#!/bin/bash
assert(){ [[ $? -eq 0 ]] || { [[ -n ${1} ]] && echo ${@} ; exit 1 ; } }
usage() {
    cat <<EOF
usage: docker exec [...] add_ldap_group [-c COMMON_NAME] [-u UID] [-p PASSWORD] [-e EMAIL]
  Unset options will be prompted interactively.
EOF
}

COMMON_NAME=
USER_UID=
USER_EMAIL=
USER_PASS=
SURNAME=
while getopts "c: u: e: p:" OPCION
do
    case ${OPCION} in
        "c")
            COMMON_NAME=${OPTARG}
            ;;
        "s")
            SURNAME=${OPTARG}
            ;;
        "u")
            USER_UID=${OPTARG}
            ;;
        "e")
            USER_EMAIL=${OPTARG}
            ;;
        "p")
            USER_PASS=${OPTARG}
            ;;
        *)
            usage
            exit 2
         ;;
    esac
done

LDAP_ADMIN_CN="{{ getv "/admin/cn" }}"
LDAP_ADMIN_PASSWORD="{{ getv "/admin/password" }}"
LDAP_DOMAIN="{{ getv "/domain" }}"
LDAP_DOMAIN_DN="{{ getv "/domain/dn" }}"

DN0="dc=${LDAP_DOMAIN//./,dc=}"
LDAP_DOMAIN_DN=${LDAP_DOMAIN_DN:=${DN0}}

[[ -n ${USER_UID} ]] || {
    echo -n "Enter user UID (e.g. jdoe) > "
    read USER_UID
}

# echo "Check if uid=${USER_UID},ou=People,${LDAP_DOMAIN_DN} exists"
RES_DN=$(ldapsearch -LLL -H ldap:/// -D cn=${LDAP_ADMIN_CN},${LDAP_DOMAIN_DN} \
		    -w "${LDAP_ADMIN_PASSWORD}" -s base \
		    -b "uid=${USER_UID},ou=People,${LDAP_DOMAIN_DN}" \
		    "(objectClass=*)" 2>/dev/null \
	     | egrep '^dn: ' | sed -e 's/^dn: //g' )
[[ -z ${RES_DN} ]]
assert "User already present. Please choose a different UID."

[[ -n ${COMMON_NAME} ]] || {
    echo -n "Enter user CN (e.g. John Doe) > "
    read COMMON_NAME
}
[[ -n ${SURNAME} ]] || {
    echo -n "Enter user SN (e.g. Doe) > "
    read SURNAME
}
[[ -n ${USER_PASS} ]] || {
    echo -n "Enter user password (will not be echoed) > "
    read -s USER_PASS
    echo ""
}
[[ -n ${USER_EMAIL} ]] || {
    echo -n "Enter user email (leave blank for ${USER_UID}@${LDAP_DOMAIN}) > "
    read USER_EMAIL
}
USER_EMAIL="${USER_EMAIL:=${USER_UID}@${LDAP_DOMAIN}}"


PWHASH=$(slappasswd -h "{SSHA}" -s "${USER_PASS}")

echo "Creating user uid=${USER_UID},ou=People,${LDAP_DOMAIN_DN}"
ldapadd -H ldap:/// -D cn=${LDAP_ADMIN_CN},${LDAP_DOMAIN_DN} \
		-w "${LDAP_ADMIN_PASSWORD}" <<-EOF
	dn: uid=${USER_UID},ou=People,${LDAP_DOMAIN_DN}
	objectClass: inetOrgPerson
	objectClass: organizationalPerson
	objectClass: person
	objectClass: top
	cn: ${COMMON_NAME}
	sn: ${SURNAME}
	uid: ${USER_UID}
	userPassword: ${PWHASH}
	mail: ${USER_EMAIL}

	EOF

assert "Error adding user!"