2016-11-08 112 views
0

我正在写一个小的ksh脚本,我需要使用少量变量的值格式化ldapsearch命令,并运行该命令来验证提供的ldap服务器的详细信息是否正确。该脚本无法为ldap用户提供空间。在ksh中的字符串处理

我的脚本看起来像下面

[[email protected] ~]# cat /tmp/test 
#!/usr/bin/ksh 
set -x 
username="CN=userwith space,CN=Users,DC=MYLDAP,DC=COM" 
pswd="Passw0rd" 
cmd="/usr/bin/ldapsearch -x -H ldap://192.168.1.2 -b dc=myldap,dc=com -s sub -o nettimeout=10 -LLL -A " 
cmd+="-D $username -w $pswd" 
cmd+=" (objectClass=*) -z1 dn" 
print $cmd 
retstr="$($cmd 2>/tmp/ldapfail.tmpwrite)" 
ret=$? 
print "retstr=$retstr" 
print "ret=$ret" 
print "/tmp/ldapfail.tmpwrite : " 
[[ $ret -ne 0 ]] && print "ERROR:--------------" && cat /tmp/ldapfail.tmpwrite 

输出上面的脚本

[[email protected] ~]# /tmp/test 
+ username=CN='userwith space,CN=Users,DC=MYLDAP,DC=COM' 
+ pswd=Passw0rd 
+ cmd='/usr/bin/ldapsearch -x -H ldap://192.168.1.2 -b dc=myldap,dc=com -s sub -o nettimeout=10 -LLL -A ' 
+ cmd+='-D CN=userwith space,CN=Users,DC=MYLDAP,DC=COM -w Passw0rd' 
+ cmd+=' (objectClass=*) -z1 dn' 
+ print /usr/bin/ldapsearch -x -H ldap://192.168.1.2 -bdc=myldap,dc=com -s sub -o nettimeout=10 -LLL -A -D CN=userwith space,CN=Users,DC=MYLDAP,DC=COM -w Passw0rd '(objectClass=*)' -z1 dn 
/usr/bin/ldapsearch -x -H ldap://192.168.1.2 -b dc=myldap,dc=com -s sub -o nettimeout=10 -LLL -A -D CN=userwith space,CN=Users,DC=MYLDAP,DC=COM -w Passw0rd (objectClass=*) -z1 dn 
+ /usr/bin/ldapsearch -x -H ldap://192.168.1.2 -b dc=myldap,dc=com -s sub -o nettimeout=10 -LLL -A -D CN=userwith space,CN=Users,DC=MYLDAP,DC=COM -w Passw0rd '(objectClass=*)' -z1 dn 
+ 2> /tmp/ldapfail.tmpwrite 
+ retstr='' 
+ ret=49 
+ print retstr= 
retstr= 
+ print ret=49 
ret=49 
+ print '/tmp/ldapfail.tmpwrite : ' 
/tmp/ldapfail.tmpwrite : 
+ [[ 49 -ne 0 ]] 
+ print ERROR:-------------- 
ERROR:-------------- 
+ cat /tmp/ldapfail.tmpwrite 
ldap_bind: Invalid credentials (49) 
additional info: 80090308: LdapErr: DSID-0C0903A9, comment: AcceptSecurityContext error, data 52e, v1db1 

ldapsearch命令它在脚本创建的东西是没有

/usr/bin/ldapsearch -x -H ldap://192.168.1.2 -b dc=myldap,dc=com -s sub -o nettimeout=10 -LLL -A -D CN=userwith space,CN=Users,DC=MYLDAP,DC=COM -w Passw0rd '(objectClass=*)' -z1 dn 

,如果我逃空间使用'\'像CN=userwith\ space,CN=Users,DC=MYLDAP,DC=COM在命令行上的工作,但它在KSH脚本不起作用

username="CN=userwith\ space,CN=Users,DC=MYLDAP,DC=COM"脚本也以这种方式/usr/bin/ldapsearch -x -H ldap://192.168.1.2 -b dc=myldap,dc=com -s sub -o nettimeout=10 -LLL -A -D CN='userwith\' space,CN=Users,DC=MYLDAP,DC=COM -w Passw0rd '(objectClass=*)' -z1 dn

关于如何解决此问题的任何线索失败,因为脚本格式ldapsearch命令?

+0

可以尝试像双反斜线“CN = userwith \\的空间......”在剧本 –

回答

0

您需要将命令存储在数组中。这样,任何包含空格的数组元素都将被视为整个单词。

username="CN=userwith space,CN=Users,DC=MYLDAP,DC=COM" 
pswd="Passw0rd" 

# build up the command as an array 
cmd=(/usr/bin/ldapsearch -x -H ldap://192.168.1.2 -b dc=myldap,dc=com -s sub -o nettimeout=10 -LLL -A) 
cmd+=(-D "$username" -w "$pswd") # variables must be quoted here 
cmd+=("(objectClass=*)" -z1 dn) 

# print the contents, note the different outputs 
print "${cmd[*]}" 
printf "%q " "${cmd[@]}"; echo 

# execute it 
retstr="$("${cmd[@]}" 2>/tmp/ldapfail.tmpwrite)" 
+0

是它的工作..感谢 – Deep

0

你可以在脚本中试试这个;

LDAPHOST="ldap://192.168.1.2" 
username="CN=\"userwith\ space,CN=Users,DC=MYLDAP,DC=COM\"" 
pswd="Passw0rd" 
cmd="/usr/bin/ldapsearch -x -H "${LDAPHOST}" -b dc=myldap,dc=com -s sub -o nettimeout=10 -LLL -A " 
cmd+="-D "${username}" -w "${pswd}" (objectClass=*) -z1 dn" 
echo $cmd 
+0

它仍然失败,\\'的/ usr/bin中/ ldapsearch的解决方案 - x -H ldap://192.168.1.2 -b dc = myldap,dc = com -s sub -o nettimeout = 10 -LLL -A -D CN ='userwith \'space,CN = Users,DC = MYLDAP,DC = COM -w Passw0rd'(objectClass = *)'-z1 dn' – Deep

+0

@Deep:我更新了ans。你可以试试这个。 –

+0

@Deep:我再次更新了ans, –