contrib/utils/ldap_groups.sh

   1 #!/bin/bash
   2
   3 # author: damien.nozay@gmail.com
   4
   5 # Given a username,
   6 # Provides a space-separated list of groups that the user is a member of.
   7 #
   8 # see http://gitolite.com/gitolite/conf.html#getting-user-group-info-from-ldap
   9 # GROUPLIST_PGM => /path/to/ldap_groups.sh
  10
  11 ldap_groups() {
  12     username=$1;
  13     # this relies on openldap / pam_ldap to be configured properly on your
  14     # system. my system allows anonymous search.
  15     echo $(
  16         ldapsearch -x -LLL "(&(objectClass=posixGroup)(memberUid=${username}))" cn \
  17         | grep "^cn" \
  18         | cut -d' ' -f2
  19     );
  20 }
  21
  22 ldap_groups $@