Exocore Consulting (www.exocore.com) in who's time and money, I wrote this stuff, and who are nice enough to give it to everybody.

LDAPUtils is a set of perl scripts for creating/deleting/managing users and groups stored in an LDAP directory. As of this release, user objects created will include fields compatible with samba-tng in its current CVS release. This allows a single authentication database for unix and windows domain logins.

This is the first release I am releasing publically. To prevent conflicts (and overambitious early goals) I am renaming all the utilities with the prefix "l" (e.g. luseradd)

This release adds significant functionality in the form of supporting creation of samba-tng compatible LDAP entries allowing unified domain logins for unix users and windows domains. LDAPUtils will always create entries with both types of fields, but I will add a configuration file switch to disable this in the future.

The currently working scripts are :
luseradd
luserdel
lgroupadd
lgroupdel
lpasswd
lchfn
ntadd

All these scripts should work out of the box on a RH6.2 system. I've not had the opportunity to test them on any other distro, but all that should need changing are (what may be) redhat specific files such as /etc/default/useradd, /etc/login.defs etc.

All scripts mimics the standard behaviour of the standard utilites, with a few small (and irritating differences). For one, if you have more than one parameter to any script (eg. luseradd username -g popusers), you will have to change that to "luseradd -U username -g popusers". However "luseradd username" still works... lchfn is a bit different at the moment. It doesn't ask for telephone numbers and stuff yet.

You'll figure out the idiosyncracies for yourself, none should be show stoppers though...

CAVEAT: I'm using a very simple uid->rid mechanism which computes rid's as the hex value of uid's. This is wrong, and needs to be corrected. I will do so in the next version. Currently be careful of uid's conflicting with the Administrator(500,1f4) and nobody(1f5) accounts.