samba - Mar 2005 - A small question on Winbind

Hi

it's possible with wbinfo that get a information:

    1- Get all users of one Active Directory Group
    2- Get all groups of one username ?


(i want create a small perl script for add automatiquely user into
Squidguard, other user say me that Squidguard can't directly
get the Active DIrectory Group (only use username)

Thanks for your help

On Tuesday 29 March 2005 08:29, Phibee NOC wrote:
> Hi
> it's possible with wbinfo that get a information:
>
>     1- Get all users of one Active Directory Group
this can be done with getent passwd {groupname} - not sure how to do it with 
wbinfo
>     2- Get all groups of one username ?
Not 100% sure about this, but a start might be getent group | grep {username} 
- im sure a bit of sed would neaten the results

Hope that helps,
H
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url :
http://lists.samba.org/archive/samba/attachments/20050329/60d1d4cb/attachment.bin

samba-bounces+alaslavic=havertys.com@lists.samba.org wrote on 03/29/2005
02:29:37 AM:
> Hi
>
> it's possible with wbinfo that get a information:
>
>     1- Get all users of one Active Directory Group
>     2- Get all groups of one username ?
>
>
> (i want create a small perl script for add automatiquely user into
> Squidguard, other user say me that Squidguard can't directly
> get the Active DIrectory Group (only use username)
>
> Thanks for your help
I have the same setup going, so I'll show you how I am doing it.

Please excuse, its kind of a hack, but it has worked flawlessly for a long
time, so I never cleaned it up.

The script below dumps an alphabetical list of users contained in a group.
It mostly uses "getent group", with some regular expressions to pull
out
only the usernames.
-----------ntgroup.pl--------------
#!/usr/bin/perl
#useage:  ntgroup.pl <windows group>

$group = shift(@ARGV);

$groupstring = `/usr/bin/getent group | /usr/bin/grep -e "^$group:"`;
$groupstring=~s/^.*:x:[0-9].*://;

@list = split /,/,$groupstring;
@sortlist = sort @list;
for (@sortlist) {
        chomp($_);
        print "$_\n";
}
exit
------------end of ntgroup.pl----------

You are correct that squidguard can't access Active Directory, it has to
read from a file containing a list of usernames.  What I did at this point
is created a "proxyUsers" domain group.  I then ran the script above,
"ntgroup.pl proxyUsers > /var/squidguard/proxyUser.list".  I then
put in a
cron job that peroidically checked to see if the list had changed, and if
it had, added the new users, and reloaded squidguard to put the new users
in effect.

This is getting OT now, so if you have any more squidguard related
questions, you can contact me off-list.

~alex

> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/listinfo/samba