AUTOMATITZACIÓ DE TASCAS SHELLSCRIPTS

#!/bin/bash

# Monitor de estado LDAP
# Servidor: 10.0.10.4

LDAP_BASE=”dc=localhost,dc=local”
REPORT_FILE=”/var/log/ldap/monitor_$(date +%Y%m%d_%H%M%S).txt”
ALERT_FILE=”/var/log/ldap/alertas.log”
MAX_CONNECTIONS=100

# Crear directorio de logs
mkdir -p /var/log/ldap

# Contadores
WARNINGS=0
ERRORS=0
OK=0

# Función de alerta
alert() {
local level=$1
local message=$2
echo “[$(date +’%Y-%m-%d %H:%M:%S’)] [$level] $message” | tee -a “$ALERT_FILE”

case $level in
“ERROR”)
((ERRORS++))
;;
“WARNING”)
((WARNINGS++))
;;
“OK”)
((OK++))
;;
esac
}

# Iniciar reporte
init_report() {
cat > “$REPORT_FILE” <<EOF
========================================
MONITOR DE ESTADO LDAP
Servidor: 10.0.10.4
Fecha: $(date ‘+%Y-%m-%d %H:%M:%S’)
========================================

EOF
}

# Verificar servicio
check_service() {
echo “1. ESTADO DEL SERVICIO” >> “$REPORT_FILE”
echo “———————-” >> “$REPORT_FILE”

if systemctl is-active –quiet slapd; then
alert “OK” “Servicio slapd activo”
echo “[OK] Servicio ACTIVO” >> “$REPORT_FILE”
else
alert “ERROR” “Servicio slapd NO activo”
echo “[ERROR] Servicio INACTIVO” >> “$REPORT_FILE”
fi

UPTIME=$(systemctl show slapd –property=ActiveEnterTimestamp –value)
echo “Activo desde: $UPTIME” >> “$REPORT_FILE”
echo “” >> “$REPORT_FILE”
}

# Verificar conectividad
check_connectivity() {
echo “2. CONECTIVIDAD” >> “$REPORT_FILE”
echo “—————” >> “$REPORT_FILE”

if ldapsearch -x -b “$LDAP_BASE” -s base -LLL > /dev/null 2>&1; then
alert “OK” “Conectividad LDAP correcta”
echo “[OK] Puerto 389 respondiendo” >> “$REPORT_FILE”
else
alert “ERROR” “Fallo conectividad LDAP”
echo “[ERROR] Puerto 389 no responde” >> “$REPORT_FILE”
fi

CONNECTIONS=$(ss -tn 2>/dev/null | grep :389 | wc -l)
echo “Conexiones activas: $CONNECTIONS” >> “$REPORT_FILE”

if [ $CONNECTIONS -gt $MAX_CONNECTIONS ]; then
alert “WARNING” “Conexiones elevadas: $CONNECTIONS”
echo “[WARNING] Conexiones por encima del umbral” >> “$REPORT_FILE”
fi
echo “” >> “$REPORT_FILE”
}

# Estadísticas
check_statistics() {
echo “3. ESTADISTICAS” >> “$REPORT_FILE”
echo “—————” >> “$REPORT_FILE”

TOTAL_USERS=$(ldapsearch -x -b “ou=users,$LDAP_BASE” “(objectClass=posixAccount)” 2>/dev/null | grep “^dn:” | wc -l)
TOTAL_GROUPS=$(ldapsearch -x -b “ou=groups,$LDAP_BASE” “(objectClass=posixGroup)” 2>/dev/null | grep “^dn:” | wc -l)

echo “Total usuarios: $TOTAL_USERS” >> “$REPORT_FILE”
echo “Total grupos: $TOTAL_GROUPS” >> “$REPORT_FILE”

alert “OK” “Usuarios: $TOTAL_USERS | Grupos: $TOTAL_GROUPS”
echo “” >> “$REPORT_FILE”
}

# Verificar usuarios huérfanos
check_orphans() {
echo “4. VERIFICACION DE INTEGRIDAD” >> “$REPORT_FILE”
echo “——————————” >> “$REPORT_FILE”

VALID_GIDS=$(ldapsearch -x -b “ou=groups,$LDAP_BASE” “(objectClass=posixGroup)” gidNumber 2>/dev/null | grep “gidNumber:” | awk ‘{print $2}’ | sort -u)

