$passwordChars		= "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ1234567890-=!@#$%^&*()_+"

1..10 | ForEach { $adminPassword = $adminPassword + $passwordChars[$rand.next(0,$passwordChars.Length-1)] }

$ldapServer = "PUT AN IP ADDRESS HERE, INSIDE OF THE QUOTES"
$ldapPort = "THIS SHOULD BE 389 FOR LDAP OR 636 FOR SECURE LDAP, MAKE SURE IT'S INSIDE QUOTES"
$ldapHostname = "GIVE YOUR LDAP SERVER A NAME"
$ldapAdminuser = 'cn=USERNAME,dc=DOMAIN,dc=TLD'
$ldapAdminpw = 'password'
$baseDN = "ou=LDAPUSERS,dc=DOMAIN,dc=TLD"



[System.Reflection.Assembly]::LoadWithPartialName("System.DirectoryServices.Protocols")
[System.Reflection.Assembly]::LoadWithPartialName("System.Net")

$conn = New-Object System.DirectoryServices.Protocols.LdapConnection "$($ldapServer):$($ldapPort)"
$conn.SessionOptions.HostName = "$ldapHostname"
$conn.AuthType = [System.DirectoryServices.Protocols.AuthType]::Basic
$conn.SessionOptions.ProtocolVersion = "3"
$creds = New-Object "System.Net.NetworkCredential" -ArgumentList $ldapAdminuser,$ldapAdminpw
$conn.Bind($creds)
#$conn.Bind()


#Display all existing users
$filter = "(uid=*)"
$scope = [System.DirectoryServices.Protocols.SearchScope]::Subtree
$attrlist = "*"
$search = New-Object System.DirectoryServices.Protocols.SearchRequest -ArgumentList $basedn,$filter,$scope,$attrlist

$req = $conn.SendRequest($search)
#$req.Entries.Attributes['uidnumber'].getvalues('string')
$req.Entries | Select-Object @{E={$_.Attributes['uid'].GetValues('string')};Name="Username"},`
    @{E={$_.Attributes['uidnumber'].GetValues('string')};Name="User ID"},`
    @{E={$_.Attributes['gidnumber'].GetValues('string')};Name="Group ID"},`
    @{E={$_.Attributes['cn'].GetValues('string')};Name="CN"} | Sort-Object "User ID"


# Create new user
$newuser = Read-Host -Prompt "New username:"
$firstname = Read-Host -Prompt "First name:"
$surname = Read-Host -Prompt "Last name:"

$plaintext = Read-Host -Prompt "New password:" -AsSecureString
$sha = New-Object System.Security.Cryptography.SHA1CryptoServiceProvider
$rng = New-Object System.Security.Cryptography.RNGCryptoServiceProvider

if ($plaintext.Length -eq 0) {
    # create password
    $plaintext = ([char[]](33..126) | Sort-Object {Get-Random})[0..8] -join ''
    Write-Host "Temporary password is: ""$plaintext"" -- write this down!"
    $plaintext = ConvertTo-SecureString $plaintext -AsPlainText -Force

    # Welcome2016 is a very bad default password
    #$plaintext = [System.Text.Encoding]::UTF8.GetBytes("Welcome$(Get-Date -Format yyyy)")
    
    # Generate salt
    $salt = New-Object Byte[] 8
    $rng.GetBytes($salt)

    # salted SHA1 hash
    $pass_sha = $sha.ComputeHash([System.Text.Encoding]::UTF8.GetBytes($plaintext)+$salt)
    # Generate base64 hash of the two
    $pass_base64 = [System.Convert]::ToBase64String($pass_sha+$salt)
} else {
    # Generate salt
    $salt = New-Object Byte[] 8
    $rng.GetBytes($salt)

    # salted SHA1 hash
    $pass_sha = $sha.ComputeHash([System.Text.Encoding]::UTF8.GetBytes($plaintext)+$salt)
    # Generate base64 hash of the two
    $pass_base64 = [System.Convert]::ToBase64String($pass_sha+$salt)
}

# Verify password is good, actually
[System.Reflection.Assembly]::LoadWithPartialName("Microsoft.VisualBasic")
$sha = New-Object System.Security.Cryptography.SHA1CryptoServiceProvider

