HERMES is a Python script, which simplifies our LDAP user management at Toptranslation. Our LDAP server resides in a Docker container, and it doesn't expose itself to the outside world. So instead of manually playing with LDAP every time we need a change, I wrote this script, in hope to make our user management easier.
First of all, clone this repository on your computer:
git clone https://github.com/toptranslation/hermes && cd hermes
This script is written in python3, so you'll need to have it installed:
sudo apt-get install python3
The easiest way to install the necessarily requirements, is with PIP:
sudo apt-get install python3-pip
Now, install the dependencies:
sudo pip3 install -r requirements.txt
Configurations are stored in a *.ini file in the same directory with the script. Rename hermes.ini-example to hermes.ini, and edit it to suit your own needs. You can also add more sections to the file, so you can manage multiple LDAP servers, or using multiple users.
The environment is specified using the -E command line option. The [DEFAULT] section is used if -E is not used.
There are 5 modes of operation, print, forward, create, delete and modify.
Use -b for bots, -p for people, and -c for clients. To search for a user matching john.smith, use the following command:
./hermes.py print -p john.smith
Replace -p with -b or -c, if you search for bots or clients.
The script will also check for partially matching names, so in this case, just writing john or smith should be enough:
./hermes.py print -p smith
To list all available users, use ALL as a UID:
./hermes.py print -p ALL
Replace -p with -b or -c, if you want to list all bots or all clients.
Forward doesn't have any new options, and is used just for SSH forwarding the LDAP connection to localhost, and could be used to manually manage users, using other tools on the system, like Apache Directory Studio.
Use -b for bots, -p for people, and -c for clients. To create a user john.smith, use the following command:
./hermes.py create -p john.smith --mail john.smith@gmail.com --mail js@toptranslation.com --password 'ASReub076!$)' --description "This is John Smith" --mobile "+1234567890" --mobile "+498765432109" --telephone 44 --telephone 47 --department management --title "windows cleaner"
Replace -p with -b or -c, if you want to create a bot or a client. Just the UID is mandatory, all of the other information could be skipped. If the password is skipped, "please_change!" is used. Do it just if the user will change it immediately, otherwise specify a random password.
For each created user, an email address firstname.lastname@toptranslation.com
is created automatically, so the --mail switch is needed just for
additional emails.
Use -b for bots, -p for people, and -c for clients. To delete a user, just the UID is required:
./hermes.py delete -p john.smith
Use -b for bots, -p for people, and -c for clients. It's syntax is exactly the same as for create. The only thing important to remember, is that the attributes which could contain multiple fields (for example mail, mobile, telephoneNumber), will be first deleted, then the new ones will be added, so if you want to add a new email to that person, and want to keep the old email intact, you need to add --mail twice, once with the old email, and once with the new one.
./hermes.py modify -p john.smith --mail js@toptranslation.com --password 'sntauohe+r,{]' --description "This is not John Smith" --mobile "+1234567890" --mobile "+498765432109" --telephone 44 --telephone 47 --department sales --title "Windows Seller"
After I started reading the configuration from the hermes.ini file, the --help menu doesn't work anymore. I'll get to fix that ASAP.
All of the code contained here is licensed by the GNU GPLv3