mirror of
https://0xacab.org/liberate/backupninja.git
synced 2024-11-13 22:32:29 +01:00
114 lines
3.4 KiB
Plaintext
114 lines
3.4 KiB
Plaintext
# -*- mode: sh; sh-basic-offset: 3; indent-tabs-mode: nil; -*-
|
|
#
|
|
# openldap backup handler script for backupninja
|
|
#
|
|
|
|
getconf backupdir /var/backups/ldap
|
|
getconf conf /etc/ldap/slapd.conf
|
|
getconf databases all
|
|
getconf compress yes
|
|
getconf ldif yes
|
|
getconf restart no
|
|
getconf method ldapsearch
|
|
getconf passwordfile
|
|
getconf binddn
|
|
getconf ldaphost
|
|
getconf tls yes
|
|
|
|
if [ $tls = 'yes' ]
|
|
URLBASE="ldaps"
|
|
else
|
|
URLBASE="ldap"
|
|
fi
|
|
|
|
status="ok"
|
|
|
|
[ -f $conf ] || fatal "slapd config file ($conf) not found"
|
|
[ -d $backupdir ] || mkdir -p $backupdir
|
|
[ -d $backupdir ] || fatal "Backup directory '$backupdir'"
|
|
|
|
dbsuffixes=(`awk 'BEGIN {OFS=":"} /[:space:]*^database[:space:]*\w*/ {db=$2}; /^[:space:]*suffix[:space:]*\w*/ {if (db=="bdb"||db=="ldbm") print db,$2}' $conf|sed -e 's/[" ]//g'`)
|
|
|
|
## LDIF DUMP
|
|
|
|
if [ "$ldif" == "yes" ]; then
|
|
dumpdir="$backupdir"
|
|
[ -d $dumpdir ] || mkdir -p $dumpdir
|
|
|
|
if [ "$databases" == 'all' ]; then
|
|
dbcount=`grep '^database' $conf | wc -l`
|
|
let "dbcount = dbcount - 1"
|
|
databases=`seq 0 $dbcount`;
|
|
fi
|
|
|
|
for db in $databases; do
|
|
if [ `expr index "$dbnum" "="` == "0" ]; then
|
|
# db is a number, get the suffix.
|
|
dbsuffix=${dbsuffixes[$db]/*:/}
|
|
else
|
|
dbsuffix=$db
|
|
fi
|
|
# some databases don't have suffix (like monitor), skip these
|
|
if [ "$dbsuffix" == "" ]; then
|
|
continue;
|
|
fi
|
|
|
|
if [ "$method" == "slapcat" ]; then
|
|
if [ "$compress" == "yes" ]; then
|
|
execstr="$SLAPCAT -f $conf -b $dbsuffix | $GZIP"
|
|
else
|
|
execstr="$SLAPCAT -f $conf -b $dbsuffix"
|
|
fi
|
|
debug "$execstr"
|
|
else
|
|
if [ "$compress" == "yes" ]; then
|
|
if [ -n "$ldaphost" ]
|
|
execstr="$LDAPSEARCH -H $URLBASE://$ldaphost -x -L -b ""$dbsuffix"" -D ""$binddn"" -y $passwordfile | $GZIP"
|
|
else
|
|
execstr="$LDAPSEARCH -x -L -b ""$dbsuffix"" -D ""$binddn"" -y $passwordfile | $GZIP"
|
|
fi
|
|
else
|
|
if [ -n "$ldaphost" ]
|
|
execstr="$LDAPSEARCH -H $URLBASE://$ldaphost -x -L -b ""$dbsuffix"" -D ""$binddn"" -y $passwordfile"
|
|
else
|
|
execstr="$LDAPSEARCH -x -L -b ""$dbsuffix"" -D ""$binddn"" -y $passwordfile"
|
|
fi
|
|
fi
|
|
[ -f "$passwordfile" ] || fatal "Password file $passwordfile not found. When method is set to ldapsearch, you must also specify a password file."
|
|
debug "$execstr"
|
|
fi
|
|
if [ ! $test ]; then
|
|
if [ "$restart" == "yes" ]; then
|
|
debug "Shutting down ldap server..."
|
|
/etc/init.d/slapd stop
|
|
fi
|
|
|
|
touch $dumpdir/$dbsuffix.ldif
|
|
if [ ! -f $dumpdir/$dbsuffix.ldif ]; then
|
|
fatal "Couldn't create ldif dump file: $dumpdir/$dbsuffix.ldif"
|
|
fi
|
|
|
|
if [ "$compress" == "yes" ]; then
|
|
output=`$execstr > $dumpdir/$dbsuffix.ldif.gz`
|
|
else
|
|
output=`$execstr > $dumpdir/$dbsuffix.ldif`
|
|
fi
|
|
code=$?
|
|
if [ "$code" == "0" ]; then
|
|
debug $output
|
|
info "Successfully finished ldif export of $dbsuffix"
|
|
else
|
|
warning $output
|
|
warning "Failed ldif export of $dbsuffix"
|
|
fi
|
|
|
|
if [ "$restart" == "yes" ]; then
|
|
debug "Starting ldap server..."
|
|
/etc/init.d/slapd start
|
|
fi
|
|
fi
|
|
done
|
|
fi
|
|
|
|
return 0
|