$verifypass = [System.BitConverter]::ToString([System.Convert]::FromBase64String($pass_base64)).ToLower() -replace '-'
if ($verifypass.Length -ne 56) { Write-Host "something very bad is going on here and I do not approve" }

$verifysalt = [Microsoft.VisualBasic.Strings]::Right($verifypass,16)
$verifysalt = $verifysalt -replace '' -split "(?<=\G\w{2})(?=\w{2})" | %{ [Convert]::ToByte( $_, 16 ) }
if ($verifysalt -ne $salt) { Write-Host "how did you mess up this bad and what did you do" }

$verifysha = [Microsoft.VisualBasic.Strings]::Left($verifypass,40)
$verifysha = $verifysha -replace '' -split "(?<=\G\w{2})(?=\w{2})" | %{ [Convert]::ToByte( $_, 16 ) }
if ($verifysha -ne $pass_sha) { Write-Host "you donked up, friendo. you donked up real bad." }



# Add the user to the LDAP
$req = (New-Object "System.DirectoryServices.Protocols.AddRequest")
$req.DistinguishedName = "cn=$newuser,$baseDN"
$req.Attributes.Add((New-Object "System.DirectoryServices.Protocols.DirectoryAttribute" -ArgumentList "objectClass",@("person","inetOrgPerson")))
$req.Attributes.Add((New-Object "System.DirectoryServices.Protocols.DirectoryAttribute" -ArgumentList "givenName",$firstname))
$req.Attributes.Add((New-Object "System.DirectoryServices.Protocols.DirectoryAttribute" -ArgumentList "sn","$surname"))
$req.Attributes.Add((New-Object "System.DirectoryServices.Protocols.DirectoryAttribute" -ArgumentList "uid","$newuser"))
$req.Attributes.Add((New-Object "System.DirectoryServices.Protocols.DirectoryAttribute" -ArgumentList "uidNumber",`
    "[int]($req.Entries | Select-Object @{E={$_.Attributes['uidNumber'].GetValues('string')};Name="uid"} | Sort-Object "uid" -Descending).uid[0]+1"))
$req.Attributes.Add((New-Object "System.DirectoryServices.Protocols.DirectoryAttribute" -ArgumentList "gidNumber",`
    "[int]($req.Entries | Select-Object @{E={$_.Attributes['gidNumber'].GetValues('string')};Name="gid"} | Sort-Object "gid" -Descending).gid[0]+1"))
$req.Attributes.Add((New-Object "System.DirectoryServices.Protocols.DirectoryAttribute" -ArgumentList "homeDirectory","/home/$newuser"))                        #modify this as necessary
$req.Attributes.Add((New-Object "System.DirectoryServices.Protocols.DirectoryAttribute" -ArgumentList "userPassword","{ssha}$pass_base64"))

$doreq = $conn.SendRequest($req)
if ($req.ResultCode -ne [System.DirectoryServices.Protocols.ResultCode]::Success) {
    Write-Host "`aSomething happen! Bad!!`nResultCode: $req.ResultCode`nMessage: $req.ErrorMessage`a"
}

$conn.Dispose()

anthonypants fucked around with this message at 02:13 on Feb 16, 2018

    # Search through each line of each document for the given string.
    foreach($doc in $documents){
        $progressNum++

        $reader = new-object System.IO.StreamReader($doc)
        while(($line = $reader.ReadLine()) -ne $null){
            # If the string is found, let the user know what document had it and stop searching this document.
            if ($line.contains($s)) { 
                 "$date -- $time : !! WARNING: Found $s in $doc, was file # $progressNum of $docNum results set !!" 
                $resultsNum++
                break
            }
        }
        $reader.Close()
    }

    ""
     "Search for '$s' completed:"
     "$docNum documents searched."
     "$resultsNum documents containing '$s' were found."
    ""

"$date -- $time : !! WARNING: Found $s in $doc, was file # $progressNum of $docNum results set !!"  | Out-File "C:\logs\scriptNameLog - $date.txt" -Append

Mo_Steel fucked around with this message at 13:39 on Aug 24, 2016

anthonypants fucked around with this message at 23:08 on Aug 24, 2016

Methanar fucked around with this message at 23:42 on Aug 24, 2016