#!/bin/bash
#

if [ -z "$1" -o "$1" = "-h" -o "$1" = "--help" ] ; then
	echo "$(dirname "$0") [<DN>|--all]"
	exit 0
fi

fix_policy () {
	DN="$1"

	OC="$(univention-ldapsearch -b "$DN" -s base -LLL objectClass | egrep "^objectClass: " | egrep -v "^objectClass: univentionPolicy$")"

	cat > "$FN" <<EOF
dn: $DN
changetype: modify
replace: objectClass
objectClass: univentionPolicy
$OC

EOF

   ldapmodify -D "cn=admin,$(ucr get ldap/base)" -y /etc/ldap.secret -f "$FN"
}

FN="$(mktemp)"

if [ ! "$1" = "--all" ] ; then
	fix_policy "$1"
else
	export IFS="
"
	for dn in $(univention-ldapsearch -LLL "objectClass=univentionPolicy" dn | sed -nre 's/^dn: //p'); do
		fix_policy "$dn"
	done
fi

rm -f "$FN"