ad

Author: alainabbas

README.md

@@ -63,7 +63,12 @@ Vous etes pret
 docker exec sesame-daemon yarn start:dev
 ````
 
+### complation du daemon en un executable 
 
+```
+#npm i -g pkg
+#pkg dist/main.js -o sesame-daemon
+```
 
 ### Installation système 
 #### Debian

backends/01ad/README.md

@@ -0,0 +1,8 @@
+# Backend AD 
+## Installation 
+### Debian 
+```
+#apr-get install jq	
+``` 
+
+

backends/01ad/bin/changepasswd

@@ -0,0 +1,15 @@
+#!/bin/bash
+JSON=`cat -`
+DIR=`dirname $0`
+. $DIR/../etc/config.conf
+USER=`echo $JSON|jq -r '.uid'`
+OLDPWD=`echo $JSON|jq -r '.oldPassword'`
+NEWPWD=`echo $JSON|jq -r '.newPassword'`
+# copy script ps1
+scp $DIR/changepassword.ps1 $SSH:.
+ERRORFILE=/tmp/sesame-backend-ad-$$
+ssh $SSH "chcp 65001 >NUL && powershell -ExecutionPolicy Bypass -NonInteractive -File changepassword.ps1 $USER $OLDPWD $NEWPWD" 2>$ERRORFILE
+ERR=$?
+cat $ERRORFILE| tr -d "\r\n" |cut -d'|' -f2 1>&2
+rm -f $ERRORFILE
+exit $ERR

backends/01ad/bin/changepassword.ps1

@@ -0,0 +1,23 @@
+param (
+    [string]$user,
+    [string]$oldp,
+    [string]$newp
+)
+$ErrorActionPreference = 'Continue'
+try{
+Set-ADUser -Identity $user -CannotChangePassword $false
+Set-ADAccountPassword -Identity $user -OldPassword (ConvertTo-SecureString -AsPlainText $oldp -Force) -NewPassword (ConvertTo-SecureString -AsPlainText $newp -Force)
+$r=0
+$erreur=""
+}catch{
+$erreur=$_.Exception.Message
+$r=2
+}
+Set-ADUser -Identity $user -CannotChangePassword $true
+if ($r -ne 0){
+	$ErrorActionPreference = 'Continue'
+	write-Error "| $erreur |"
+}else{
+write-output "OK"
+}
+Exit $r

backends/01ad/config.yml

@@ -0,0 +1,17 @@
+
+name: 'AD'
+description: 'Backend for AD'
+active: 1
+actions:
+  CHANGEPWD:
+      exec: "changepasswd"
+      onError: 'stop'
+  ADDIDENT:
+      exec: 'dummy.sh'
+  UPDATEIDENT:
+      exec: 'dummy.sh'
+  DELIDENT:
+      exec: 'dummy.sh'
+  PING:
+      exec: 'ping.sh'
+

backends/01ad/etc/config.conf

@@ -0,0 +1,4 @@
+#!/bin/sh
+
+SSH=administrateur@***REMOVED***
+

backends/openldap/README.md backends/02openldap/README.mdbackends/openldap/README.md renamed to backends/02openldap/README.md

@@ -1,7 +1,7 @@
 
 name: 'openldap'
 description: 'Backend for openldap'
-active: 1
+active: 0
 actions:
   CHANGEPWD:
       exec: "changepasswd"

backends/openldap/bin/changepasswd backends/02openldap/bin/changepasswdbackends/openldap/bin/changepasswd renamed to backends/02openldap/bin/changepasswd

@@ -1,7 +1,5 @@
 #!/bin/sh
 echo "Hello Word"
-sleep 2
-echo "j'ai recu :"
-cat -
-echo "je provoque une erreur " >&2
-exit 255
+
+echo  dir : `dirname $0`
+exit 0