aboutsummaryrefslogtreecommitdiff
path: root/handlers/ldap
blob: 9ec48a729a96e99da832a1f5f601fc9ee4ba254b (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
# -*- mode: sh; sh-basic-offset: 8; indent-tabs-mode: nil; -*-
#
# openldap backup handler script for backupninja
#

getconf backupdir /var/backups/ldap
getconf conf /etc/ldap/slapd.conf
getconf databases all
getconf compress yes
getconf ldif yes
getconf restart no
getconf method ldapsearch
getconf passwordfile
getconf binddn

status="ok"

[ -f $conf ] || fatal "slapd config file ($conf) not found"
[ -d $backupdir ] || mkdir -p $backupdir
[ -d $backupdir ] || fatal "Backup directory '$backupdir'"

dbsuffixes=(`awk 'BEGIN {OFS=":"} /[:space:]*^database[:space:]*\w*/ {db=$2}; /^[:space:]*suffix[:space:]*\w*/ {if (db=="bdb"||db=="ldbm") print db,$2}' $conf|sed -e 's/[" ]//g'`)

## LDIF DUMP

if [ "$ldif" == "yes" ]; then
	dumpdir="$backupdir"
	[ -d $dumpdir ] || mkdir -p $dumpdir

	if [ "$databases" == 'all' ]; then
		dbcount=`grep '^database' $conf | wc -l`
		let "dbcount = dbcount - 1"
		databases=`seq 0 $dbcount`;
	fi	
	
	for db in $databases; do
		if [ `expr index "$dbnum" "="` == "0" ]; then
			# db is a number, get the suffix.
			dbsuffix=${dbsuffixes[$db]/*:/}
		else
			dbsuffix=$db
		fi
		# some databases don't have suffix (like monitor), skip these
		if [ "$dbsuffix" == "" ]; then
			continue;
		fi

		if [ "$method" == "slapcat" ]; then
			execstr="$SLAPCAT -f $conf -b $dbsuffix"
			debug "$execstr"
		else
			execstr="$LDAPSEARCH -x -L -b ""$dbsuffix"" -D ""$binddn"" -y $passwordfile"
			[ -f "$passwordfile" ] || fatal "Password file $passwordfile not found. When method is set to ldapsearch, you must also specify a password file."
			debug "$execstr"
		fi
		if [ ! $test ]; then
			if [ "$restart" == "yes" ]; then
				debug "Shutting down ldap server..."
				/etc/init.d/slapd stop
			fi

			touch $dumpdir/$dbsuffix.ldif
			if [ ! -f $dumpdir/$dbsuffix.ldif ]; then
				fatal "Couldn't create ldif dump file: $dumpdir/$dbsuffix.ldif"
			fi

			output=`$execstr > $dumpdir/$dbsuffix.ldif`
			code=$?
			if [ "$code" == "0" ]; then
				debug $output
				info "Successfully finished ldif export of $dbsuffix"
			else
				warning $output
				warning "Failed ldif export of $dbsuffix"
			fi
			if [ "$compress" == "yes" ]; then
				output=`$GZIP -f "$dumpdir/$dbsuffix.ldif" 2>&1`
				debug $output
			fi

			if [ "$restart" == "yes" ]; then
				debug "Starting ldap server..."
				/etc/init.d/slapd start
			fi
		fi
	done	
fi

return 0