create account via LDAP in FreeIPA and Active Directory

create-user.sh

#
# FreeIPA
#

ldapmodify \
	-h 'ipa.test.priv' \
	-x \
	-D "$BIND_DN" \
	-w "$BIND_PW" \
	"$@" \
	<<-EOT
		dn: uid=test,cn=users,cn=accounts,dc=test,dc=priv
		changetype: add
		objectclass: top
		objectclass: person
		#            vvvvvvvvvvvv-------- without this, the user won't show up in FreeIPA's UI
		objectclass: posixaccount
		objectclass: inetuser
		objectclass: inetorgperson
		objectclass: ipaobject
		cn: Test User
		uid: test
		sn: User
		givenname: Test
		userPassword: test
		# the following attrs belong to posixaccount:
		homeDirectory: /tmp
		gidNumber: 9999999
		uidNumber: 9999999
EOT


#
# Active Directory
#

ldapmodify \
	-x \
	-H 'ldaps://dc.test.priv' \
	-D "$BIND_DN" \
	-w "$BIND_PW" \
	"$@" \
	<<-EOT
		dn: cn=test, ou=domain users, dc=test, dc=priv
		changetype: add
		objectclass: top
		objectclass: person
		objectclass: user
		cn: test
		givenname: test
		userAccountControl: $(( 0x00000200 | 0x00010000 ))
		unicodePwd:: $( printf '"password"' | iconv -t UTF16LE | base64 )
EOT