1719 lines
62 KiB
PowerShell
1719 lines
62 KiB
PowerShell
function ProcessADObjects
|
|
{
|
|
param
|
|
(
|
|
[Parameter(Mandatory = $true, Position = 0)]
|
|
$adObjectEntries,
|
|
[Parameter(Mandatory = $true, Position = 1)]
|
|
[String] $roletypeTag
|
|
)
|
|
$begin = Get-Date
|
|
outLog "ProcessADObjects called at: " $begin $init
|
|
|
|
$adObjectEntries | Add-Member OldName ""
|
|
$adObjectEntries | Add-Member GroupName ""
|
|
$adObjectEntries | Add-Member GUIADGroupName ""
|
|
$adObjectEntries | Add-Member GUIADGroupDisplayName ""
|
|
|
|
$DAWGruppenAnlegenOutList = [System.Collections.Generic.List[string]]::new()
|
|
$DAWGruppenverwaltungOutList = [System.Collections.Generic.List[string]]::new()
|
|
$DAWGruppenverwaltungNeuOutList = [System.Collections.Generic.List[string]]::new()
|
|
$KURSSollProfileOutList = [System.Collections.Generic.List[string]]::new()
|
|
$KURSIstMitarbeiterProfileOutList = [System.Collections.Generic.List[string]]::new()
|
|
|
|
|
|
$MitarbeiterEntries = Get-Content -Path $MitarbeiterInFilePath | ConvertFrom-Csv -Delimiter ";"
|
|
$mitarbeiter_array = @{ "mitarbeiter" = "mitarbeiter" }
|
|
$mitarbeiterStelle_array = @{ "mitarbeiter" = "stelle" }
|
|
foreach ($item in $MitarbeiterEntries)
|
|
{
|
|
outLogVerbose 'foreach $item in $MitarbeiterEntries:' $item.'St.-Nr.'
|
|
if ([System.String]::IsNullOrEmpty($item.Benutzerkennung))
|
|
{
|
|
outLogVerbose 'if ([System.String]::IsNullOrEmpty($item.Benutzerkennung)) -> true'
|
|
continue
|
|
}
|
|
try
|
|
{
|
|
$mitarbeiter_array.Add($item.Benutzerkennung,([string]$item.Personalnummer).PadLeft(10, '0'))
|
|
$oe = $item."OE-Schl$( [char]0x00fc )ssel"
|
|
$stelle = ($item.'St.-Nr.').PadLeft(4, '0')
|
|
$dum = $oe + "/" + $stelle
|
|
$mitarbeiterStelle_array.Add($item.Benutzerkennung, $dum)
|
|
}
|
|
catch
|
|
{
|
|
writeExceptionInfo $_ -Rethrow
|
|
}
|
|
}
|
|
|
|
$pkey_array = @{ "key" = 0 }
|
|
$rbkey_array = @{ "key" = 0 }
|
|
|
|
if ($roletypeTag -ieq $FI.TypeTagFilesystemAccess)
|
|
{
|
|
outLogVerbose 'if ($roletypeTag -ieq $FI.TypeTagFilesystemAccess) -> true'
|
|
try
|
|
{
|
|
|
|
$DirectoriesFilePath = $DirectoriesInFilePath
|
|
|
|
$AnwendungenFilePath = $ApplicationsInFilePath
|
|
$AnwendungenFilePathEntries = Get-Content -Path $AnwendungenFilePath | ConvertFrom-Csv -Delimiter ";"
|
|
$nummer_array = @{ "nummer" = "nummer" }
|
|
|
|
foreach ($item in $AnwendungenFilePathEntries)
|
|
{
|
|
outLogVerbose 'foreach $item in $AnwendungenFilePathEntries:' $item.Verzeichnisname
|
|
if ([System.String]::IsNullOrEmpty($item.Verzeichnisname))
|
|
{
|
|
outLogVerbose 'if ([System.String]::IsNullOrEmpty($item.Verzeichnisname)) -> true'
|
|
continue
|
|
}
|
|
try
|
|
{
|
|
$nummer_array[$item.Verzeichnisname] = $item.'Nr.'
|
|
}
|
|
catch
|
|
{
|
|
writeExceptionInfo $_ -Rethrow
|
|
}
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
$header = "Verzeichnisname", "Normierter Pfad", "Verzeichnisart", "AWNR", "Anwendungskuerzel", "Gruppe Lesen", "Gruppe Aendern", "Verantwortlicher (Stelle oder Personalnummer)"
|
|
$DirectoriesFilePathEntries = Get-Content -Path $DirectoriesFilePath | Select-Object -Skip 1 | ConvertFrom-Csv -Delimiter ";" -Header $header
|
|
|
|
|
|
$art_array = @{ "art" = "art" }
|
|
$path_array = @{ "path" = "path" }
|
|
$endpunkt_array = @{ "endpunkt" = "endpunkt" }
|
|
$verantwortlicher_array = @{ "verantwortlicher" = "verantwortlicher" }
|
|
$dkz_array = @{ "kz" = "kz" }
|
|
$dnummer_array = @{ "dnummer" = "dnummer" }
|
|
$fullpath_array = @{ "fullpath" = "fullpath" }
|
|
|
|
foreach ($item in $DirectoriesFilePathEntries)
|
|
{
|
|
outLogVerbose 'foreach $item in $DirectoriesFilePathEntries:' $item.Verzeichnisname
|
|
try
|
|
{
|
|
|
|
|
|
$art_array[$item.'Gruppe Lesen'] = $item.Verzeichnisart
|
|
$path_array[$item.'Gruppe Lesen'] = $item.'Normierter Pfad'
|
|
$verantwortlicher_array[$item.'Gruppe Lesen'] = $item.'Verantwortlicher (Stelle oder Personalnummer)'
|
|
$dkz_array[$item.'Gruppe Lesen'] = $item.Anwendungskuerzel
|
|
$dnummer_array[$item.'Gruppe Lesen'] = $item.AWNR
|
|
$fullpath_array[$item.'Gruppe Lesen'] = $item.Verzeichnisname
|
|
$verantwortlicher_array[$item.'Gruppe Aendern'] = $item.'Verantwortlicher (Stelle oder Personalnummer)'
|
|
$dkz_array[$item.'Gruppe Aendern'] = $item.Anwendungskuerzel
|
|
$dnummer_array[$item.'Gruppe Aendern'] = $item.AWNR
|
|
$fullpath_array[$item.'Gruppe Aendern'] = $item.Verzeichnisname
|
|
}
|
|
catch
|
|
{
|
|
writeExceptionInfo $_ -Rethrow
|
|
}
|
|
try
|
|
{
|
|
$endpunkt_array[$item.'Gruppe Lesen'] = $item.Verzeichnisname
|
|
}
|
|
catch
|
|
{
|
|
writeExceptionInfo $_ -Rethrow
|
|
}
|
|
|
|
|
|
try
|
|
{
|
|
$art_array[$item.'Gruppe Aendern'] = $item.Verzeichnisart
|
|
}
|
|
catch
|
|
{
|
|
writeExceptionInfo $_ -Rethrow
|
|
}
|
|
|
|
try
|
|
{
|
|
$path_array[$item.'Gruppe Aendern'] = $item.'Normierter Pfad'
|
|
$verantwortlicher_array[$item.'Gruppe Aendern'] = $item.'Verantwortlicher (Stelle oder Personalnummer)'
|
|
}
|
|
catch
|
|
{
|
|
writeExceptionInfo $_ -Rethrow
|
|
}
|
|
try
|
|
{
|
|
$endpunkt_array[$item.'Gruppe Aendern'] = $item.Verzeichnisname
|
|
}
|
|
catch
|
|
{
|
|
writeExceptionInfo $_ -Rethrow
|
|
}
|
|
}
|
|
|
|
$FileSystemAccessEntries = Import-Csv -Path $FileSystemAccessTmpFilePath -Delimiter ";"
|
|
$FileSystemAccessEntriesNew = [System.Collections.Generic.List[object]]::new()
|
|
|
|
$key_array = @{ "key" = 0 }
|
|
$avkey_array = @{ "key" = 0 }
|
|
|
|
|
|
|
|
foreach ($item in $FileSystemAccessEntries)
|
|
{
|
|
outLogVerbose 'foreach $item in $FileSystemAccessEntries:' $item.Name
|
|
|
|
if ( $item.Name.Contains("GGF-VDA-"))
|
|
{
|
|
outLogVerbose 'if ($item.Name.Contains("GGF-VDA-")) -> true'
|
|
continue
|
|
}
|
|
|
|
|
|
|
|
$DisplayName = $item.ShortCut + $item.Name.Substring($item.Name.IndexOf('-') + 1)
|
|
$TempString = $item.Name.Split('-')
|
|
|
|
$EndString = ""
|
|
if ( $item.Name.EndsWith("_L"))
|
|
{
|
|
outLogVerbose 'if ($item.Name.EndsWith("_L")) -> true'
|
|
$EndString = "_L"
|
|
}
|
|
elseif ($item.Name.EndsWith("_A"))
|
|
{
|
|
outLogVerbose 'elseif ($item.Name.EndsWith("_A")) -> true'
|
|
$EndString = "_A"
|
|
}
|
|
else
|
|
{
|
|
outLogVerbose 'else -> true (if/elseif ($item.Name.EndsWith("_A")) -> false)'
|
|
$EndString = "_X"
|
|
}
|
|
|
|
$NewShortName = ""
|
|
|
|
$V = ""
|
|
|
|
|
|
|
|
$V = $art_array.Item($item.Name) + "_"
|
|
|
|
if ($art_array.Item($item.Name) -ieq "FAC123")
|
|
{
|
|
outLogVerbose 'if ($art_array.Item($item.Name) -ieq "FAC123") -> true'
|
|
$V = "FAC_"
|
|
$V = ""
|
|
}
|
|
elseif ($art_array.Item($item.Name) -ieq "AUS123")
|
|
{
|
|
outLogVerbose 'elseif ($art_array.Item($item.Name) -ieq "AUS123") -> true'
|
|
$V = "AUS_"
|
|
$V = ""
|
|
}
|
|
elseif ($art_array.Item($item.Name) -ieq "PKU123")
|
|
{
|
|
outLogVerbose 'elseif ($art_array.Item($item.Name) -ieq "PKU123") -> true'
|
|
$V = "PKU_"
|
|
$V = ""
|
|
}
|
|
elseif ($art_array.Item($item.Name) -ieq "SON123")
|
|
{
|
|
outLogVerbose 'elseif ($art_array.Item($item.Name) -ieq "SON123") -> true'