ORPHANS=0
while read -r line; do
if [[ $line == dn:* ]]; then
CURRENT_UID=$(echo “$line” | cut -d’,’ -f1 | cut -d’=’ -f2)
elif [[ $line == gidNumber:* ]]; then
USER_GID=$(echo “$line” | awk ‘{print $2}’)

if ! echo “$VALID_GIDS” | grep -q “^${USER_GID}$”; then
echo “[WARNING] Usuario huerfano: $CURRENT_UID (GID: $USER_GID)” >> “$REPORT_FILE”
alert “WARNING” “Usuario huerfano: $CURRENT_UID (GID: $USER_GID)”
((ORPHANS++))
fi
fi
done < <(ldapsearch -x -b “ou=users,$LDAP_BASE” “(objectClass=posixAccount)” dn gidNumber 2>/dev/null)

if [ $ORPHANS -eq 0 ]; then
echo “[OK] No hay usuarios huerfanos” >> “$REPORT_FILE”
alert “OK” “Sin usuarios huerfanos”
fi
echo “” >> “$REPORT_FILE”
}

# Espacio en disco
check_disk() {
echo “5. RECURSOS” >> “$REPORT_FILE”
echo “———–” >> “$REPORT_FILE”

DB_SIZE=$(du -sh /var/lib/ldap 2>/dev/null | awk ‘{print $1}’)
FREE_SPACE=$(df -h /var/lib/ldap 2>/dev/null | tail -1 | awk ‘{print $4}’)

echo “Tamaño BD LDAP: $DB_SIZE” >> “$REPORT_FILE”
echo “Espacio libre: $FREE_SPACE” >> “$REPORT_FILE”

alert “OK” “BD: $DB_SIZE | Libre: $FREE_SPACE”
echo “” >> “$REPORT_FILE”
}

# Verificar backups
check_backups() {
echo “6. BACKUPS” >> “$REPORT_FILE”
echo “———-” >> “$REPORT_FILE”

if [ -d /var/backups/ldap ]; then
LAST_BACKUP=$(ls -t /var/backups/ldap/data_*.ldif 2>/dev/null | head -1)

if [ -n “$LAST_BACKUP” ]; then
BACKUP_DATE=$(stat -c %y “$LAST_BACKUP” | cut -d’ ‘ -f1)
BACKUP_AGE=$(( ($(date +%s) – $(stat -c %Y “$LAST_BACKUP”)) / 86400 ))

echo “Ultimo backup: $BACKUP_DATE” >> “$REPORT_FILE”
echo “Antiguedad: $BACKUP_AGE dias” >> “$REPORT_FILE”

if [ $BACKUP_AGE -gt 2 ]; then
alert “WARNING” “Backup desactualizado: $BACKUP_AGE dias”
echo “[WARNING] Backup antiguo” >> “$REPORT_FILE”
else
alert “OK” “Backup reciente: $BACKUP_AGE dias”
echo “[OK] Backup actualizado” >> “$REPORT_FILE”
fi
else
alert “ERROR” “Sin backups disponibles”
echo “[ERROR] No hay backups” >> “$REPORT_FILE”
fi
else
alert “WARNING” “Directorio backups no existe”
echo “[WARNING] No configurado” >> “$REPORT_FILE”
fi
echo “” >> “$REPORT_FILE”
}

# Logs
check_logs() {
echo “7. LOGS (ultimas 24h)” >> “$REPORT_FILE”
echo “———————” >> “$REPORT_FILE”

ERROR_COUNT=$(journalctl -u slapd –since “24 hours ago” -p err –no-pager 2>/dev/null | wc -l)

echo “Errores detectados: $ERROR_COUNT” >> “$REPORT_FILE”

if [ $ERROR_COUNT -gt 0 ]; then
alert “WARNING” “$ERROR_COUNT errores en logs”
echo “[WARNING] Errores presentes” >> “$REPORT_FILE”
echo “” >> “$REPORT_FILE”
echo “Ultimos errores:” >> “$REPORT_FILE”
journalctl -u slapd –since “24 hours ago” -p err –no-pager 2>/dev/null | tail -5 >> “$REPORT_FILE”
else
alert “OK” “Sin errores en logs”
echo “[OK] Sin errores” >> “$REPORT_FILE”
fi
echo “” >> “$REPORT_FILE”
}

# Resumen final
finalize_report() {
cat >> “$REPORT_FILE” <<EOF

========================================
RESUMEN
========================================
Comprobaciones OK: $OK
Advertencias: $WARNINGS
Errores: $ERRORS

Reporte guardado en: $REPORT_FILE
Log de alertas en: $ALERT_FILE
========================================
EOF

echo “”
echo “=========================================”
echo ” RESUMEN”
echo “=========================================”
echo “Comprobaciones OK: $OK”
echo “Advertencias: $WARNINGS”
echo “Errores: $ERRORS”
echo “”
echo “Reporte: $REPORT_FILE”
echo “Alertas: $ALERT_FILE”
}

# Main
main() {
echo “=========================================”
echo ” MONITOR LDAP”
echo ” Iniciando verificaciones…”
echo “=========================================”
echo “”

init_report
check_service
check_connectivity
check_statistics
check_orphans
check_disk
check_backups
check_logs
finalize_report
}

main