Changeset 185 for LATMOS-Accounts/lib

Timestamp:

05/25/09 11:56:21 (15 years ago)

Author:

nanardon

Message:

• manage locked account

Location:

LATMOS-Accounts/lib/LATMOS/Accounts/Bases

Files:

• Ad/User.pm (modified) (3 diffs)
• Sql/User.pm (modified) (1 diff)
• Unix.pm (modified) (5 diffs)

LATMOS-Accounts/lib/LATMOS/Accounts/Bases/Ad/User.pm

@@ -68 +68 @@
         initials
         manager
+        userAccountControl
+        locked
         ),
         ($mode !~ /w/
@@ -87 +89 @@
     $entry->replace('sAMAccountName', $id);
     $entry->replace(objectClass => [ qw(top person organizationalPerson user)],);
-    $entry->replace(userAccountControl => 544);
+    $entry->replace(userAccountControl => 66112);
+    $entry->replace(sAMAccountType => 0x30000000);
     $entry->replace(accountExpires => '9223372036854775807'); # TODO hardcoded, burk
     $entry->replace(userPrincipalName => "$id\@" . $base->ad_domain);
@@ -152 +155 @@
             next;
         };
+        $f eq 'locked' and do {
+            my $uac = $self->get_field('userAccountControl');
+            if ($val) {
+                $uac |= 0x00000002;
+            } else {
+                $uac &= (0xFFFFFFFF ^ 0x00000002);
+            }
+            warn $uac;
+            $ndata{userAccountControl} = "$uac";
+            next;
+        };
         $ndata{$f} = $val;
     }

LATMOS-Accounts/lib/LATMOS/Accounts/Bases/Sql/User.pm

@@ -77 +77 @@
         return join(' ', grep { $_ } ($self->get_c_field('givenName'), ($self->get_c_field('sn'))))
             || $self->id;
-    } elsif ($field =~ /^(sAMAccountName)$/) {
-        return $self->id,
+    } elsif ($field eq 'sAMAccountName') {
+        return $self->id;
     } elsif ($field eq 'memberOf') {
         my $sth = $self->db->prepare_cached(

LATMOS-Accounts/lib/LATMOS/Accounts/Bases/Unix.pm

@@ -69 +69 @@
             userPassword    => ($self->{use_shadow} ? 'spassword' : 'password'),
             memberOf        => 'memberOf',
+            locked          => 'locked',
             ($for !~ /w/ ? (
             givenName       => 'givenName',
@@ -147 +148 @@
                 $self->{users}{$user}{$_} = shift(@ch);
             }
+            if ($self->{users}{$user}{password} =~ /^!!/) {
+                $self->{users}{$user}{password} =~ s/^!!//;
+                $self->{users}{$user}{locked} = 1;
+            }
+            $self->{users}{$user}{shell} =~ s/^-//;
         },
     ) or return;
@@ -177 +183 @@
                 $self->{users}{$user}{$_} = shift(@ch);
             }
+            if ($self->{users}{$user}{spassword} =~ /^!!/) {
+                $self->{users}{$user}{spassword} =~ s/^!!//;
+                $self->{users}{$user}{locked} = 1;
+            }
         }
     ) or return;
@@ -218 +228 @@
         map {[
             $_,
-            $self->{users}{$_}{password} || 'x', # No empty pass !!
+            ($self->{users}{$_}{locked}
+                ? '!!' . ($self->{users}{$_}{password} || '')
+                : ($self->{users}{$_}{password} || 'x')), # No empty pass !!
             $self->{users}{$_}{uid},
             $self->{users}{$_}{gid},
             $self->{users}{$_}{gecos},
             $self->{users}{$_}{home},
-            $self->{users}{$_}{shell},
+            ($self->{users}{$_}{locked} ? '-' : '') . $self->{users}{$_}{shell},
         ]} sort { $self->{users}{$a}{uid} <=> $self->{users}{$b}{uid} } keys %{$self->{users}}
     ) or return;
@@ -243 +255 @@
         map {[
             $_,
-            $self->{users}{$_}{spassword} || 'x',
+            ($self->{users}{$_}{locked}
+                ? '!!' . ($self->{users}{$_}{spassword} || '')
+                : $self->{users}{$_}{spassword} || 'x'),
             $self->{users}{$_}{last_changed},
             $self->{users}{$_}{before_ch},