{"id":1242,"date":"2017-04-07T18:57:01","date_gmt":"2017-04-07T17:57:01","guid":{"rendered":"http:\/\/diablo.craem.net\/?p=1242"},"modified":"2017-04-07T18:57:01","modified_gmt":"2017-04-07T17:57:01","slug":"automatizar-anadir-varias-maquinas-debian-al-ldap","status":"publish","type":"post","link":"https:\/\/diablo.craem.net\/?p=1242","title":{"rendered":"Automatizar a\u00f1adir varias m\u00e1quinas debian al ldap"},"content":{"rendered":"

Esta vez, ten\u00ed\u00ada que automatizar la entrada anterior y a\u00f1adir varias m\u00e1quinas al ldap para login.<\/p>\n

Como no me hac\u00eda especial ilusi\u00f3n modificar todos los ficheros a mano, tenemos al amigo bash + sed.<\/p>\n

al lio:<\/p>\n


\n#!\/bin\/bash<\/code><\/p>\n

<\/code><\/code><\/p>\n

# ########################
# ### by craem ###########
# ########################
# ########################<\/p>\n

<\/code><\/code><\/p>\n

function instala_paquetes(){
echo \u00ab————————————————————\u00ab
echo \u00abaptitude -y install libnss-ldap libpam-ldap ldap-utils sudo \u00ab
aptitude -y install libnss-ldap libpam-ldap ldap-utils sudo
}<\/p>\n

<\/code><\/code><\/p>\n

function modifica_ficheros(){
echo \u00ab— modificamos fichero nsswitch.conf ———————–\u00ab
sed -ie ‘s\/compat\/ldap compat\/g’ \/etc\/nsswitch.conf
echo \u00ab— modificamos el fichero common-session ——————-\u00ab
echo \u00absession required pam_mkhomedir.so skel=\/etc\/skel umask=0022\u00bb >> \/etc\/pam.d\/common-session
echo \u00ab— reiniciamos el servicio nscd —————————-\u00ab
\/etc\/init.d\/nscd restart
echo \u00ab— modificamos el sudoers ———————————-\u00ab
echo \u00ab%admin_users ALL=(ALL) ALL\u00bb >> \/etc\/sudoers
echo \u00ab— modificamos el fichero common-auth ———————-\u00ab
echo \u00abauth required pam_access.so\u00bb >> \/etc\/pam.d\/common-auth
echo \u00ab— modificamos el access.conf ——————————\u00ab
echo \u00ab-:ALL EXCEPT root (admin_users):ALL EXCEPT LOCAL\u00bb >> \/etc\/security\/access.conf
echo \u00ab— modificamos el fichero ldap.conf ————————\u00ab
sed -ie ‘s\/#BASE dc=example,dc=com\/BASE dc=craem,dc=net\/g’ \/etc\/ldap\/ldap.conf
echo \u00ab— modificamos el ldap.conf ——————————–\u00ab
echo \u00abURI ldap:\/\/ldap.craem.net\u00bb >> \/etc\/ldap\/ldap.conf
echo \u00ab— fin del script ——————————————\u00ab<\/p>\n

<\/code><\/code><\/p>\n

}
instala_paquetes
modifica_ficheros<\/p>\n

\n<\/code><\/p>\n

<\/code><\/p>\n\n

<\/p>\n","protected":false},"excerpt":{"rendered":"

Esta vez, ten\u00ed\u00ada que automatizar la entrada anterior y a\u00f1adir varias m\u00e1quinas al ldap para login. Como no me hac\u00eda especial ilusi\u00f3n modificar todos los ficheros a mano, tenemos al amigo bash + sed. al lio: #!\/bin\/bash # ######################### ### by craem ############ ######################### ######################## function instala_paquetes(){echo \u00ab————————————————————\u00abecho \u00abaptitude -y install libnss-ldap libpam-ldap ldap-utils sudo […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[5],"tags":[58,100],"class_list":["post-1242","post","type-post","status-publish","format-standard","hentry","category-linux","tag-debian","tag-ldap"],"_links":{"self":[{"href":"https:\/\/diablo.craem.net\/index.php?rest_route=\/wp\/v2\/posts\/1242","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/diablo.craem.net\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/diablo.craem.net\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/diablo.craem.net\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/diablo.craem.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1242"}],"version-history":[{"count":0,"href":"https:\/\/diablo.craem.net\/index.php?rest_route=\/wp\/v2\/posts\/1242\/revisions"}],"wp:attachment":[{"href":"https:\/\/diablo.craem.net\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1242"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/diablo.craem.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1242"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/diablo.craem.net\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1242"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}