#!/bin/bash
#
# 40dhcpsearchbase_create
#  Creates a UCR-policy for DHCP searchbase
#
# Depends: ucs-school-import
#
# Copyright 2010-2017 Univention GmbH
#
# http://www.univention.de/
#
# All rights reserved.
#
# The source code of this program is made available
# under the terms of the GNU Affero General Public License version 3
# (GNU AGPL V3) as published by the Free Software Foundation.
#
# Binary versions of this program provided by Univention to you as
# well as other copyrighted, protected or trademarked materials like
# Logos, graphics, fonts, specific documentations and configurations,
# cryptographic keys etc. are subject to a license agreement between
# you and Univention and not subject to the GNU AGPL V3.
#
# In the case you use this program under the terms of the GNU AGPL V3,
# the program is provided in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
# GNU Affero General Public License for more details.
#
# You should have received a copy of the GNU Affero General Public
# License with the Debian GNU/Linux or Univention distribution in file
# /usr/share/common-licenses/AGPL-3; if not, see
# <http://www.gnu.org/licenses/>.

[ $# -ne 2 ] && echo "USAGE: $(basename $0) FILE DN" && exit 1

. /usr/share/univention-lib/ucr.sh

eval "$(ucr shell)"

if ! is_ucr_true "ucsschool/import/generate/policy/dhcp/searchbase" ; then
	echo "$(basename $0): creation of UCR policy for DHCP searchbase has been disabled by ucsschool/import/generate/policy/dhcp/searchbase"
	exit 0
fi

ou="$(awk -F '\t' '{print $1}' "$1" | tr '[:upper:]' '[:lower:]')"
if is_ucr_true "ucsschool/ldap/district/enable" ; then
	district=",ou=${ou:0:2}"
fi

# create policy
univention-directory-manager policies/registry create \
	--ignore_exists \
	--position "cn=policies,ou=${ou}${district},${ldap_base}" \
	--set "name=ou-default-ucr-policy"

# add value to policy
univention-directory-manager policies/registry modify \
	--dn "cn=ou-default-ucr-policy,cn=policies,ou=${ou}${district},${ldap_base}" \
	--append "registry=dhcpd/ldap/base cn=dhcp,ou=${ou}${district},${ldap_base}"

# link to OU
univention-directory-manager container/ou modify \
	--dn "ou=${ou}${district},${ldap_base}" \
	--policy-reference "cn=ou-default-ucr-policy,cn=policies,ou=${ou}${district},${ldap_base}"

echo "$(basename $0): added new UCR policy cn=ou-default-ucr-policy,cn=policies,ou=${ou}${district},${ldap_base} to OU ou=${ou}${district},${ldap_base}"

exit 0
