linux脚本中LDAP的用户身份验证测试

#!/bin/bash

ldap_server="ldap.example.com"
ldap_port="389"
ldap_bind_dn="cn=admin,dc=example,dc=com"
ldap_bind_password="password"

username="testuser"
password="testpassword"

ldapsearch -x -H ldap://$ldap_server:$ldap_port -D "$ldap_bind_dn" -w "$ldap_bind_password" -LLL -b "dc=example,dc=com" "uid=$username" "userPassword" | grep "userPassword::"

ldapresult=$(ldapsearch -x -H ldap://$ldap_server:$ldap_port -D "$ldap_bind_dn" -w "$ldap_bind_password" -LLL -b "dc=example,dc=com" "uid=$username" "userPassword" | grep "userPassword::")

if [[ -n $ldapresult ]]; then
  ldap_password=$(echo $ldapresult | awk '{print $2}' | base64 -d)
  if [[ $ldap_password == $password ]]; then
    echo "LDAP authentication successful"
  else
    echo "LDAP authentication failed: Incorrect password"
  fi
else
  echo "LDAP authentication failed: User not found"
fi