summaryrefslogtreecommitdiff
path: root/community_modules/ldap/ldap_openldap.sh
blob: bfe8a858ac45bb6420b55efabd158f06b326f510 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
#!/bin/bash
# Module: ldap_openldap
# Description: Realiza búsquedas filtradas en servidores OpenLDAP usando ldapsearch
# License: GPLv3
# Author: Luis GuLo
# Version: 1.1.0
# Dependencies: ldapsearch

ldap_openldap_task() {
  local host="$1"
  shift

  check_dependencies_ldap_openldap || return 1

  local state="" server="" port="389" base_dn="" filter="" attributes="" bind_dn="" password=""
  for arg in "$@"; do
    case "$arg" in
      state=*) state="${arg#state=}" ;;
      server=*) server="${arg#server=}" ;;
      port=*) port="${arg#port=}" ;;
      base_dn=*) base_dn="${arg#base_dn=}" ;;
      filter=*) filter="${arg#filter=}" ;;
      attributes=*) attributes="${arg#attributes=}" ;;
      bind_dn=*) bind_dn="${arg#bind_dn=}" ;;
      password=*) password="${arg#password=}" ;;
    esac
  done

  # 🌐 Cargar traducciones
  local lang="${shflow_vars[language]:-es}"
  local trfile="$(dirname "${BASH_SOURCE[0]}")/ldap_openldap.tr.${lang}"
  declare -A tr
  if [[ -f "$trfile" ]]; then while IFS='=' read -r k v; do tr["$k"]="$v"; done < "$trfile"; fi

  if [[ "$state" != "search" ]]; then
    echo "$(render_msg "${tr[unsupported_state]}" "state=$state")"
    return 1
  fi

  if [[ -z "$server" || -z "$base_dn" || -z "$filter" ]]; then
    echo "${tr[missing_args]:-❌ [ldap_openldap] Faltan argumentos obligatorios: server, base_dn, filter}"
    return 1
  fi

  echo "$(render_msg "${tr[connecting]}" "server=$server" "port=$port")"
  local cmd=(ldapsearch -x -H "$server:$port")
  [[ -n "$bind_dn" && -n "$password" ]] && cmd+=(-D "$bind_dn" -w "$password")
  cmd+=(-b "$base_dn" "$filter")
  [[ -n "$attributes" ]] && IFS=',' read -ra attr_list <<< "$attributes" && cmd+=("${attr_list[@]}")

  if "${cmd[@]}" 2>/tmp/ldap_error.log | grep -E '^(dn:|cn:|mail:|uid:)' ; then
    echo "${tr[success]:-✅ [ldap_openldap] Búsqueda completada con éxito}"
  else
    echo "${tr[no_results]:-⚠️ [ldap_openldap] No se encontraron resultados o hubo un error}"
    cat /tmp/ldap_error.log
    return 1
  fi
}

check_dependencies_ldap_openldap() {
  local lang="${shflow_vars[language]:-es}"
  local trfile="$(dirname "${BASH_SOURCE[0]}")/ldap_openldap.tr.${lang}"
  declare -A tr
  if [[ -f "$trfile" ]]; then while IFS='=' read -r k v; do tr["$k"]="$v"; done < "$trfile"; fi

  if ! command -v ldapsearch &>/dev/null; then
    echo "${tr[missing_dep]:-❌ [ldap_openldap] El comando 'ldapsearch' no está disponible}"
    return 1
  fi
  echo "${tr[deps_ok]:-✅ [ldap_openldap] Dependencias OK}"
  return 0
}