ops.point808.com/ovpn-ad-sync
2
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

made templates directory for easier change of script

Browse Source
This commit is contained in:
Josh North 2014-12-08 12:09:13 -05:00
parent e2e305b40b
commit 66a2abb977
4 changed files with 21 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

0
oas_configs/Remote Desktop Setup Guide.odt → oas_templates/Remote Desktop Setup Guide.odt
View File

0
oas_configs/VPN Setup Guide.odt → oas_templates/VPN Setup Guide.odt
View File

0
oas_clients/template.ovpn → oas_templates/template.ovpn
View File

23
ovpn-ad-sync.sh
View File

@ -24,7 +24,8 @@ OAS_USERDIR="/etc/openvpn/oas_clients" # Full path to user conf
OAS_RSADIR="/etc/openvpn/rsa" # Full path to easy-rsa root OAS_RSADIR="/etc/openvpn/rsa" # Full path to easy-rsa root
OAS_LOGFILE="/var/log/oas.log" # Log file OAS_LOGFILE="/var/log/oas.log" # Log file
OAS_LOGRET=10 # Lines of old log to keep OAS_LOGRET=10 # Lines of old log to keep
OAS_OVPNTPL="${OAS_USERDIR}/template.ovpn" # Template file to use for clients OAS_TPLDIR="/etc/openvpn/oas_templates" # Full path to user templates
OAS_OVPNTPL="${OAS_TPLDIR}/template.ovpn" # Template file to use for clients
OAS_MAILSUBJ="Example Company - VPN Information" # Subject line of email OAS_MAILSUBJ="Example Company - VPN Information" # Subject line of email
OAS_MAILFROM="admin@example.com" # This will appear as the "From" address OAS_MAILFROM="admin@example.com" # This will appear as the "From" address
OAS_MAILADMIN="admin@example.com" # Email to copy all configs and errors to OAS_MAILADMIN="admin@example.com" # Email to copy all configs and errors to
@ -109,7 +110,25 @@ for s_user in $(
fi fi
# end of the first looper! # end of the first looper!
done done
# next thing is to check and delete (or recycle) user directories not in directory group
# Now we need to list all directories, and then run an ldap search to see if there is a matching user. If not, we'll figure out how to revoke their certs and then delete the config directory.
# source rsa vars to get ready to revoke
cd ${OAS_RSADIR}
source ./vars
# go back to user directory
cd ${OAS_USERDIR}
log "Beginning user deletion run"
# let's list the directories first, then on each dir, run a ldapsearch to see if user match. If not, delete and revoke.
for s_userd in ${OAS_USERDIR}
do
echo "${s_userd}"
# end of second looper. I think we are done for now
done
log "Script run complete - it may or may not be a success, the log will tell..." log "Script run complete - it may or may not be a success, the log will tell..."
log "Taking a nap before the next run..." log "Taking a nap before the next run..."