|
|
$V = "SON_"
|
|
$V = ""
|
|
}
|
|
elseif ($art_array.Item($item.Name) -ieq "UBE123")
|
|
{
|
|
outLogVerbose 'elseif ($art_array.Item($item.Name) -ieq "UBE123") -> true'
|
|
$V = "UBE_"
|
|
$V = ""
|
|
}
|
|
elseif ($art_array.Item($item.Name) -ieq "UNT123")
|
|
{
|
|
outLogVerbose 'elseif ($art_array.Item($item.Name) -ieq "UNT123") -> true'
|
|
$V = "UNT_"
|
|
$V = ""
|
|
}
|
|
elseif ($art_array.Item($item.Name) -ieq "VAW123")
|
|
{
|
|
outLogVerbose 'elseif ($art_array.Item($item.Name) -ieq "VAW123") -> true'
|
|
|
|
$V = "VAW_"
|
|
$AWNRNEW = "9997"
|
|
$DKZ = "XXXXX"
|
|
|
|
try
|
|
{
|
|
$AWNRNEW = $dnummer_array.Item($item.Name).PadLeft(4, '0')
|
|
if (-not $AWNRNEW)
|
|
{
|
|
outLogVerbose 'if (-not $AWNRNEW) -> true'
|
|
$AWNRNEW = "9997"
|
|
}
|
|
}
|
|
catch
|
|
{
|
|
writeExceptionInfo $_ -Rethrow
|
|
}
|
|
|
|
try
|
|
{
|
|
$DKZ = $dkz_array.Item($item.Name)
|
|
|
|
if (-not $DKZ)
|
|
{
|
|
outLogVerbose 'if (-not $DKZ) -> true'
|
|
$DKZ = "XXXXX"
|
|
}
|
|
}
|
|
catch
|
|
{
|
|
writeExceptionInfo $_ -Rethrow
|
|
}
|
|
|
|
$V = "VAW_" + $AWNRNEW + "_" + $path_array.Item($item.Name) + $EndString
|
|
$VDUM = $V.Replace("_VR_", "_")
|
|
$V = $VDUM
|
|
}
|
|
|
|
if ( $art_array.Contains($item.Name))
|
|
{
|
|
outLogVerbose 'if ($art_array.Contains($item.Name)) -> true'
|
|
if ($art_array.Item($item.Name) -ieq "Programm-Ablage")
|
|
{
|
|
outLogVerbose 'if ($art_array.Item($item.Name) -ieq "Programm-Ablage") -> true'
|
|
$NewShortName = $V
|
|
}
|
|
elseif ($art_array.Item($item.Name) -ieq "VAW")
|
|
{
|
|
outLogVerbose 'elseif ($art_array.Item($item.Name) -ieq "VAW") -> true'
|
|
$NewShortName = $V
|
|
}
|
|
elseif ($art_array.Item($item.Name) -ieq "PRG")
|
|
{
|
|
outLogVerbose 'elseif ($art_array.Item($item.Name) -ieq "PRG") -> true'
|
|
try
|
|
{
|
|
$AWNRNEW = $dnummer_array.Item($item.Name).PadLeft(4, '0')
|
|
if (-not $AWNRNEW)
|
|
{
|
|
outLogVerbose 'if (-not $AWNRNEW) -> true'
|
|
$AWNRNEW = "9998"
|
|
}
|
|
}
|
|
catch
|
|
{
|
|
$AWNRNEW = "9998"
|
|
writeExceptionInfo $_ -Rethrow
|
|
}
|
|
|
|
$NewShortName = "PRG_" + ([string]$AWNRNEW).PadLeft(4, '0') + "_" + $path_array.Item($item.Name) + $EndString
|
|
}
|
|
else
|
|
{
|
|
outLogVerbose 'else -> true (if/elseif ($art_array.Item($item.Name) -ieq "PRG") -> false)'
|
|
$NewShortName = $V + $path_array.Item($item.Name) + $EndString
|
|
}
|
|
}
|
|
else
|
|
{
|
|
outLogVerbose 'else -> true (if/elseif ($art_array.Contains($item.Name)) -> false)'
|
|
$test = $item.Name.Substring(0, $item.Name.Length - 2)
|
|
|
|
if ( $key_array.ContainsKey($test))
|
|
{
|
|
outLogVerbose 'if ($key_array.ContainsKey($test)) -> true'
|
|
}
|
|
else
|
|
{
|
|
outLogVerbose 'else -> true (if/elseif ($key_array.ContainsKey($test)) -> false)'
|
|
$cntNichtGelistet++
|
|
$key_array.Add($test, $cntNichtGelistet)
|
|
}
|
|
|
|
$NewShortName = "VX_" + "nicht" + "_" + "gelistet" + "_" + $key_array.Item($test) + $EndString
|
|
}
|
|
|
|
$NewFullName = $Institut + "GGX-" + $NewShortName
|
|
|
|
$Description = $item.Description
|
|
|
|
if ( $Description.Contains("## keine Beschreibung ##"))
|
|
{
|
|
outLogVerbose 'if ($Description.Contains("## keine Beschreibung ##")) -> true'
|
|
$VA = $verantwortlicher_array.Item($item.Name)
|
|
$Description = $Description + " Verantwortlicher: " + $VA
|
|
}
|
|
|
|
$FileSystemAccessEntriesNew.Add(@{ GUIMandator = $Institut; 'GUIADGroup.Name' = $NewFullName; 'GUIADGroup.Description' = $item.Description; GUIMandatorADGroupType = "Role"; 'GUIADGroup.DisplayName' = $NewShortName; GUIProcessingNote = ""; OldName = $item.Name })
|
|
$DAWGruppenAnlegenOutLine = $Institut + ";" + $NewFullName.Replace("-SE_", "-VSE_") + ";" + $Description + ";" + 'Role' + ";" + $NewShortName + ";;" + $item.Name
|
|
$DAWGruppenAnlegenOutList.Add($DAWGruppenAnlegenOutLine)
|
|
|
|
}
|
|
$i = 1
|
|
|
|
$CntPRG = 0000000
|
|
$CntSON = 0100000
|
|
$CntSKL = 0200000
|
|
$CntSPK = 0300000
|
|
$CntVRZ = 0400000
|
|
$CntVOE = 0500000
|
|
$CntAKT = 0600000
|
|
$CntMSV = 0700000
|
|
$CntPRO = 0800000
|
|
|
|
|
|
foreach ($item in $FileSystemAccessEntriesNew)
|
|
{
|
|
outLogVerbose 'foreach $item in $FileSystemAccessEntriesNew:' $item.OldName
|
|
$item | Out-String
|
|
|
|
|
|
|
|
$roleType = "unknown"
|
|
$relevantRoleTypes = $SPK.GroupManagementMappings | Where-Object { $_.OU -ieq $FI.TypeTagFilesystemAccess } | Sort-Object { [int]$_.Order }
|
|
foreach ($relevantRoleType in $relevantRoleTypes)
|
|
{
|
|
outLogVerbose 'foreach $relevantRoleType in $relevantRoleTypes:' $relevantRoleType.TypeName
|
|
if ($item.OldName -cmatch $relevantRoleType.TagRegExp)
|
|
{
|
|
outLogVerbose 'if ($item.OldName -cmatch $relevantRoleType.TagRegExp) -> true'
|
|
$roleType = $relevantRoleType.TypeName
|
|
break
|
|
}
|
|
}
|
|
|
|
$DAWGruppenverwaltungOutLine = $Institut + ";" + $roleType + ";" + $item.OldName + ";" + $item.'GUIADGroup.Name'.Replace("-SE_", "-VSE_") + ";" + "" + ";" + "" + ";" + "" + ";" + "" + ";" + "" + ";" + ""
|
|
$DAWGruppenverwaltungOutList.Add($DAWGruppenverwaltungOutLine)
|
|
|
|
$NewFullName = $item.'GUIADGroup.Name'
|
|
$ProfilNummer = 0
|
|
$ProfilName = ""
|
|
$VerzeichnisArt = $art_array.Item($item.OldName)
|
|
|
|
try
|
|
{
|
|
$MYANR = $dnummer_array.Item($item.OldName)
|
|
$DKZ = $dkz_array.Item($item.OldName)
|
|
|
|
if (-not $DKZ)
|
|
{
|
|
outLogVerbose 'if (-not $DKZ) -> true'
|
|
$MYANR = "9997"
|
|
}
|
|
}
|
|
catch
|
|
{
|
|
$MYANR = "9997"
|
|
writeExceptionInfo $_ -Rethrow
|
|
}
|
|
|
|
$FullPath = $fullpath_array.Item($item.OldName)
|
|
|
|
|
|
$AWNRNEW = "9997"
|
|
$EndString = ""
|
|
|
|
try
|
|
{
|
|
$AWNRNEW = $dnummer_array.Item($item.OldName).PadLeft(4, '0')
|
|
if (-not $AWNRNEW)
|
|
{
|
|
outLogVerbose 'if (-not $AWNRNEW) -> true'
|
|
$AWNRNEW = "9998"
|
|
}
|
|
|
|
}
|
|
catch
|
|
{
|
|
$AWNRNEW = "9998"
|
|
writeExceptionInfo $_ -Rethrow
|
|
}
|
|
|
|
if ($VerzeichnisArt -ieq "SKL")
|
|
{
|
|
outLogVerbose 'if ($VerzeichnisArt -ieq "SKL") -> true'
|
|
$ProfilNummer = "42" + ([string]$CntSKL).PadLeft(7, '0')
|
|
$CntSKL++
|
|
|
|
$ProfilName = "SKL " + $NewFullName
|
|
if ( $NewFullName.EndsWith("_A"))
|
|
{
|
|
outLogVerbose 'if ($NewFullName.EndsWith("_A")) -> true'
|
|
$ProfilName = "Zugriff auf SKL aendern " + $NewFullName
|
|
}
|
|
elseif ($NewFullName.EndsWith("_L"))
|
|
{
|
|
outLogVerbose 'elseif ($NewFullName.EndsWith("_L")) -> true'
|
|
$ProfilName = "Zugriff auf SKL lesen " + $NewFullName
|
|
}
|
|
|
|
}
|
|
elseif ($VerzeichnisArt -ieq "SON")
|
|
{
|
|
outLogVerbose 'elseif ($VerzeichnisArt -ieq "SON") -> true'
|
|
$ProfilNummer = "42" + ([string]$CntSON).PadLeft(7, '0')
|
|
$CntSON++
|
|
|
|
$ProfilName = "SON " + $NewFullName
|
|
if ( $NewFullName.EndsWith("_A"))
|
|
{
|
|
outLogVerbose 'if ($NewFullName.EndsWith("_A")) -> true'
|
|
$ProfilName = "Zugriff auf SON aendern " + $NewFullName
|
|
}
|
|
elseif ($NewFullName.EndsWith("_L"))
|
|
{
|
|
outLogVerbose 'elseif ($NewFullName.EndsWith("_L")) -> true'
|
|
$ProfilName = "Zugriff auf SON lesen " + $NewFullName
