ncpwhoami ncpreadprops(s)

NDS attributes reading utilities for ncpfs

Purpose:

Add to ncpfs tree/context oriented commands similar to those found in non GPL Caldera Open Linux Client (nwlist,nwwhoami...)

ncpwhoami: When a user has a permanent connection to NDS (either by the PAM module automounting its Netware home, ncplogin or ncpmount), this utility can be used to return many NDS attributes or ncpfs specific informations about that connection. It is actually the main testing program for lib/nwclient.c and is used by the graphical client to fetch relevant NDS attributes.

ncpreadprop, ncpreadprops: These utilities were created to allow reading of one or several NDS attributes of any NDS object, provided browse and read ACL have been granted to [public] account. Used by many of our administrative scripts (nds2pwd.pl, ndsdoformmb.pl ...).

ncplist : a revised version of contrib/testing/nwdslist.c by Petr Vandrovec that list objects belonging to a given NDS class.

Requirements:

ncpfs version 2.2 installed and operational (slist) on the Linux box.
To use default values for Tree and context, set appropriate environnement variables for nwclient.c

Usage:

ncpwhoami

-s

Specify the separator between fields (default is tabulation)

-T tree_name

Restrict to permanent connections to tree treeName

-S

Restrict to permanent connections to server serverName

-g

Global; all connections for all users (only root can do that)

-1

In the case of several connections to the same tree or server, display only information for the FIRST one (in /etc/mtab order)

-a

Ignore -f and print out all NDS available data in order AaBbCc...012

-f fieldletter(s)

Specify fields (A..Z,a..z,0..2) and order of output
default= -f TSVUX ( Tree ServerName MountedVolumeName UnixName NetwareName)

A	Authentication state
a	NDS postal addresses informations
B	Broadcast state
b	NDS stored Bindery property
C	connexion number
c	NDS Name context
D	NDS distinguished name
d	NDS description
E	NDS Foreign EMail address
e	NDS Internet EMail address
F	Netware File Server version
f	NDS Full Name
G	NDS group membership
g	NDS given name
H	Netware directory handle
h	NDS home directory
I	mount UID
i	NDS initials
J
j
K	NDS Public Key
k
L	NDS login time
l	LINUX:* NDS properties (substitute NDS Unix properties,see PAM module)
M	mount point
m	NDS message server
N	Netware volume number
n	NDS Network Address Restrictions
O	NDS organization
o	NDS location
P	NDS profile
p	NDS password informations
Q	NDS language
q	NDS generational qualifier
R	NDS login restrictions
r	NDS rights (ACL's)
S	server bindery name
s	NDS surname
T	tree name
t	NDS phone infos (telephon & fax)
U	Netware user name
u	UNIX:* NDS properties (official NDS8 Unix properties)
V	Netware volume name
v	NCPFS version
W	Netware UID
w	NDS Network addresses (where logged in)
X	Unix user name
x	NDS title(s)
Y	NDS Security equals to
y
Z
z	NDS Other names (CN+ ozer names ;-)
0	NDS login script
1	NDS profil login script
2	NDS context login script

examples:

[root@prope contrib]# ncpwhoami # I just ran ncplogin

INSA_ROOT       CIPCINSA        SYS     PPOLLET root

[root@prope contrib]# ncpwhoami -fGTUX -s : #my groups, tree, Netware login name and Unix name with : as separator

Everyone,Profs,Staff,Become,GroupMail,Rocad,Clubif,API,Become.GCP,Profs1eu,Profs2eu,WebMaster,BornesOK.Zen:INSA_ROOT:PPOLLET:root

Note that multivalued attribute (Group memberShip) values are comma separated and that names are
relative to my default context (set to PC in /etc/profile)

[root@prope contrib]# ncpwhoami -a #all that ncpwhoami can return on me

Try it for yourself ;-)

ncpreadprop With multivalued attributes output will be one per line
-o	object_name Object name (default me)
-A	quoted attribut_name mandatory
-T	treename
-c	context Default= [root]
-v	value Context DCK_FLAGS default=0 (Typed Names, 4 : typeless names)

examples:

ncpreadprop -o ppollet.PC -A "Group MemberShip" # all groups of that user ,context is [root], use typed names

CN=Everyone.O=PC
CN=Profs.O=PC
...
CN=BornesOK.OU=Zen.O=PC

[root@prope contrib]# ncpreadprop -o ppollet.PC -A "Group MemberShip" -v 4 #same with typeless names
```
Everyone.PC
Profs.PC
...
BornesOK.Zen.PC
```

[root@prope contrib]# ncpreadprop -o ppollet -A "Group MemberShip" -v 4 -c PC #use PC as default context

Everyone
Profs
...
BornesOK.Zen

[root@prope contrib]# ncpreadprop -o ppollet.PC -A "Group MemberShip" -c PC # error (ppollet.PC does not exist in context PC)

NWDSRead() failed with No such entry (-601)

ncpreadprops
Same arguments as ncpreadprops but

-A attribute_list Mandatory: One NDS attribute or a comma separated list (quoted)

-f character separator between attributes (default= :)

-m character separator between values of multi-valued attributes (default = space)

ncpreadprops Same arguments as ncpreadprops but
-A attribute_list	Mandatory: One NDS attribute or a comma separated list (quoted)
-f character	separator between attributes (default= :)
-m character	separator between values of multi-valued attributes (default = space)

examples:

ncpreadprops -o ppollet.PC -A "Group MemberShip" -v 4 # use typeless names, separator is default (space)

Everyone.PC Profs.PC Staff.PC Become.PC GroupMail.PC Rocad.PC Clubif.PC API.PC Become.GCP.PC Profs1eu.PC
Profs2eu.PC WebMaster.PC PropeOK.Zen.PC DRIJPTOK.Zen.PC fcpcOK.Zen.PC LinuxOk.PC BornesOK.Zen.PC

ncpreadprops -o ppollet.PC -A "Surname,Full name,Given name" # read several NDs attributes (default separator is ':')
```
pollet:Patrick Pollet:Patrick Lucien
```
For more sophisticated examples see the administrative scripts nds2pwd.pl, ndsdofor*.pl ...

TroubleShooting:

With many NDS, [public] accounts has no rights to browse, nor read NDS attributes. To solve this, on a "trusted workstation" open a permanent connection to NDS with a username/password such as ncpmount -U me -P mypwd /mnt/myNDS. (it could be done in /etc/rc.local) and pass the mount point (/mnt/myNDS) to ncpreadprop(s) as -S option. This will reuse the permanent connection with your credentials and allow you to read NDS attributes. (should be honored with -T also, one day... )
The problem does not happen with ncpwhoami that requires an authenticated permanent connection to work.

Download:

ncpwhoami, ncpreadprop and ncpreadprops are included in contrib/tcl-utils of the current release.
They are not installed by default, so cd contrib/tcl-utils && make && make install.

History:

See source code of these utilities.

TODO:

Usage of Default context (in environnement ) is not the same between ncpreadprop(s) and ncpwhoami
All these utilities will benefit of a patch in nwclient/NWCXAttachToTreeByName when tree name starts by a '/' , thus designating a permanent mount point. Currently this is used only by -S option.

Vous êtes notre eme visiteur