check record

byran cheung · 09-22-2013, 10:45 AM

I would like to write a shell script to do the following , would advise how to make it ? very thanks

1. Connect LDAP server ( Id : user , password : pass )
2. check the field "user_account_create_date" in the LDAP server , the format of data in this field in LDAP is ABC20130922 ( 22 Sep , 2013) , find the record in this field to check last 8 digits , if the date is within 7 days ( that mean the account is created within 7 days ), then do ...

could advise what to make this script ?

thanks

sxa · 09-22-2013, 11:31 PM

Hello Bryan,

If you are new to bash scripting, a great place to start is the bash guide for beginners found at http://www.tldp.org/LDP/Bash-Beginne...ers-Guide.html

As for the specific script that you want, the following is an LDAP Query Script that might give you the baseline for accomplishing what you need http://daverdave.com/node/9

byran cheung · 09-22-2013, 11:41 PM

Quote:

Originally Posted by sxa

Hello Bryan,

If you are new to bash scripting, a great place to start is the bash guide for beginners found at http://www.tldp.org/LDP/Bash-Beginne...ers-Guide.html

As for the specific script that you want, the following is an LDAP Query Script that might give you the baseline for accomplishing what you need http://daverdave.com/node/9

Hi sxa ,

I am new to shell writing , would you please advise a simple sample ? thanks

sxa · 09-23-2013, 12:38 AM

Below is a sample bash script using ldapsearch, I don't have access to an LDAP server at the moment to test the ldapsearch command, but this will find all users that were created since the timestamp. Using the date command we look for the time stamp exactly 7 days from your current system date.

Again, you will need to modify the ldapsearch command with your proper IP and credentials for your LDAP server but this will output the users that have been created since the timestamp to the specified.

You said you want to do an action against these users, you would want to start by researching the various ways to read files in bash. You don't specify what action you want to do take, and the best approach will vary based on that action, but I hope this and the links provided will give you a starting point.

Code:

#!/bin/bash

timestamp = `date --date="-7 days" +%Y%m%d%k%m%S`Z

ldapsearch -h 192.168.1.100 -p 389 -D cn=admin,o=services -w pass -x
"(&(objectclass=*)(createTimestamp>=$timestamp))" + > /tmp/users.txt

byran cheung · 09-23-2013, 04:30 AM

Quote:

Originally Posted by sxa

Below is a sample bash script using ldapsearch, I don't have access to an LDAP server at the moment to test the ldapsearch command, but this will find all users that were created since the timestamp. Using the date command we look for the time stamp exactly 7 days from your current system date.

Again, you will need to modify the ldapsearch command with your proper IP and credentials for your LDAP server but this will output the users that have been created since the timestamp to the specified.

You said you want to do an action against these users, you would want to start by researching the various ways to read files in bash. You don't specify what action you want to do take, and the best approach will vary based on that action, but I hope this and the links provided will give you a starting point.

Code:

#!/bin/bash

timestamp = `date --date="-7 days" +%Y%m%d%k%m%S`Z

ldapsearch -h 192.168.1.100 -p 389 -D cn=admin,o=services -w pass -x
"(&(objectclass=*)(createTimestamp>=$timestamp))" + > /tmp/users.txt

thx reply ,

could advise if I would like to check the date string ( as the above question ) , what can I do ? thanks

byran cheung · 09-25-2013, 01:09 AM

About the above requirement 2 " check the field "user_account_create_date" in the LDAP server , the format of data in this field in LDAP is ABC20130922 ( 22 Sep , 2013) , find the record in this field to check last 8 digits , if the date is within 7 days ( that mean the account is created within 7 days ), then do ..." ,

how to write this part of script ? anyone can advise , thanks