9 +616,9 @@ cacert=$( ls /usr/share/ca-certificates/root/ | grep .cer | head -1 )
echo "Type in address of your Domaincontroller: ex: dc01.com" echo "Type in address of your Domaincontroller: ex: dc01.com"
read -r yourDC read -r yourDC
clear clear
LdapsDC=$( echo "ldaps://"$yourDC":636" ) sasl=$( echo "ldaps://"$yourDC":636" )
echo "DC sssd configuration will be $LdapsDC" echo "DC sssd configuration will be $sasl"
echo "Found certificate $cacert" echo "Found certificate $cacer"
read -r -p "Is this information correct (y/n)?" yn read -r -p "Is this information correct (y/n)?" yn
case $yn in case $yn in
[Yy]* ) [Yy]* )
@ -628,8 +628,8 @@ tlsca=$( sudo grep ldap_tls_cacert /etc/sssd/sssd.conf | awk '{print $1}' )
echo "ldap_tls_cacert already in file" echo "ldap_tls_cacert already in file"
exit 1 exit 1
else else
sed -i "/krb5_realm = /a ldap_uri = $LdapsDC" /etc/sssd/sssd.conf sed -i "/krb5_realm = /a ldap_uri = $sasl" /etc/sssd/sssd.conf
sed -i "/krb5_realm = /a ldap_tls_cacert = $cacert" /etc/sssd/sssd.conf sed -i "/krb5_realm = /a ldap_tls_cacert = $cacer" /etc/sssd/sssd.conf
#sed -i -e 's/id_provider = ad/id_provider = ldap/g' /etc/sssd/sssd.conf # failing line: giving no on configured: and user is unable to update password. #sed -i -e 's/id_provider = ad/id_provider = ldap/g' /etc/sssd/sssd.conf # failing line: giving no on configured: and user is unable to update password.
sudo service sssd restart sudo service sssd restart
fi;; fi;;