|
|
}
|
|
}
|
|
|
|
elseif ($VerzeichnisArt -ieq "AKT")
|
|
{
|
|
outLogVerbose 'elseif ($VerzeichnisArt -ieq "AKT") -> true'
|
|
$ProfilNummer = "42" + ([string]$CntAKT).PadLeft(7, '0')
|
|
$CntAKT++
|
|
|
|
$ProfilName = "AKT " + $NewFullName
|
|
if ( $NewFullName.EndsWith("_A"))
|
|
{
|
|
outLogVerbose 'if ($NewFullName.EndsWith("_A")) -> true'
|
|
$ProfilName = "Zugriff auf AKT aendern " + $NewFullName
|
|
}
|
|
elseif ($NewFullName.EndsWith("_L"))
|
|
{
|
|
outLogVerbose 'elseif ($NewFullName.EndsWith("_L")) -> true'
|
|
$ProfilName = "Zugriff auf AKT lesen " + $NewFullName
|
|
}
|
|
|
|
}
|
|
elseif ($VerzeichnisArt -ieq "MSV")
|
|
{
|
|
outLogVerbose 'elseif ($VerzeichnisArt -ieq "MSV") -> true'
|
|
$ProfilNummer = "42" + ([string]$CntMSV).PadLeft(7, '0')
|
|
$CntMSV++
|
|
|
|
$ProfilName = "MSV " + $NewFullName
|
|
if ( $NewFullName.EndsWith("_A"))
|
|
{
|
|
outLogVerbose 'if ($NewFullName.EndsWith("_A")) -> true'
|
|
$ProfilName = "Zugriff auf MSV aendern " + $NewFullName
|
|
}
|
|
elseif ($NewFullName.EndsWith("_L"))
|
|
{
|
|
outLogVerbose 'elseif ($NewFullName.EndsWith("_L")) -> true'
|
|
$ProfilName = "Zugriff auf MSV lesen " + $NewFullName
|
|
}
|
|
|
|
}
|
|
elseif ($VerzeichnisArt -ieq "PRO")
|
|
{
|
|
outLogVerbose 'elseif ($VerzeichnisArt -ieq "PRO") -> true'
|
|
$ProfilNummer = "42" + ([string]$CntPRO).PadLeft(7, '0')
|
|
$CntPRO++
|
|
|
|
$ProfilName = "PRO " + $NewFullName
|
|
if ( $NewFullName.EndsWith("_A"))
|
|
{
|
|
outLogVerbose 'if ($NewFullName.EndsWith("_A")) -> true'
|
|
$ProfilName = "Zugriff auf PRO aendern " + $NewFullName
|
|
}
|
|
elseif ($NewFullName.EndsWith("_L"))
|
|
{
|
|
outLogVerbose 'elseif ($NewFullName.EndsWith("_L")) -> true'
|
|
$ProfilName = "Zugriff auf PRO lesen " + $NewFullName
|
|
}
|
|
|
|
}
|
|
elseif ($VerzeichnisArt -ieq "SPK")
|
|
{
|
|
outLogVerbose 'elseif ($VerzeichnisArt -ieq "SPK") -> true'
|
|
$ProfilNummer = "42" + ([string]$CntSPK).PadLeft(7, '0')
|
|
$CntSPK++
|
|
|
|
$ProfilName = "SPK " + $NewFullName
|
|
if ( $NewFullName.EndsWith("_A"))
|
|
{
|
|
outLogVerbose 'if ($NewFullName.EndsWith("_A")) -> true'
|
|
$ProfilName = "Zugriff auf SPK aendern " + $NewFullName
|
|
}
|
|
elseif ($NewFullName.EndsWith("_L"))
|
|
{
|
|
outLogVerbose 'elseif ($NewFullName.EndsWith("_L")) -> true'
|
|
$ProfilName = "Zugriff auf SPK lesen " + $NewFullName
|
|
}
|
|
}
|
|
elseif ($VerzeichnisArt -ieq "VRZ")
|
|
{
|
|
outLogVerbose 'elseif ($VerzeichnisArt -ieq "VRZ") -> true'
|
|
$ProfilNummer = "42" + ([string]$CntVRZ).PadLeft(7, '0')
|
|
$CntVRZ++
|
|
|
|
$ProfilName = "VRZ " + $NewFullName
|
|
if ( $NewFullName.EndsWith("_A"))
|
|
{
|
|
outLogVerbose 'if ($NewFullName.EndsWith("_A")) -> true'
|
|
$ProfilName = "Zugriff auf VRZ aendern " + $NewFullName
|
|
}
|
|
elseif ($NewFullName.EndsWith("_L"))
|
|
{
|
|
outLogVerbose 'elseif ($NewFullName.EndsWith("_L")) -> true'
|
|
$ProfilName = "Zugriff auf VRZ lesen " + $NewFullName
|
|
}
|
|
|
|
}
|
|
elseif ($VerzeichnisArt -ieq "VOE")
|
|
{
|
|
outLogVerbose 'elseif ($VerzeichnisArt -ieq "VOE") -> true'
|
|
$ProfilNummer = "42" + ([string]$CntVOE).PadLeft(7, '0')
|
|
$CntVOE++
|
|
|
|
$ProfilName = "VOE " + $NewFullName
|
|
if ( $NewFullName.EndsWith("_A"))
|
|
{
|
|
outLogVerbose 'if ($NewFullName.EndsWith("_A")) -> true'
|
|
$ProfilName = "Zugriff auf VOE aendern " + $NewFullName
|
|
}
|
|
elseif ($NewFullName.EndsWith("_L"))
|
|
{
|
|
outLogVerbose 'elseif ($NewFullName.EndsWith("_L")) -> true'
|
|
$ProfilName = "Zugriff auf VOE lesen " + $NewFullName
|
|
}
|
|
|
|
}
|
|
elseif ($VerzeichnisArt -ieq "PRG")
|
|
{
|
|
outLogVerbose 'elseif ($VerzeichnisArt -ieq "PRG") -> true'
|
|
|
|
if ($AWNRNEW -ieq "9997")
|
|
{
|
|
outLogVerbose 'if ($AWNRNEW -ieq "9997") -> true'
|
|
$ProfilNummer = "42" + ([string]$CntPRG).PadLeft(7, '0')
|
|
$CntPRG++
|
|
}
|
|
elseif ($AWNRNEW -ieq "0000")
|
|
{
|
|
outLogVerbose 'elseif ($AWNRNEW -ieq "0000") -> true'
|
|
$ProfilNummer = "42" + ([string]$CntPRG).PadLeft(7, '0')
|
|
$CntPRG++
|
|
}
|
|
else
|
|
{
|
|
outLogVerbose 'else -> true (if/elseif ($AWNRNEW -ieq "0000") -> false)'
|
|
if ( $rbkey_array.ContainsKey("PAN_" + $AWNRNEW))
|
|
{
|
|
outLogVerbose 'if ($rbkey_array.ContainsKey("PAN_" + $AWNRNEW)) -> true'
|
|
$rbkey_array.Item("PAN_" + $AWNRNEW)++
|
|
}
|
|
else
|
|
{
|
|
outLogVerbose 'else -> true (if/elseif ($rbkey_array.ContainsKey("PAN_" + $AWNRNEW)) -> false)'
|
|
$rbkey_array.Add("PAN_" + $AWNRNEW, 200)
|
|
}
|
|
|
|
$ProfilNummer = "40" + ([string]$AWNRNEW).PadLeft(4, '0') + $rbkey_array.Item("PAN_" + $AWNRNEW)
|
|
}
|
|
|
|
$NewFullName = $NewFullName.Replace("PRG_", "PRG_")
|
|
|
|
$ProfilName = "SIA " + $NewFullName
|
|
if ( $NewFullName.EndsWith("_A"))
|
|
{
|
|
outLogVerbose 'if ($NewFullName.EndsWith("_A")) -> true'
|
|
$ProfilName = "Zugriff auf SIA aendern " + $NewFullName.Replace($SPKID + "GGX-", "")
|
|
}
|
|
elseif ($NewFullName.EndsWith("_L"))
|
|
{
|
|
outLogVerbose 'elseif ($NewFullName.EndsWith("_L")) -> true'
|
|
$ProfilName = "Zugriff auf SIA lesen " + $NewFullName.Replace($SPKID + "GGX-", "")
|
|
}
|
|
|
|
}
|
|
elseif ($VerzeichnisArt -ieq "PRG12")
|
|
{
|
|
outLogVerbose 'elseif ($VerzeichnisArt -ieq "PRG12") -> true'
|
|
$ProfilNummer = "42" + ([string]$CntPRG).PadLeft(7, '0')
|
|
$CntPRG++
|
|
|
|
$ProfilName = "PROG " + $NewFullName
|
|
if ( $NewFullName.EndsWith("_A"))
|
|
{
|
|
outLogVerbose 'if ($NewFullName.EndsWith("_A")) -> true'
|
|
$ProfilName = "Zugriff auf PRG aendern " + $NewFullName
|
|
}
|
|
elseif ($NewFullName.EndsWith("_L"))
|
|
{
|
|
outLogVerbose 'elseif ($NewFullName.EndsWith("_L")) -> true'
|
|
$ProfilName = "Zugriff auf PRG lesen " + $NewFullName
|
|
}
|
|
|
|
}
|
|
elseif ($VerzeichnisArt -ieq "VRZ")
|
|
{
|
|
outLogVerbose 'elseif ($VerzeichnisArt -ieq "VRZ") -> true'
|
|
$ProfilNummer = "42" + ([string]$CntVRZ).PadLeft(7, '0')
|
|
$CntVRZ++
|
|
|
|
$ProfilName = "VRZ " + $NewFullName
|
|
if ( $NewFullName.EndsWith("_A"))
|
|
{
|
|
outLogVerbose 'if ($NewFullName.EndsWith("_A")) -> true'
|
|
$ProfilName = "Zugriff auf VRZ aendern " + $NewFullName
|
|
}
|
|
elseif ($NewFullName.EndsWith("_L"))
|
|
{
|
|
outLogVerbose 'elseif ($NewFullName.EndsWith("_L")) -> true'
|
|
$ProfilName = "Zugriff auf VRZ lesen " + $NewFullName
|
|
}
|
|
|
|
}
|
|
elseif ($VerzeichnisArt -ieq "SPK")
|
|
{
|
|
outLogVerbose 'elseif ($VerzeichnisArt -ieq "SPK") -> true'
|
|
$ProfilNummer = "42" + ([string]$CntSPK).PadLeft(7, '0')
|
|
$CntSPK++
|
|
|
|
$ProfilName = "SPK " + $NewFullName
|
|
if ( $NewFullName.EndsWith("_A"))
|
|
{
|
|
outLogVerbose 'if ($NewFullName.EndsWith("_A")) -> true'
|
|
$ProfilName = "Zugriff auf SPK aendern " + $NewFullName
|
|
}
|
|
elseif ($NewFullName.EndsWith("_L"))
|
|
{
|
|
outLogVerbose 'elseif ($NewFullName.EndsWith("_L")) -> true'
|
|
$ProfilName = "Zugriff auf SPK lesen " + $NewFullName
|
|
}
|
|
|
|
}
|
|
|
|
elseif ($VerzeichnisArt -ieq "PROG1")
|
|
{
|
|
outLogVerbose 'elseif ($VerzeichnisArt -ieq "PROG1") -> true'
|
|
