批量配置LDAP客户端

#!/bin/bash
chmod 755 /var/log/audit
grep SUDOERS /etc/ldap.conf || echo "SUDOERS_BASE ou=SUDOers,dc=foo,dc=local"  >> /etc/ldap.conf
grep sudoers /etc/nsswitch.conf || echo "sudoers:      ldap"  >> /etc/nsswitch.conf
grep "18.240"  /etc/hosts || echo "192.168.18.240       ldap.foo.local"  >> /etc/hosts
grep " 18.210" /etc/hosts || echo "192.168.18.210       ldap.foo.local"  >> /etc/hosts
test -e /etc/openldap/cacerts/ca.pem || wget http://192.168.18.206:90/config/ca.pem -P /etc/openldap/cacerts/
authconfig  --useshadow  --usemd5 --enableldap  --enableldapauth --enableldaptls  --ldapserver=ldap.foo.local  \
--ldapbasedn="dc=foo,dc=local"   --ldaploadcacert=file:///etc/openldap/cacerts/ca.pem    --enablemkhomedir    --updateall
grep "sbin" /etc/skel/.bashrc || echo ' PATH=$PATH:/sbin:/usr/local/sbin:/usr/kerberos/sbin' >> /etc/skel/.bashrc && echo "export PATH" >> /etc/skel/.bashrc