Add output list, add auto.home base

bin/check-home-permissions.py

@@ -65,16 +65,17 @@ def search_ldap():
     ldap = dphysldap.Ldap()
     ldap_users = dphysldap.Users(ldap, ['uid', 'uidNumber', 'gidNumber', 'homeDirectory'])
     entries = dphysldap.Entries(ldap, ['cn', 'nisMapEntry'])
+    auto_home = 'nisMapName=auto.home,ou=automount,dc=phys,dc=ethz,dc=ch'
 
     ldap_users.search('*')
     for user in ldap_users:
         users[user['uid'][0]] = user['homeDirectory'][0]
 
-    entries.search('cn: *, nisMapEntry: phd-home*', ['nisObject'])
+    entries.search('cn: *, nisMapEntry: phd-home*', ['nisObject'], base=auto_home)
     for entry in entries:
         nis_homes[entry['cn'][0]] = entry['nisMapEntry'][0]
 
-    entries.search('cn: *, nisMapEntry: != phd-home*', ['nisObject'])
+    entries.search('cn: *, nisMapEntry: != phd-home*', ['nisObject'], base=auto_home)
     for entry in entries:
         nis_shares[entry['cn'][0]] = entry['nisMapEntry'][0]
 
@@ -150,6 +151,8 @@ if __name__ == '__main__':
 
     search_ldap()
 
+    print('statistics')
+    print('----------')
     print('ldap users:           ' + str(len(users)))
     print('ldap nismaps (home):  ' + str(len(nis_homes)))
     print('ldap nismaps (share): ' + str(len(nis_shares)))
@@ -193,3 +196,53 @@ if __name__ == '__main__':
             print(home.path)
             print(extacl)
         print()
+
+    if users:
+        print('strange ldap users:')
+        print('-------------------')
+        for k, v in users.items():
+            print(': '.join([k, v]))
+        print()
+
+    if nis_homes:
+        print('orphaned nis homes:')
+        print('-------------------')
+        for k, v in nis_homes.items():
+            print(': '.join([k, v]))
+        print()
+
+    if nis_shares:
+        print('orphaned nis shares:')
+        print('--------------------')
+        for k, v in nis_shares.items():
+            print(': '.join([k, v]))
+        print()
+
+    if bad_home_directory:
+        print('bad homeDirectory:')
+        print('------------------')
+        for home in bad_home_directory:
+            print(home)
+        print()
+
+    if no_ldap_user:
+        print('no user for home:')
+        print('-----------------')
+        for home in no_ldap_user:
+            print(home)
+        print()
+
+    if bad_nis_map:
+        print('bad nismaps (home):')
+        print('-------------------')
+        for home in bad_nis_map:
+            print(home)
+        print()
+
+    if no_nis_map:
+        print('no nismap for home:')
+        print('-------------------')
+        for home in no_nis_map:
+            print(home)
+        print()
+