$ProfilNummer = $CntProgramm
|
|
$CntProgramm++
|
|
|
|
$ProfilName = "Anwendungsverzeichnis " + $NewFullName
|
|
if ( $NewFullName.EndsWith("_A"))
|
|
{
|
|
outLogVerbose 'if ($NewFullName.EndsWith("_A")) -> true'
|
|
$ProfilName = "Zugriff auf Programm aendern " + $NewFullName
|
|
}
|
|
elseif ($NewFullName.EndsWith("_L"))
|
|
{
|
|
outLogVerbose 'elseif ($NewFullName.EndsWith("_L")) -> true'
|
|
$ProfilName = "Zugriff auf Programm lesen " + $NewFullName
|
|
}
|
|
|
|
$AWNRNEW = "9997"
|
|
$EndString = ""
|
|
|
|
try
|
|
{
|
|
$AWNRNEW = $dnummer_array.Item($item.OldName).PadLeft(4, '0')
|
|
if (-not $AWNRNEW)
|
|
{
|
|
outLogVerbose 'if (-not $AWNRNEW) -> true'
|
|
$AWNRNEW = "9997"
|
|
}
|
|
|
|
}
|
|
catch
|
|
{
|
|
}
|
|
|
|
try
|
|
{
|
|
$DKZ = $dkz_array.Item($item.OldName)
|
|
|
|
if (-not $DKZ)
|
|
{
|
|
outLogVerbose 'if (-not $DKZ) -> true'
|
|
$DKZ = "XXXXX"
|
|
}
|
|
|
|
$bla = $NewFullName.Replace("-AV_", "-AZ_")
|
|
$NewFullName = $bla.Substring(7)
|
|
}
|
|
catch
|
|
{
|
|
writeExceptionInfo $_ -Rethrow
|
|
}
|
|
|
|
if ( $pkey_array.ContainsKey("PAN_" + $AWNRNEW))
|
|
{
|
|
outLogVerbose 'if ($pkey_array.ContainsKey("PAN_" + $AWNRNEW)) -> true'
|
|
$pkey_array.Item("PAN_" + $AWNRNEW)++
|
|
}
|
|
else
|
|
{
|
|
outLogVerbose 'else -> true (if/elseif ($pkey_array.ContainsKey("PAN_" + $AWNRNEW)) -> false)'
|
|
$pkey_array.Add("PAN_" + $AWNRNEW, 1)
|
|
}
|
|
|
|
$ProfilNummer = "10" + $AWNRNEW + "" + ([string]$pkey_array.Item("PAN_" + $AWNRNEW)).PadLeft(3, '0')
|
|
}
|
|
elseif ($VerzeichnisArt -ieq "AW")
|
|
{
|
|
outLogVerbose 'elseif ($VerzeichnisArt -ieq "AW") -> true'
|
|
if ( $avkey_array.ContainsKey("AV_" + $MYANR))
|
|
{
|
|
outLogVerbose 'if ($avkey_array.ContainsKey("AV_" + $MYANR)) -> true'
|
|
$avkey_array.Item("AV_" + $MYANR)++
|
|
}
|
|
else
|
|
{
|
|
outLogVerbose 'else -> true (if/elseif ($avkey_array.ContainsKey("AV_" + $MYANR)) -> false)'
|
|
$avkey_array.Add("AV_" + $MYANR, 1)
|
|
}
|
|
|
|
|
|
$ProfilNummer = "40" + $MYANR.PadLeft(4, '0') + ([string]$avkey_array.Item("AV_" + $MYANR)).PadLeft(3, '0')
|
|
$CntAv++
|
|
|
|
$ProfilName = "AW_" + $NewFullName
|
|
if ( $NewFullName.EndsWith("_A"))
|
|
{
|
|
outLogVerbose 'if ($NewFullName.EndsWith("_A")) -> true'
|
|
$ProfilName = "Zugriff auf Anwendungsverzeichnisse aendern " + $NewFullName
|
|
}
|
|
elseif ($NewFullName.EndsWith("_L"))
|
|
{
|
|
outLogVerbose 'elseif ($NewFullName.EndsWith("_L")) -> true'
|
|
$ProfilName = "Zugriff auf Anwendungsverzeichnisse lesen " + $NewFullName
|
|
}
|
|
|
|
}
|
|
else
|
|
{
|
|
outLogVerbose 'else -> true (if/elseif ($VerzeichnisArt -ieq "AW") -> false)'
|
|
try
|
|
{
|
|
$ProfilNummer = "97000" + ([string]$CntElse).PadLeft(4, '0')
|
|
}
|
|
catch
|
|
{
|
|
$ProfilNummer = "97000" + ([string]$CntElse).PadLeft(4, '0')
|
|
writeExceptionInfo $_ -Rethrow
|
|
}
|
|
$CntElse++
|
|
$ProfilName = "Unbekannte-Ablage " + $NewFullName
|
|
}
|
|
|
|
$dum = $verantwortlicher_array.Item($item.OldName)
|
|
if ($dum)
|
|
{
|
|
outLogVerbose 'if ($dum) -> true'
|
|
if ( $dum.StartsWith("S" + $SPKNO))
|
|
{
|
|
outLogVerbose 'if ($dum.StartsWith("S" + $SPKNO)) -> true'
|
|
$dum = $mitarbeiterStelle_array.Item($verantwortlicher_array.Item($item.OldName))
|
|
}
|
|
}
|
|
else
|
|
{
|
|
outLogVerbose 'else -> true (if/elseif ($dum) -> false)'
|
|
$dum = "0570000/0012"
|
|
}
|
|
|
|
|
|
|
|
|
|
$KURSSollProfileOutLine = ($ProfilNummer).ToString() + ";" + $NewFullName.Replace($SPKID + "GGX-", "").Replace("_1552_", "_AD_") + ";" + $ProfilName.Replace("-AZ_", "-AV_") + ";" + $dum + ";" + $item.OldName + ";" + "Verzeichnispfad: " + $FullPath + ";" + $VerzeichnisArt
|
|
$KURSSollProfileOutList.Add($KURSSollProfileOutLine)
|
|
|
|
|
|
foreach ($item1 in $ADObjectMemberships)
|
|
{
|
|
outLogVerbose 'foreach $item1 in $ADObjectMemberships:' $item1.GroupName
|
|
if ($item1.GroupName -ieq $item.OldName)
|
|
{
|
|
outLogVerbose 'if ($item1.GroupName -ieq $item.OldName) -> true'
|
|
if ($item1.MemberClass -ieq "user")
|
|
{
|
|
outLogVerbose 'if ($item1.MemberClass -ieq "user") -> true'
|
|
$DAWGruppenverwaltungOutLine = $Institut + ";" + "Role" + ";" + $item.'GUIADGroup.Name'.Replace("-SE_", "-VSE_") + ";" + "" + ";" + "" + ";" + $SPK.'RootDomainName' + "\" + $item1.MemberName + ";" + "" + ";" + "" + ";" + "user" + ";" + ""
|
|
$DAWGruppenverwaltungOutList.Add($DAWGruppenverwaltungOutLine)
|
|
|
|
|
|
$dum = $mitarbeiter_array.Item($item1.MemberName)
|
|
if (-not $dum)
|
|
{
|
|
outLogVerbose 'if (-not $dum) -> true'
|
|
$dum = $item1.MemberName
|
|
}
|
|
$KURSIstMitarbeiterProfileOutLine = $dum + ";" + $item.OldName + ";" + ($ProfilNummer).ToString() + ";" + "FileSystemAccess"
|
|
$KURSIstMitarbeiterProfileOutList.Add($KURSIstMitarbeiterProfileOutLine)
|
|
}
|
|
elseif ($item1.MemberClass -ieq "group")
|
|
{
|
|
outLogVerbose 'elseif ($item1.MemberClass -ieq "group") -> true'
|
|
$users = getUsersByMemberGroup $item1.MemberName
|
|
|
|
foreach ($u in $users)
|
|
{
|
|
outLogVerbose 'foreach $u in $users:' $u.MemberName
|
|
$DAWGruppenverwaltungOutLine = $Institut + ";" + "Role" + ";" + $item.'GUIADGroup.Name'.Replace("-SE_", "-VSE_") + ";" + "" + ";" + "" + ";" + $SPK.'RootDomainName' + "\" + $u.MemberName + ";" + "" + ";" + "" + ";" + "group" + ";" + $item1.MemberName
|
|
$DAWGruppenverwaltungOutList.Add($DAWGruppenverwaltungOutLine)
|
|
}
|
|
}
|
|
}
|
|
}
|
|
|
|
$i++
|
|
}
|
|
}
|
|
catch
|
|
{
|
|
writeExceptionInfo $_ -Rethrow
|
|
}
|
|
|
|
}
|
|
|
|
elseif ($roletypeTag -ieq $FI.TypeTagAppAccess)
|
|
{
|
|
outLogVerbose 'elseif ($roletypeTag -ieq $FI.TypeTagAppAccess) -> true'
|
|
try
|
|
{
|
|
|
|
$AnwendungenFilePath = $ApplicationsInFilePath
|
|
$AnwendungenFilePathEntries = Get-Content -Path $AnwendungenFilePath | ConvertFrom-Csv -Delimiter ";"
|
|
$nummer_array = @{ "nummer" = "nummer" }
|
|
$verantwortlicher_array = @{ "verantwortlicher" = "verantwortlicher" }
|
|
$kz_array = @{ "kz" = "kz" }
|
|
$beschreibung_array = @{ "beschreibung" = "beschreibung" }
|
|
|
|
$Verantwortlicher
|
|
$MyKey
|
|
|
|
|
|
|
|
foreach ($item in $AnwendungenFilePathEntries)
|
|
{
|
|
outLogVerbose 'foreach $item in $AnwendungenFilePathEntries:' $item.'Nr.'
|
|
$Verantwortlicher = $item.'Verantwortlicher (FPV)'
|
|
|
|
|
|
if (-not $Verantwortlicher)
|
|
{
|
|
outLogVerbose 'if (-not $Verantwortlicher) -> true'
|
|
$Verantwortlicher = "0570000/0012"
|
|
}
|
|
else
|
|
{
|
|
outLogVerbose 'else -> true (if/elseif (-not $Verantwortlicher) -> false)'
|
|
if ( $Verantwortlicher.StartsWith("S" + $SPKNO))
|
|
{
|
|
outLogVerbose 'if ($Verantwortlicher.StartsWith("S" + $SPKNO)) -> true'
|
|
$dum = $mitarbeiterStelle_array.Item($Verantwortlicher)
|
|
$Verantwortlicher = $dum
|
|
}
|
|
}
|
|
$MyKey = $item.FullAccount.Split('\')
|
|
|
|
|
|
|
|
if ($MyKey[1])
|
|
{
|
|
outLogVerbose 'if ($MyKey[1]) -> true'
|
|
if (-not $nummer_array.ContainsKey($MyKey[1]))
|
|
{
|
|
outLogVerbose 'if (-not $nummer_array.ContainsKey($MyKey[1])) -> true'
|
|
$nummer_array[$MyKey[1]] = $item.'Nr.'
