/importusers_alucasa.php

#!/usr/bin/php
<?php
include "conf/base.inc.php";
include BASE_DIR . "conf/include_ldap.inc.php";

#carga del objeto ldap

#base de busqueda en alucasa:
$basead = 'DC=PRODUCCION,DC=com';
$ad = ldap::load('active');
$ad->open();

#base de inserción y busqueda en mppef:
$basealucasa = 'cn=Usuarios,dc=alucasa,dc=com,dc=ve';
$alucasa = ldap::load('ldap');

#cargar los schemas (para razones de creacion y validacion de entradas)
#objeto unico dentro de todo el arbol LDAP
ldap_schema::setAdapter($alucasa);
#construyo el arbol:
ldap_schema::build();

#creo mi archivo de log de usuarios malos:
$file = new file();
$file->filename('usuariosalucasa-bad.ldif');
$file->open();

if ($alucasa->open()) {
	#busco los usuarios:
	#filtro de busqueda:
	$filter = "(&(objectClass=user)(samaccounttype=". ADS_NORMAL_ACCOUNT .")(samaccountname=*))";
	//$filter = "(&(objectClass=user)(samaccountname=*))";
	#primero, verificamos las unidades del MF:
	$entries = $ad->query($filter, $basead, 'sub');
	//var_dump($entries->attributes());
	$i = 0;
	$n = 0;
	$m = 0;
	foreach($entries as $entry) {
		$cn = $entry->cn;
		$sn = $entry->sn;
		$objsid = $entry->bin_to_str_sid('objectSid');
		$displayName = $entry->displayName;
		$user = strtolower($entry->get_attribute('sAMAccountName'));
		#Crear un usuario
		$uid = $alucasa->create($basealucasa);
		#Agrego los objectclasses efectivos de una entrada:
		$uid->addObjectclass('organizationalPerson');
		$uid->addObjectClass('inetOrgPerson');
		$uid->addObjectClass('sambaSamAccount');
		$uid->addObjectClass('qmailUser');
		$uid->addObjectClass('posixAccount');
		$uid->addObjectClass('shadowAccount');
		#atributo base de la entrada
		$uid->baseAttribute('cn');
		$uid->cn = $cn;
		$uid->uid = $user;
		$uid->gecos = $user;
		if (!$sn) {
			$uid->sn = $cn;
		} else {
			$uid->sn = $sn;
		}
		#atributos que cambian:
		if ($displayName) {
			$uid->displayName = $displayName;
		}
		# password
		$uid->userPassword = '{SSHA}xs/6rD8xXFNCGBAUzpx45z/+LsQ2erIF';
		#atributos que no cambian:
		$ou = $entry->physicalDeliveryOfficeName;
		if ($ou) {
			$uid->physicalDeliveryOfficeName = $ou;
		}
		$department = str_replace(',', '', $entry->department);
		if ($department) {
			$uid->ou = $department;
		}
		$company = str_replace(',', '', $entry->company);
		if ($company) {
			$uid->o = $company;
		}
		$givenName = $entry->givenName;
		if ($givenName) {
			$uid->givenName = $givenName;
		}
		$cn = $entry->get_attribute('cn');

		$tlf = $entry->get_attribute('telephoneNumber');
		if ($tlf) {
			$uid->telephoneNumber = $tlf;
		}
		$title = $entry->get_attribute('title');
		if($title) {
			$uid->title = $title;
		}
		$initials = $entry->get_attribute('initials');
		if ($initials) {
			$uid->initials = $initials;
		}
		$postal = $entry->get_attribute('postalCode');
		if ($postal) {
			$uid->postalCode = $postal;
		}
		#cuenta de correo alucasa:
		$uid->mail = "{$user}@alucasa.com.ve";

		#informacion:
		$uid->sambaSID = $objsid;

		$comment = $entry->get_attribute('comment');
		if ($comment) {
			$uid->description = $comment;
		}

		$lastLogon = $entry->get_attribute('lastLogon');
		if ($lastLogon) {
			$uid->sambaLogonTime = $lastLogon;
		}
		$id = $entry->get_attribute('primaryGroupID');
		if ($id) {
			$uid->sambaPrimaryGroupSID = $id;
		}
		$pwd = $entry->get_attribute('pwdLastSet');
		if ($pwd) {
			$uid->sambaPwdLastSet = $pwd;
		}
		$description = $entry->get_attribute('description');
		if ($description) {
			$uid->description = $description;
		}
		$script = $entry->get_attribute('scriptPath');
		if($script) {
			$uid->sambaLogonScript = $script;
		}
		#UID y GID:
		#domain sid
		//$sid = 'S-1-5-21-1658329406-718221906-1845911597-';
		//$uid->uidNumber = str_replace($sid, '', $objsid);
		$uid->uidNumber = str_replace('S-1-5-21-89404532-1372478125-1516182889-', '', $objsid);
		#pertenece by default a domain users
		$uid->gidNumber = '513';
		$uid->homeDirectory = "/home/{$user}";
		$uid->loginShell = '/bin/bash';
		
		/*
		$rdn = ldap_explode_dn($entry->dn(), 1);
		unset($rdn['count']);
		unset($rdn['0']);
		// elimino lo
		var_dump($rdn);
		$uid->setRDN('');
		
		/*
		 * #por ultimo, extraer la unidad funcional a la que pertenece:
		 
		 unset($a['count']);
		 $b = ldap_explode_dn($basead, 1);
		 unset($b['count']);
		 $ou = array_diff($a, $b);
		 #RDN de la entrada:

		 #atributo que indica a que unidad pertenece:
		 $uid->ou = $ou[2];
		 */
		#atributos especificos de miraflores:
		$uid->sambaDomainName = 'ALUCASA.COM.VE';
		$uid->accountStatus = 'active';
		$uid->deliveryMode = 'virtual:';
		$uid->mailQuotaSize = 524288;
		# atributos del samba
		$uid->sambaAcctFlags = '[U          ]';
		if($entry->get_attribute('lastLogon')) {
			$uid->sambaLogonTime = $entry->get_attribute('lastLogon');
		}
		$uid->sambaPwdMustChange = $entry->get_attribute('accountExpires');
		$uid->sambaLogoffTime = '2147483647';
		$uid->sambaKickoffTime = '2147483647';
		$uid->sambaPwdLastSet = $entry->get_attribute('pwdLastSet');
		$uid->sambaPwdCanChange = '2147483647';
		# 123456
		$uid->sambaNTPassword = '32ED87BDB5FDC5E9CBA88547376818D4';
		$filter = "(uid={$user})";
		$a = $alucasa->query($filter, $basealucasa, 'sub');
		if ($a->dn()=="") {
			if (!$uid->insert()) {
				print_r($uid->row());
				$file->write("\n Error insertando a: " . $user . "\n");
				$file->write($entry->toLDIF());
				#agregamos un salto de linea al final de cada ldif:
				$file->write("\n");
				$i++;
			} else {
				$n++;
			}
		} else {
		 if(!$uid->save()) {
		 	$file->write("\n Error actualizando a: " . $user . "\n");
		 	$file->write($entry->toLDIF());
		 	#agregamos un salto de linea al final de cada ldif:
		 	$file->write("\n");
		 	$i++;
		 } else {
		 	$m++;
		 }
		}
	}
	echo 'Se importaron : ' . $n . " usuarios.\n";
	echo 'Se actualizaron : ' . $m . " usuarios.\n";
	echo "Hubo {$i} errores de insercion; revisar log\n";
	$ad->close();
	$alucasa->close();
}

#cerramos el archivo
$file->close();
?>