LDIF file instead of updating directory

[Dan Cutler]

Hi all,

I have a quick question about the Net::LDAP::LDIF module.

I noticed that the LDIF module requires the use of Net::LDAP::Entry objects 
since its methods are all against Entry objects...

The script snippet below is fully capable of updating the directory below, but 
I'd prefer to create LDIF files rather than direct updates.

If I uncomment these two lines, the script will update directly and it works.

      #my $result = $dne->update($AD_ldap);
      #$result->code && warn "failed to add entry for $user ", $result->error ;

Unfortunately, the LDIF file only contains the DN of the user followed by an 
add line like this:

dn: CN=Dan Cutler,OU=ClientX,DC=MyCompany,DC=com
MyCompany-ClientKey: ClientX

The LDIF file is missing everything else. (like "changetype: modify", and the 
new attribute name "MyCompany-ClientKey").

Any Suggestions?

Thanks!!



$AD_ldap = Net::LDAP->new($AD_host) or die "$@";

$ldif = new Net::LDAP::LDIF ('Mirgrate_ou_name_to_attr.ldif','w',
                              encode => 'base64',
                              change => '1');

# bind for searches using system account
my $AD_mesg = $AD_ldap->bind( $AD_bind_user, password => $AD_bind_pw, port => 
3268);
if ($AD_mesg->code) { print "AD bind failed with ", $AD_mesg->code , "\n"; }


my $AD_result = $AD_ldap->search ( base   => $base_dn,
                        filter => '(objectclass=organizationalUnit)',
                        scope  => 'one',
                        attrs  => ['name']
                        );

my @AD_entries = $AD_result->entries;


# Get AD OUs
print "AD OUs =========================================\n";

foreach my $ADentr ( @AD_entries ) {
   my $name = $ADentr->get_value('name');
   my $dn = $ADentr->dn();
   print "Finding users under OU $dn with name = $name...\n";

   my @users = users_under_ou($dn,'AD');   # sub returns all user DNs with 
scope=base and baseDN is the group DN

   foreach my $user (@users) {
      print "Modifying User $user setting MyCompany-ClientKey to $name\n";
      my $dne = Net::LDAP::Entry->new;
      $dne->dn($user);
      $dne->changetype('modify');
      $dne->add (  MyCompany-ClientKey  =>  $name );
      #my $result = $dne->update($AD_ldap);
      #$result->code && warn "failed to add entry for $user ", $result->error ;
      #$dne->dump();
      $ldif->write($dne);
   }
   print "\n";
}

--Dan