|
|
$verantwortlicher_array[$MyKey[1]] = $Verantwortlicher
|
|
$kz_array[$MyKey[1]] = $item.'AWK'
|
|
$beschreibung_array[$MyKey[1]] = $item.'Beschreibung (256 Zeichen)'
|
|
}
|
|
}
|
|
}
|
|
|
|
|
|
$AppAccessEntries = Import-Csv -Path $AppAccessTmpFilePath -Delimiter ";"
|
|
$AppAccessEntriesNew = [System.Collections.Generic.List[object]]::new()
|
|
foreach ($item in $AppAccessEntries)
|
|
{
|
|
outLogVerbose 'foreach $item in $AppAccessEntries:' $item.Name
|
|
|
|
$AWNR = $nummer_array.Item($item.Name)
|
|
if (-not $AWNR)
|
|
{
|
|
outLogVerbose 'if (-not $AWNR) -> true'
|
|
$AWNR = 9000
|
|
}
|
|
$AWNR = ([string]$AWNR).PadLeft(4, '0')
|
|
$ShortCut = "AZ_"
|
|
if ( $item.Name.Contains("GGF-"))
|
|
{
|
|
outLogVerbose 'if ($item.Name.Contains("GGF-")) -> true'
|
|
$ShortCut = "AZ_"
|
|
}
|
|
|
|
$NewShortName = $ShortCut + $AWNR + "_" + $item.Name.Substring($item.Name.IndexOf('-') + 1)
|
|
$NewFullName = $Institut + "GGX-" + $NewShortName.Replace("Serviceportal", "SVP").Replace("Anforderungsmanagementberichte", "Anforderungsmgtberichte")
|
|
|
|
$AppAccessEntriesNew.Add(@{ GUIMandator = $Institut; 'GUIADGroup.Name' = $NewFullName; 'GUIADGroup.Description' = $item.Description; GUIMandatorADGroupType = "Role"; 'GUIADGroup.DisplayName' = $NewShortName.Replace("Serviceportal", "SVP"); GUIProcessingNote = ""; OldName = $item.Name })
|
|
$DAWGruppenAnlegenOutLine = $Institut + ";" + $NewFullName.Replace("-SE_", "-VSE_") + ";" + $item.Description + ";" + 'Role' + ";" + $NewShortName + ";;" + $item.Name
|
|
$DAWGruppenAnlegenOutList.Add($DAWGruppenAnlegenOutLine)
|
|
}
|
|
|
|
$i = 1
|
|
$ProfilNummerAZ = 1
|
|
$ProfilNummerAV = 1
|
|
|
|
foreach ($item in $AppAccessEntriesNew)
|
|
{
|
|
outLogVerbose 'foreach $item in $AppAccessEntriesNew:' $item.OldName
|
|
|
|
$roleType = "unknown"
|
|
$relevantRoleTypes = $SPK.GroupManagementMappings | Where-Object { $_.OU -ieq $FI.TypeTagAppAccess } | Sort-Object { [int]$_.Order }
|
|
foreach ($relevantRoleType in $relevantRoleTypes)
|
|
{
|
|
outLogVerbose 'foreach $relevantRoleType in $relevantRoleTypes:' $relevantRoleType.TypeName
|
|
if ($item.OldName -cmatch $relevantRoleType.TagRegExp)
|
|
{
|
|
outLogVerbose 'if ($item.OldName -cmatch $relevantRoleType.TagRegExp) -> true'
|
|
$roleType = $relevantRoleType.TypeName
|
|
break
|
|
}
|
|
}
|
|
|
|
if ($item.OldName -like "*GGT-0-*")
|
|
{
|
|
outLogVerbose 'if ($item.OldName -like "*GGT-0-*") -> true'
|
|
$roleType = "ApplicationSIA"
|
|
}
|
|
|
|
$DAWGruppenverwaltungOutLine = $Institut + ";" + $roleType + ";" + $item.OldName + ";" + $item.'GUIADGroup.Name'.Replace("Serviceportal", "SVP").Replace("Anforderungsmanagementberichte", "Anforderungsmgtberichte") + ";" + "" + ";" + "" + ";" + "" + ";" + "" + ";" + "" + ";" + ""
|
|
$DAWGruppenverwaltungOutList.Add($DAWGruppenverwaltungOutLine)
|
|
|
|
$ProfilNummer = ""
|
|
|
|
$NeueBeschreibung = ""
|
|
|
|
if ($item.'GUIADGroup.Name' -like "*GGX-A_*")
|
|
{
|
|
outLogVerbose 'if ($item.''GUIADGroup.Name'' -like "*GGX-A_*") -> true'
|
|
$PnrStr = ([string]$ProfilNummerAZ).PadLeft(3, '0')
|
|
$AWNR = ([string]$nummer_array.Item($item.OldName)).PadLeft(4, '0')
|
|
$ProfilName = "Anwendungszugriff " + $item.'GUIADGroup.Name'
|
|
$dum = $verantwortlicher_array.Item($item.OldName)
|
|
|
|
$kz = $kz_array.Item($item.OldName)
|
|
$NeueBeschreibung = $beschreibung_array.Item($item.OldName)
|
|
|
|
$aname = $item.'GUIADGroup.Name'.Substring(15)
|
|
|
|
|
|
if ($dum)
|
|
{
|
|
outLogVerbose 'if ($dum) -> true'
|
|
if ($dum.StartsWith("S" + $SPKNO))
|
|
{
|
|
outLogVerbose 'if ($dum.StartsWith("S" + $SPKNO)) -> true'
|
|
$dum = $mitarbeiterStelle_array.Item($verantwortlicher_array.Item($item.OldName))
|
|
}
|
|
}
|
|
else
|
|
{
|
|
outLogVerbose 'else -> true (if/elseif ($dum) -> false)'
|
|
$dum = "0570000/0012"
|
|
}
|
|
|
|
if ( $pkey_array.ContainsKey("PAZ_" + $AWNR))
|
|
{
|
|
outLogVerbose 'if ($pkey_array.ContainsKey("PAZ_" + $AWNR)) -> true'
|
|
$pkey_array.Item("PAZ_" + $AWNR)++
|
|
}
|
|
else
|
|
{
|
|
outLogVerbose 'else -> true (if/elseif ($pkey_array.ContainsKey("PAZ_" + $AWNR)) -> false)'
|
|
$pkey_array.Add("PAZ_" + $AWNR, 1000)
|
|
}
|
|
|
|
|
|
if ($AWNR -ieq "0000")
|
|
{
|
|
outLogVerbose 'if ($AWNR -ieq "0000") -> true'
|
|
$AWNR = "9000"
|
|
}
|
|
|
|
$ProfilNummerAZ++
|
|
|
|
$KURSSollProfileOutLine = "40" + $AWNR + "" + ($PnrStr).ToString() + ";" + "AZ_" + $AWNR + "_" + $aname + ";" + $ProfilName.Replace($SPKID + "GGX-", "").Replace("Serviceportal", "SVP").Replace("Anforderungsmanagementberichte", "Anforderungsmgtberichte") + ";" + $dum + ";" + $item.OldName + ";" + $item.'GUIADGroup.Description' + ";Mist"
|
|
$KURSSollProfileOutList.Add($KURSSollProfileOutLine)
|
|
|
|
$ProfilNummer = "10" + $AWNR + "" + ($PnrStr).ToString()
|
|
$ProfilNummerAZ++
|
|
}
|
|
else
|
|
{
|
|
outLogVerbose 'else -> true (if/elseif ($item.''GUIADGroup.Name'' -like "*GGX-A_*") -> false)'
|
|
$AWK = "1"
|
|
$PnrStr = ([string]$ProfilNummerAV).PadLeft(3, '0')
|
|
$AWNR = ([string]$nummer_array.Item($item.OldName)).PadLeft(4, '0')
|
|
|
|
$AWK = ([string]$kz_array.Item($item.OldName)).PadLeft(5, '0')
|
|
|
|
|
|
$dum = $verantwortlicher_array.Item($item.OldName)
|
|
|
|
$kz = $kz_array.Item($item.OldName)
|
|
$NeueBeschreibung = $beschreibung_array.Item($item.OldName)
|
|
|
|
$aname = $item.'GUIADGroup.Name'.Substring(15)
|
|
|
|
if (-not $NeueBeschreibung)
|
|
{
|
|
outLogVerbose 'if (-not $NeueBeschreibung) -> true'
|
|
$ProfilName = "Anwendungszugriff " + $item.'GUIADGroup.Name'
|
|
}
|
|
else
|
|
{
|
|
outLogVerbose 'else -> true (if/elseif (-not $NeueBeschreibung) -> false)'
|
|
$ProfilName = $NeueBeschreibung
|
|
}
|
|
|
|
|
|
|
|
if ($dum)
|
|
{
|
|
outLogVerbose 'if ($dum) -> true'
|
|
if ($dum.StartsWith("S" + $SPKNO))
|
|
{
|
|
outLogVerbose 'if ($dum.StartsWith("S" + $SPKNO)) -> true'
|
|
$dum = $mitarbeiterStelle_array.Item($verantwortlicher_array.Item($item.OldName))
|
|
}
|
|
}
|
|
else
|
|
{
|
|
outLogVerbose 'else -> true (if/elseif ($dum) -> false)'
|
|
$dum = "0570000/0012"
|
|
}
|
|
|
|
if (-not $kz)
|
|
{
|
|
outLogVerbose 'if (-not $kz) -> true'
|
|
$kz = "XXXXX"
|
|
}
|
|
|
|
if ( $pkey_array.ContainsKey("PAZ_" + $AWNR))
|
|
{
|
|
outLogVerbose 'if ($pkey_array.ContainsKey("PAZ_" + $AWNR)) -> true'
|
|
$pkey_array.Item("PAZ_" + $AWNR)++
|
|
}
|
|
else
|
|
{
|
|
outLogVerbose 'else -> true (if/elseif ($pkey_array.ContainsKey("PAZ_" + $AWNR)) -> false)'
|
|
$pkey_array.Add("PAZ_" + $AWNR, 100)
|
|
}
|
|
|
|
$PnrStr = ([string]$pkey_array.Item("PAZ_" + $AWNR)).PadLeft(3, '0')
|
|
|
|
$NNNAME = "AZ_" + $AWNR + $aname
|
|
|
|
|
|
|
|
if ($AWNR -ieq "0000")
|
|
{
|
|
outLogVerbose 'if ($AWNR -ieq "0000") -> true'
|
|
$AWNR = "9998"
|
|
}
|
|
|
|
$MYDESC007 = $ProfilName.Replace($SPKID + "GGX-", "").Replace("Serviceportal", "SVP").Replace("Anforderungsmanagementberichte", "Anforderungsmgtberichte")
|
|
|
|
$KURSSollProfileOutLine = "40" + $AWNR + "" + ($PnrStr).ToString() + ";" + $NNNAME.Replace("-_", "-") + ";" + $MYDESC007 + ";" + $dum + ";" + $item.OldName + ";" + $MYDESC007 + ". AD Beschreibung:" + $item.'GUIADGroup.Description' + ";AppAccess"
|
|
$KURSSollProfileOutList.Add($KURSSollProfileOutLine)
|
|
$ProfilNummer = "10" + $AWNR + "" + ($PnrStr).ToString()
|
|
$ProfilNummerAV++
|
|
}
|
|
|
|
|
|
foreach ($item1 in $ADObjectMemberships)
|
|
{
|
|
outLogVerbose 'foreach $item1 in $ADObjectMemberships:' $item1.GroupName
|
|
|
|
if ($item1.GroupName -ieq $item.OldName)
|
|
{
|
|
outLogVerbose 'if ($item1.GroupName -ieq $item.OldName) -> true'
|
|
if ($item1.MemberClass -ieq "user")
|
|
{
|
|
outLogVerbose 'if ($item1.MemberClass -ieq "user") -> true'
|
|
$DAWGruppenverwaltungOutLine = $Institut + ";" + "Role" + ";" + $item.'GUIADGroup.Name'.Replace("Serviceportal", "SVP").Replace("Anforderungsmanagementberichte", "Anforderungsmgtberichte") + ";" + "" + ";" + "" + ";" + $SPK.'RootDomainName' + "\" + $item1.MemberName + ";" + "" + ";" + "" + ";" + "user" + ";" + $item.OldName
|
|
$DAWGruppenverwaltungOutList.Add($DAWGruppenverwaltungOutLine)
|
|
|
|
|
|
$dum = $mitarbeiter_array.Item($item1.MemberName)
|
|
if (-not $dum)
|
|
{
|
|
outLogVerbose 'if (-not $dum) -> true'
|
|
$dum = $item1.MemberName
|
|
}
|
|
$KURSIstMitarbeiterProfileOutLine = $dum + ";" + $item.OldName + ";" + ($ProfilNummer).ToString() + ";" + "AppAccess"
|
|
$KURSIstMitarbeiterProfileOutList.Add($KURSIstMitarbeiterProfileOutLine)
|
|
}
|
|
elseif ($item1.MemberClass -ieq "group")
|
|
{
|
|
outLogVerbose 'elseif ($item1.MemberClass -ieq "group") -> true'
|
|
$users = getUsersByMemberGroup $item1.MemberName
|
|
foreach ($u in $users)
|
|
{
|
|
outLogVerbose 'foreach $u in $users:' $u.MemberName
|
|
$DAWGruppenverwaltungOutLine = $Institut + ";" + "Role" + ";" + $item.'GUIADGroup.Name'.Replace("Serviceportal", "SVP").Replace("Anforderungsmanagementberichte", "Anforderungsmgtberichte") + ";" + "" + ";" + "" + ";" + $SPK.'RootDomainName' + "\" + $u.MemberName + ";" + "" + ";" + "" + ";" + "group" + ";" + $item.OldName
|
|
$DAWGruppenverwaltungOutList.Add($DAWGruppenverwaltungOutLine)
|
|
}
|
|
}
|
|
}
|
|
}
|
|
|
|
$i++
|
|
}
|
|
}
|
|
catch
|
|
{
|
|
writeExceptionInfo $_ -Rethrow
|
|
}
|
|
}
|
|
elseif ($roletypeTag -ieq $FI.TypeTagAppConfiguration)
|
|
{
|
|
outLogVerbose 'elseif ($roletypeTag -ieq $FI.TypeTagAppConfiguration) -> true'
|
|
foreach ($adObjectEntry in $adObjectEntries)
|
|
{
|
|
outLogVerbose 'foreach $adObjectEntry in $adObjectEntries:' $adObjectEntry.ObjectName
|
|
|
|
|
|
$DisplayName = $adObjectEntry.ShortCut + $adObjectEntry.ObjectName.Substring($adObjectEntry.ObjectName.IndexOf('-') + 1)
|
|
$TempString = $adObjectEntry.ObjectName.Split('-')
|
|
$adObjectEntry.GroupName = $TempString[0] + '-' + $DisplayName
|
|
|
|
|
|
$NewFullName = $Institut + "GGX-" + $DisplayName.Replace("OFK", "OFFK").Replace("IEK", "IntExK").Replace("WEB_EDGE", "WEB_MEDGE")
|
|
|
|
if ( $NewFullName.Contains("IntExK"))
|
|
{
|
|
outLogVerbose 'if ($NewFullName.Contains("IntExK")) -> true'
|
|
continue
|
|
}
|
|
|
|
if ($DisplayName -eq "AK_WEB_SSKMG-STD")
|
|
{
|
|
outLogVerbose 'if ($DisplayName -eq "AK_WEB_SSKMG-STD") -> true'
|
|
$NewFullName = $Institut + "GGX-AKW_WEB_SSKMG-STD"
|
|
}
|
|
if ($DisplayName -eq "AK_IEK_Admins")
|
|
{
|
|
outLogVerbose 'if ($DisplayName -eq "AK_IEK_Admins") -> true'
|
|
$NewFullName = $Institut + "GGX-AKE_IntExK_Admins"
|
|
}
|
|
if ($DisplayName -eq "AK_OFK_Office_Default")
|
|
{
|
|
outLogVerbose 'if ($DisplayName -eq "AK_OFK_Office_Default") -> true'
|
|
$NewFullName = $Institut + "GGX-AKO_OFFK_Office_Default"
|
|
}
|
|
if ($DisplayName -eq "AK_WEB_IE_ALT_Videoueberwachung")
|
|
{
|
|
outLogVerbose 'if ($DisplayName -eq "AK_WEB_IE_ALT_Videoueberwachung") -> true'
|
|
$NewFullName = $Institut + "GGX-AKW_WEB_IE_ALT_Videoueberwachung"
|
|
}
|
|
if ($DisplayName -eq "AK_WEB_OhneIntranet")
|
|
{
|
|
outLogVerbose 'if ($DisplayName -eq "AK_WEB_OhneIntranet") -> true'
|
|
$NewFullName = $Institut + "GGX-AKW_WEB_OhneIntranet"
|
|
}
|
|
|
|
|
|
$adObjectEntry.OldName = $adObjectEntry.ObjectName
|
|
$adObjectEntry.GUIADGroupName = $adObjectEntry.ObjectName
|
|
$adObjectEntry.GUIADGroupDisplayName = $DisplayName
|
|
$DAWGruppenAnlegenOutLine = $Institut + ";" + $NewFullName + ";" + $adObjectEntry.Description + ";" + 'Role' + ";" + $DisplayName.Replace("OFK", "OFFK").Replace("IEK", "IntExK").Replace("WEB_EDGE", "WEB_MEDGE") + ";" + "" + ";" + $adObjectEntry.ObjectName
|
|
$DAWGruppenAnlegenOutList.Add($DAWGruppenAnlegenOutLine)
|
|
}
|
|
|
|
|
|
$i = 1
|
|
$PNR = 1000000
|
|
$DUMPNR = 410000000
|
|
|
|
$MPNR = 0
|
|
|
|
foreach ($adObjectEntry in $adObjectEntries)
|
|
{
|
|
outLogVerbose 'foreach $adObjectEntry in $adObjectEntries:' $adObjectEntry.ObjectName
|
|
$DisplayName = $adObjectEntry.ShortCut + $adObjectEntry.ObjectName.Substring($adObjectEntry.ObjectName.IndexOf('-') + 1)
|
|
$TempString = $adObjectEntry.ObjectName.Split('-')
|
|
$adObjectEntry.GroupName = $TempString[0] + '-' + $DisplayName
|
|
|
|
|
|
$NewFullName = $Institut + $DisplayName
|
|
if ($DisplayName -eq "AK_WEB_SSKMG-STD")
|
|
{
|
|
outLogVerbose 'if ($DisplayName -eq "AK_WEB_SSKMG-STD") -> true'
|
|
$NewFullName = $Institut + "GGX-AKW_WEB_SSKMG-STD"
|
|
$MPNR = 500000001
|
|
}
|
|
elseif ($DisplayName -eq "AK_IEK_Admins")
|
|
{
|
|
outLogVerbose 'elseif ($DisplayName -eq "AK_IEK_Admins") -> true'
|
|
$NewFullName = $Institut + "GGX-AKE_IntExK_Admins"
|
|
$MPNR = 500000002
|
|
}
|
|
elseif ($DisplayName -eq "AK_OFK_Office_Default")
|
|
{
|
|
outLogVerbose 'elseif ($DisplayName -eq "AK_OFK_Office_Default") -> true'
|
|
$NewFullName = $Institut + "GGX-AKO_OFFK_Office_Default"
|
|
$MPNR = 500000003
|
|
}
|
|
elseif ($DisplayName -eq "AK_WEB_IE_ALT_Videoueberwachung")
|
|
{
|
|
outLogVerbose 'elseif ($DisplayName -eq "AK_WEB_IE_ALT_Videoueberwachung") -> true'
|
|
$NewFullName = $Institut + "GGX-AKW_WEB_IE_ALT_Videoueberwachung"
|
|
$MPNR = 500000004
|
|
}
|
|
elseif ($DisplayName -eq "AK_WEB_OhneIntranet")
|
|
{
|
|
outLogVerbose 'elseif ($DisplayName -eq "AK_WEB_OhneIntranet") -> true'
|
|
$NewFullName = $Institut + "GGX-AKW_WEB_OhneIntranet"
|
|
$MPNR = 500000005
|
|
}
|
|
else
|
|
{
|
|
outLogVerbose 'else -> true (if/elseif ($DisplayName -eq "AK_WEB_OhneIntranet") -> false)'
|
|
$NewFullName = $DisplayName
|
|
$MPNR = $DUMPNR
|
|
}
|
|
|
|
|
|
$roleType = getRoleType $adObjectEntry $roletypeTag
|
|
$DAWGruppenverwaltungOutLine = $Institut + ";" + $roleType + ";" + $adObjectEntry.OldName + ";" + $NewFullName + ";" + "" + ";" + "" + ";" + "" + ";" + "" + ";" + "" + ";" + ""
|
|
$DAWGruppenverwaltungOutList.Add($DAWGruppenverwaltungOutLine)
|
|
$userMemberShips = @(getAllUserMemberships $adObjectEntry)
|
|
|
|
$NewFullName1 = $NewFullName
|
|
|
|
|
|
$StelleVerant = "0570000/0012"
|
|
|
|
|
|
$KURSSollProfileOutLine = "" + $MPNR + ";" + $NewFullName1.Replace($SPKID + "GGX-", "") + ";" + "Anwendungskonfiguration " + $NewFullName1 + ";" + $StelleVerant + ";" + $adObjectEntry.OldName + ";" + $item.'GUIADGroup.Description' + ";AK"
|
|
$KURSSollProfileOutList.Add($KURSSollProfileOutLine)
|
|
$PNR++
|
|
$DUMPNR++
|
|
|
|
foreach ($userMemberShip in $userMemberShips)
|
|
{
|
|
outLogVerbose 'foreach $userMemberShip in $userMemberShips:' $userMemberShip.MemberName
|
|
$DAWGruppenverwaltungOutLine = $Institut + ";" + "Role" + ";" + $NewFullName + ";" + "" + ";" + "" + ";" + $SPK.'RootDomainName' + "\" + $userMemberShip.MemberName + ";" + "" + ";" + "" + ";" + $userMemberShip.Origin + ";" + $userMemberShip.OriginName
|
|
$DAWGruppenverwaltungOutList.Add($DAWGruppenverwaltungOutLine)
|
|
|
|
|
|
$persnr = "0000000000"
|
|
$ProfilNR = "" + $DUMPNR
|
|
|
|
if ($userMemberShip.Origin -ieq "user")
|
|
{
|
|
outLogVerbose 'if ($userMemberShip.Origin -ieq "user") -> true'
|
|
try
|
|
{
|
|
$persnr = $mitarbeiter_array.Item($userMemberShip.MemberName)
|
|
$dum = $mitarbeiter_array.Item($userMemberShip.MemberName)
|
|
if (-not $dum)
|
|
{
|
|
outLogVerbose 'if (-not $dum) -> true'
|
|
$dum = $userMemberShip.MemberName
|
|
}
|
|
$persnr = $dum
|
|
}
|
|
catch
|
|
{
|
|
outLog "User nicht gefunden: " $u.MemberName
|
|
writeExceptionInfo $_ -Rethrow
|
|
}
|
|
$KURSIstMitarbeiterProfileOutLine = $persnr + ";" + $adObjectEntry.OldName + ";" + $ProfilNR + ";" + "AppConfiguration"
|
|
$KURSIstMitarbeiterProfileOutList.Add($KURSIstMitarbeiterProfileOutLine)
|
|
}
|
|
|
|
}
|
|
$i++
|
|
}
|
|
}
|
|
elseif ($roletypeTag -ieq $FI.TypeTagOrganisation)
|
|
{
|
|
outLogVerbose 'elseif ($roletypeTag -ieq $FI.TypeTagOrganisation) -> true'
|
|
|
|
$i = 1
|
|
$ProfilNummer = 1
|
|
$ProfilNR = 440000000
|
|
|
|
foreach ($adObjectEntry in $adObjectEntries)
|
|
{
|
|
outLogVerbose 'foreach $adObjectEntry in $adObjectEntries:' $adObjectEntry.ObjectName
|
|
|
|
$DisplayName = $adObjectEntry.ShortCut + $adObjectEntry.ObjectName.Substring($adObjectEntry.ObjectName.IndexOf('-') + 1)
|
|
$TempString = $adObjectEntry.ObjectName.Split('-')
|
|
$adObjectEntry.GroupName = $TempString[0] + '-' + $DisplayName
|
|
|
|
$NewFullName = $Institut + "GGX-" + $DisplayName
|
|
$NewFullName1 = $NewFullName.Replace($SPKID + "GGX-O", $SPKID + "GGX-OG")
|
|
$DisplayName1 = $DisplayName.Replace("O_", "OG_")
|
|
|
|
$adObjectEntry.OldName = $adObjectEntry.ObjectName
|
|
$adObjectEntry.GUIADGroupName = $adObjectEntry.ObjectName
|
|
$adObjectEntry.GUIADGroupDisplayName = $DisplayName
|
|
|
|
|
|
$DAWGruppenAnlegenOutLine = $Institut + ";" + $NewFullName1 + ";" + $adObjectEntry.Description + ";" + 'Role' + ";" + $DisplayName1 + ";" + "" + ";" + $adObjectEntry.ObjectName
|
|
$DAWGruppenAnlegenOutList.Add($DAWGruppenAnlegenOutLine)
|
|
|
|
|
|
|
|
$roleType = "Organisation"
|
|
|
|
$DAWGruppenverwaltungOutLine = $Institut + ";" + $roleType + ";" + $adObjectEntry.OldName + ";" + $NewFullName1 + ";" + "" + ";" + "" + ";" + "" + ";" + "" + ";" + "" + ";" + ""
|
|
$DAWGruppenverwaltungOutList.Add($DAWGruppenverwaltungOutLine)
|
|
|
|
$PnrStr = ([string]$ProfilNummer).PadLeft(2, '0')
|
|
$AWNR = "xxxx"
|
|
$ProfilName = "Organisatorische Gruppe " + $NewFullName1
|
|
$ProfilNR++
|
|
|
|
$KURSSollProfileOutLine = [string]$ProfilNR + ";" + $NewFullName1.Replace($SPKID + "GGX-", "") + ";" + $ProfilName.Replace($SPKID + "GGX-OG_", "") + ";" + "0570000/0012" + ";" + $adObjectEntry.OldName + ";" + $item.'GUIADGroup.Description' + ";OG"
|
|
$KURSSollProfileOutList.Add($KURSSollProfileOutLine)
|
|
$ProfilNummer++
|
|
$userMemberShips = @(getAllUserMemberships $adObjectEntry)
|
|
foreach ($userMemberShip in $userMemberShips)
|
|
{
|
|
outLogVerbose 'foreach $userMemberShip in $userMemberShips:' $userMemberShip.MemberName
|
|
$DAWGruppenverwaltungOutLine = $Institut + ";" + "Role" + ";" + $NewFullName1 + ";" + "" + ";" + "" + ";" + $SPK.'RootDomainName' + "\" + $userMemberShip.MemberName + ";" + "" + ";" + "" + ";" + $userMemberShip.Origin + ";" + $userMemberShip.OriginName
|
|
$DAWGruppenverwaltungOutList.Add($DAWGruppenverwaltungOutLine)
|
|
|
|
|
|
$persnr = "0000000000"
|
|
|
|
if ($userMemberShip.Origin -ieq "user")
|
|
{
|
|
outLogVerbose 'if ($userMemberShip.Origin -ieq "user") -> true'
|
|
try
|
|
{
|
|
$persnr = $mitarbeiter_array.Item($userMemberShip.MemberName)
|
|
$dum = $mitarbeiter_array.Item($userMemberShip.MemberName)
|
|
if (-not $dum)
|
|
{
|
|
outLogVerbose 'if (-not $dum) -> true'
|
|
$dum = $userMemberShip.MemberName
|
|
}
|
|
$persnr = $dum
|
|
}
|
|
catch
|
|
{
|
|
writeExceptionInfo $_ -Rethrow
|
|
}
|
|
|
|
$KURSIstMitarbeiterProfileOutLine = $persnr + ";" + $adObjectEntry.OldName + ";" + $ProfilNR + ";" + "Organisation"
|
|
$KURSIstMitarbeiterProfileOutList.Add($KURSIstMitarbeiterProfileOutLine)
|
|
}
|
|
|
|
}
|
|
$i++
|
|
}
|
|
}
|
|
|
|
elseif ($roletypeTag -ieq $FI.TypeTagSecurity)
|
|
{
|
|
outLogVerbose 'elseif ($roletypeTag -ieq $FI.TypeTagSecurity) -> true'
|
|
|
|
$SicherheitseinstellungenFilePath = $SecurityInFilePath
|
|
$SicherheitseinstellungenFilePathEntries = Get-Content -Path $SicherheitseinstellungenFilePath | ConvertFrom-Csv -Delimiter ";"
|
|
$sec_array = @{ "nummer" = "nummer" }
|
|
foreach ($item in $SicherheitseinstellungenFilePathEntries)
|
|
{
|
|
outLogVerbose 'foreach $item in $SicherheitseinstellungenFilePathEntries:' $item.Name
|
|
$sec_array[$item.Name] = $item.Verantwortlicher
|
|
}
|
|
|
|
|
|
foreach ($adObjectEntry in $adObjectEntries)
|
|
{
|
|
outLogVerbose 'foreach $adObjectEntry in $adObjectEntries:' $adObjectEntry.OldName
|
|
$adObjectEntry.OldName = $adObjectEntry.ObjectName
|
|
if ( $adObjectEntry.OldName.Contains($SPKID + "GDT"))
|
|
{
|
|
outLogVerbose 'if ($adObjectEntry.OldName.Contains($SPKID + "GDT")) -> true'
|
|
continue
|
|
}
|
|
|
|
$DisplayName = $adObjectEntry.ShortCut + $adObjectEntry.ObjectName.Substring($adObjectEntry.ObjectName.IndexOf('-') + 1)
|
|
$TempString = $adObjectEntry.ObjectName.Split('-')
|
|
$adObjectEntry.GroupName = $TempString[0] + '-' + $DisplayName
|
|
|
|
$NewFullName = $Institut + "GGX-" + $DisplayName
|
|
|
|
|
|
$adObjectEntry.OldName = $adObjectEntry.ObjectName
|
|
$adObjectEntry.GUIADGroupName = $adObjectEntry.ObjectName
|
|
$adObjectEntry.GUIADGroupDisplayName = $DisplayName
|
|
$DAWGruppenAnlegenOutLine = $Institut + ";" + $NewFullName.Replace("-S_", "-SE_") + ";" + $adObjectEntry.Description + ";" + 'Role' + ";" + $NewFullName.Replace($SPKID + "GGX-S_", "SE_") + ";;" + $adObjectEntry.ObjectName
|
|
$DAWGruppenAnlegenOutList.Add($DAWGruppenAnlegenOutLine)
|
|
}
|
|
|
|
$pnPrefix1 = "43"
|
|
$pnPrefix2 = "9000"
|
|
|
|
$pnRules = [System.Collections.Generic.List[object]]::new()
|
|
foreach ($row in $SPK.ProfileNumberMappings)
|
|
{
|
|
outLogVerbose 'foreach $row in $SPK.ProfileNumberMappings:' $row
|
|
$pnRules.Add([pscustomobject]@{
|
|
Pattern = $row.Pattern
|
|
PN = $pnPrefix1 + $pnPrefix2 + $row.Suffix
|
|
})
|
|
}
|
|
|
|
$iSonstiges = 0
|
|
$ProfilNummerSonstigesStartWert = 430000000
|
|
$PN = ""
|
|
$StelleVerant = "0570000/0012"
|
|
|
|
foreach ($adObjectEntry in $adObjectEntries)
|
|
{
|
|
outLogVerbose 'foreach $adObjectEntry in $adObjectEntries:' $adObjectEntry.OldName
|
|
|
|
|
|
if ( $adObjectEntry.OldName.Contains($SPKID + "GDT"))
|
|
{
|
|
outLogVerbose 'if ($adObjectEntry.OldName.Contains($SPKID + "GDT")) -> true'
|
|
continue
|
|
}
|
|
|
|
|
|
$DisplayName = $adObjectEntry.ShortCut + $adObjectEntry.ObjectName.Substring($adObjectEntry.ObjectName.IndexOf('-') + 1)
|
|
$TempString = $adObjectEntry.ObjectName.Split('-')
|
|
$adObjectEntry.GroupName = $TempString[0] + '-' + $DisplayName
|
|
$NewFullName = $Institut + "GGX-" + $DisplayName
|
|
|
|
|
|
$roleType = getRoleType $adObjectEntry $roletypeTag
|
|
$DAWGruppenverwaltungOutLine = $Institut + ";" + $roleType + ";" + $adObjectEntry.OldName + ";" + $NewFullName.Replace("-S_", "-SE_") + ";" + "" + ";" + "" + ";" + "" + ";" + "" + ";" + "" + ";" + ""
|
|
$DAWGruppenverwaltungOutList.Add($DAWGruppenverwaltungOutLine)
|
|
|
|
$PN = $null
|
|
foreach ($rule in $pnRules)
|
|
{
|
|
outLogVerbose 'foreach $rule in $pnRules:' $rule
|
|
if ($DisplayName.Contains($rule.Pattern))
|
|
{
|
|
outLogVerbose 'if ($DisplayName.Contains($rule.Pattern)) -> true'
|
|
$PN = $rule.PN
|
|
break
|
|
}
|
|
}
|
|
if ($null -eq $PN)
|
|
{
|
|
outLogVerbose 'if ($null -eq $PN) -> true'
|
|
$PN = ($ProfilNummerSonstigesStartWert + $iSonstiges).ToString()
|
|
$iSonstiges++
|
|
}
|
|
|
|
$NewFullName1 = $NewFullName.Replace($SPKID + "GGX-S_", $SPKID + "GGX-SE_")
|
|
|
|
|
|
$StelleVerant = $sec_array.Item($adObjectEntry.OldName)
|
|
|
|
$KURSSollProfileOutLine = $PN + ";" + $NewFullName1.Replace($SPKID + "GGX-", "") + ";" + "Sicherheitseinstellung " + $NewFullName1 + ";" + $StelleVerant + ";" + $adObjectEntry.OldName + ";" + $item.'GUIADGroup.Description' + ";SE"
|
|
$KURSSollProfileOutList.Add($KURSSollProfileOutLine)
|
|
$userMemberShips = @(getAllUserMemberships $adObjectEntry)
|
|
|
|
foreach ($userMemberShip in $userMemberShips)
|
|
{
|
|
outLogVerbose 'foreach $userMemberShip in $userMemberShips:' $userMemberShip.MemberName
|
|
$DAWGruppenverwaltungOutLine = $Institut + ";" + "Role" + ";" + $NewFullName1 + ";" + "" + ";" + "" + ";" + $SPK.'RootDomainName' + "\" + $userMemberShip.MemberName + ";" + "" + ";" + "" + ";" + $userMemberShip.Origin + ";" + $userMemberShip.OriginName
|
|
$DAWGruppenverwaltungOutList.Add($DAWGruppenverwaltungOutLine)
|
|
|
|
|
|
$persnr = "0000000000"
|
|
|
|
if ($userMemberShip.Origin -ieq "user")
|
|
{
|
|
outLogVerbose 'if ($userMemberShip.Origin -ieq "user") -> true'
|
|
try
|
|
{
|
|
$persnr = $mitarbeiter_array.Item($userMemberShip.MemberName)
|
|
$dum = $mitarbeiter_array.Item($userMemberShip.MemberName)
|
|
if (-not $dum)
|
|
{
|
|
outLogVerbose 'if (-not $dum) -> true'
|
|
$dum = $userMemberShip.MemberName
|
|
}
|
|
$persnr = $dum
|
|
}
|
|
catch
|
|
{
|
|
writeExceptionInfo $_ -Rethrow
|
|
}
|
|
|
|
$KURSIstMitarbeiterProfileOutLine = $persnr + ";" + $adObjectEntry.OldName + ";" + $PN + ";" + "Security"
|
|
$KURSIstMitarbeiterProfileOutList.Add($KURSIstMitarbeiterProfileOutLine)
|
|
}
|
|
}
|
|
|
|
}
|
|
}
|
|
|
|
elseif ($roletypeTag -ieq $FI.TypeTagRole)
|
|
{
|
|
outLogVerbose 'elseif ($roletypeTag -ieq $FI.TypeTagRole) -> true'
|
|
foreach ($adObjectEntry in $adObjectEntries)
|
|
{
|
|
outLogVerbose 'foreach $adObjectEntry in $adObjectEntries:' $adObjectEntry.ObjectName
|
|
|
|
$DisplayName = $adObjectEntry.ShortCut + $adObjectEntry.ObjectName.Substring($adObjectEntry.ObjectName.IndexOf('-') + 1)
|
|
$TempString = $adObjectEntry.ObjectName.Split('-')
|
|
$adObjectEntry.GroupName = $TempString[0] + '-' + $DisplayName
|
|
|
|
$NewFullName = $SPKID + "GGX-" + $DisplayName
|
|
|
|
|
|
$adObjectEntry.OldName = $adObjectEntry.ObjectName
|
|
$adObjectEntry.GUIADGroupName = $adObjectEntry.ObjectName
|
|
$adObjectEntry.GUIADGroupDisplayName = $DisplayName
|
|
}
|
|
|
|
$prefixMatcher = buildPrefixMatcher $KURSProfilePrefixes
|
|
|
|
$ProfilNummer = 470000000
|
|
$ProfilNummerLM = 471000000
|
|
$iSonstiges = 0
|
|
$PN = ""
|
|
$StelleVerant = "0570000/0012"
|
|
|
|
foreach ($adObjectEntry in $adObjectEntries)
|
|
{
|
|
outLogVerbose 'foreach $adObjectEntry in $adObjectEntries:' $adObjectEntry.ObjectName
|
|
$DisplayName = $adObjectEntry.ShortCut + $adObjectEntry.ObjectName.Substring($adObjectEntry.ObjectName.IndexOf('-') + 1)
|
|
$TempString = $adObjectEntry.ObjectName.Split('-')
|
|
$adObjectEntry.GroupName = $TempString[0] + '-' + $DisplayName
|
|
$NewFullName = $Institut + "GGX-" + $DisplayName
|
|
|
|
if (-not ($adObjectEntry.OldName.StartsWith($SPKID + "GUX")) -and
|
|
-not (testKnownPrefixes $adObjectEntry.OldName $prefixMatcher))
|
|
{
|
|
outLogVerbose 'if (-not ($adObjectEntry.OldName.StartsWith($SPKID + "GUX")) -and -not (testKnownPrefixes $adObjectEntry.OldName $ ...) -> true'
|
|
continue
|
|
}
|
|
|
|
$roleType = getRoleType $adObjectEntry $roletypeTag
|
|
if ( $NewFullName.Contains("R_LM_"))
|
|
{
|
|
outLogVerbose 'if ($NewFullName.Contains("R_LM_")) -> true'
|
|
$PN = ($ProfilNummerLM).ToString()
|
|
$ProfilNummerLM++
|
|
$NewFullName = $NewFullName.Replace("AR_LM_", "LM_")
|
|
}
|
|
else
|
|
{
|
|
outLogVerbose 'else -> true (if/elseif ($NewFullName.Contains("R_LM_")) -> false)'
|
|
$PN = ($ProfilNummer + $iSonstiges).ToString()
|
|
$iSonstiges++
|
|
}
|
|
|
|
$NewFullName1 = $NewFullName.Replace($SPKID + "GGX-S_", $SPKID + "GGX-SE_")
|
|
|
|
|
|
$KURSSollProfileOutLine = $PN + ";" + $NewFullName1.Replace($SPKID + "GGX-", "") + ";" + "Anwenderrolle " + $NewFullName1 + ";" + $StelleVerant + ";" + $adObjectEntry.OldName + ";" + $item.'GUIADGroup.Description' + ";AR"
|
|
$KURSSollProfileOutList.Add($KURSSollProfileOutLine)
|
|
$userMemberShips = @(getAllUserMemberships $adObjectEntry)
|
|
|
|
if (1 -lt 2)
|
|
{
|
|
outLogVerbose 'if (1 -lt 2) -> true'
|
|
foreach ($userMemberShip in $userMemberShips)
|
|
{
|
|
outLogVerbose 'foreach $userMemberShip in $userMemberShips:' $userMemberShip.MemberName
|
|
$DAWGruppenverwaltungOutLine = $Institut + ";" + "Role" + ";" + $NewFullName1 + ";" + "" + ";" + "" + ";" + $SPK.'RootDomainName' + "\" + $userMemberShip.MemberName + ";" + "" + ";" + "" + ";" + $userMemberShip.Origin + ";" + $userMemberShip.OriginName
|
|
$DAWGruppenverwaltungOutList.Add($DAWGruppenverwaltungOutLine)
|
|
|
|
|
|
$persnr = "0000000000"
|
|
|
|
if ($userMemberShip.Origin -ieq "user")
|
|
{
|
|
outLogVerbose 'if ($userMemberShip.Origin -ieq "user") -> true'
|
|
try
|
|
{
|
|
$persnr = $mitarbeiter_array.Item($userMemberShip.MemberName)
|
|
$dum = $mitarbeiter_array.Item($userMemberShip.MemberName)
|
|
if (-not $dum)
|
|
{
|
|
outLogVerbose 'if (-not $dum) -> true'
|
|
$dum = $userMemberShip.MemberName
|
|
}
|
|
$persnr = $dum
|
|
}
|
|
catch
|
|
{
|
|
writeExceptionInfo $_ -Rethrow
|
|
}
|
|
|
|
$KURSIstMitarbeiterProfileOutLine = $persnr + ";" + $adObjectEntry.OldName + ";" + $PN + ";" + "AW"
|
|
$KURSIstMitarbeiterProfileOutList.Add($KURSIstMitarbeiterProfileOutLine)
|
|
}
|
|
}
|
|
}
|
|
|
|
}
|
|
}
|
|
|
|
|
|
$ordinalComparer = [System.StringComparer]::Ordinal
|
|
$DAWGruppenAnlegenOutList.Sort($ordinalComparer)
|
|
$DAWGruppenverwaltungOutList.Sort($ordinalComparer)
|
|
$KURSSollProfileOutList.Sort($ordinalComparer)
|
|
$KURSIstMitarbeiterProfileOutList.Sort($ordinalComparer)
|
|
removeDuplicatesFromSortedList $DAWGruppenAnlegenOutList "DAWGruppenAnlegenOutList"
|
|
removeDuplicatesFromSortedList $DAWGruppenverwaltungOutList "DAWGruppenverwaltungOutList"
|
|
removeDuplicatesFromSortedList $KURSSollProfileOutList "KURSSollProfileOutList"
|
|
removeDuplicatesFromSortedList $KURSIstMitarbeiterProfileOutList "KURSIstMitarbeiterProfileOutList"
|
|
|
|
$DAWGruppenverwaltungNeuOutList.Clear()
|
|
$lastLdap = $null
|
|
foreach ($outLine in $DAWGruppenverwaltungOutList)
|
|
{
|
|
outLogVerbose 'foreach $outLine in $DAWGruppenverwaltungOutList:' $outLine
|
|
$cols = $outLine.Split(";")
|
|
if ([string]::IsNullOrEmpty($cols[5]))
|
|
{
|
|
outLogVerbose 'if ([string]::IsNullOrEmpty($cols[5])) -> true'
|
|
$DAWGruppenverwaltungNeuOutList.Add($outLine)
|
|
$lastLdap = $null
|
|
continue
|
|
}
|
|
if ($cols[2] -cne $lastLdap)
|
|
{
|
|
outLogVerbose 'if ($cols[2] -cne $lastLdap) -> true'
|
|
$DAWGruppenverwaltungNeuOutList.Add($outLine)
|
|
$lastLdap = $cols[2]
|
|
}
|
|
else
|
|
{
|
|
outLogVerbose 'else -> true (if/elseif ($cols[2] -cne $lastLdap) -> false)'
|
|
$DAWGruppenverwaltungNeuOutList.Add(";;;;;" + $cols[5] + ";;;;")
|
|
}
|
|
}
|
|
|
|
$DAWGruppenAnlegenOutList | Out-File $DAWGruppenAnlegenOutFilePath -Encoding "utf8NoBom" -Append
|
|
$DAWGruppenverwaltungOutList | Out-File $DAWGruppenverwaltungOutFilePath -Encoding "utf8NoBom" -Append
|
|
$DAWGruppenverwaltungNeuOutList | Out-File $DAWGruppenverwaltungNeuOutFilePath -Encoding "utf8NoBom" -Append
|
|
$KURSSollProfileOutList | Out-File $KURSSollProfileOutFilePath -Encoding "utf8NoBom" -Append
|
|
$KURSIstMitarbeiterProfileOutList | Out-File $KURSIstMitarbeiterProfileOutFilePath -Encoding "utf8NoBom" -Append
|
|
$DAWGruppenAnlegenOutList.Clear()
|
|
$DAWGruppenverwaltungOutList.Clear()
|
|
$DAWGruppenverwaltungNeuOutList.Clear()
|
|
$KURSSollProfileOutList.Clear()
|
|
$KURSIstMitarbeiterProfileOutList.Clear()
|
|
$end = Get-Date
|
|
outLog "finished: " $MyInvocation.MyCommand " on type " $roletypeTag.PadRight(30, " ") ", used " ($end - $begin)
|
|
}
|