jldap實現Java對LDAP的基本操作

原創 robbinBlog 2018-09-04 02:46

目錄：

  1. 概述
  2. 基本操作
    • 查詢
    • 添加
    • 刪除
    • 修改屬性
    • 驗證密碼

[一]、概述

jldap 官網：http://www.openldap.org/jldap/

可以從官網下載源編譯生成jar包，如果項目是用maven構建的，在pom.xml中增加如下內容即可：

1 <dependency>
2     <groupId>com.novell.ldap</groupId>
3     <artifactId>jldap</artifactId>
4     <version>4.3</version>
5     <type>jar</type>
6     <scope>compile</scope>
7 </dependency>

[二]、基本操作

爲了演示基本的操作，需要搭建個LDAP服務，有關openLDAP在windows上的安裝配置可參見：http://www.micmiu.com/enterprise-app/sso/openldap-windows-config/ ，我配置好演示用的LDAP基本信息可見客戶端截圖：

1.查詢

java代碼：LDAPSearchDemo.java

1 package com.micmiu.ldap;
2  
3 import java.io.UnsupportedEncodingException;
4 import java.util.Enumeration;
5 import java.util.Iterator;
6  
7 import com.novell.ldap.LDAPAttribute;
8 import com.novell.ldap.LDAPAttributeSet;
9 import com.novell.ldap.LDAPConnection;
10 import com.novell.ldap.LDAPEntry;
11 import com.novell.ldap.LDAPException;
12 import com.novell.ldap.LDAPSearchResults;
13 import com.novell.ldap.util.Base64;
14  
15 /**
16  * 查詢條目示例 blog http://www.micmiu.com
17  *
18  * @author Michael
19  *
20  */
21 public class LDAPSearchDemo {
22  
23     /**
24      *
25      * @param args
26      */
27     public static void main(String[] args) {
28  
29         String ldapHost = "localhost";
30         String loginDN = "cn=Manager,dc=micmiu,dc=com";
31         String password = "secret";
32         String searchBase = "dc=micmiu,dc=com";
33         String searchFilter = "objectClass=*";
34  
35         int ldapPort = LDAPConnection.DEFAULT_PORT;
36         // 查詢範圍
37         // SCOPE_BASE、SCOPE_ONE、SCOPE_SUB、SCOPE_SUBORDINATESUBTREE
38         int searchScope = LDAPConnection.SCOPE_SUB;
39  
40         LDAPConnection lc = new LDAPConnection();
41         try {
42             lc.connect(ldapHost, ldapPort);
43             lc.bind(LDAPConnection.LDAP_V3, loginDN, password.getBytes("UTF8"));
44             LDAPSearchResults searchResults = lc.search(searchBase,
45                     searchScope, searchFilter, null, false);
46  
47             while (searchResults.hasMore()) {
48                 LDAPEntry nextEntry = null;
49                 try {
50                     nextEntry = searchResults.next();
51                 } catch (LDAPException e) {
52                     System.out.println("Error: " + e.toString());
53                     if (e.getResultCode() == LDAPException.LDAP_TIMEOUT
54                             || e.getResultCode() == LDAPException.CONNECT_ERROR) {
55                         break;
56                     } else {
57                         continue;
58                     }
59                 }
60                 System.out.println("DN =: " + nextEntry.getDN());
61                 System.out.println("|---- Attributes list: ");
62                 LDAPAttributeSet attributeSet = nextEntry.getAttributeSet();
63                 Iterator<LDAPAttribute> allAttributes = attributeSet.iterator();
64                 while (allAttributes.hasNext()) {
65                     LDAPAttribute attribute = allAttributes.next();
66                     String attributeName = attribute.getName();
67  
68                     Enumeration<String> allValues = attribute.getStringValues();
69                     if (null == allValues) {
70                         continue;
71                     }
72                     while (allValues.hasMoreElements()) {
73                         String value = allValues.nextElement();
74                         if (!Base64.isLDIFSafe(value)) {
75                             // base64 encode and then print out
76                             value = Base64.encode(value.getBytes());
77                         }
78                         System.out.println("|---- ---- " + attributeName
79                                 + " = " + value);
80                     }
81                 }
82             }
83  
84         } catch (LDAPException e) {
85             System.out.println("Error: " + e.toString());
86         } catch (UnsupportedEncodingException e) {
87             System.out.println("Error: " + e.toString());
88         } finally {
89             try {
90                 if (lc.isConnected()) {
91                     lc.disconnect();
92                 }
93             } catch (Exception e) {
94                 e.printStackTrace();
95             }
96         }
97     }
98 }

運行結果：

DN =: dc=micmiu,dc=com
|---- Attributes list:
|---- ---- dc = micmiu
|---- ---- o = Michael Blog
|---- ---- objectClass = domain
|---- ---- objectClass = top
DN =: ou=Developer,dc=micmiu,dc=com
|---- Attributes list:
|---- ---- description = Container for developer entries
|---- ---- ou = Developer
|---- ---- objectClass = organizationalUnit
DN =: ou=Tester,dc=micmiu,dc=com
|---- Attributes list:
|---- ---- description = Container for test entries
|---- ---- ou = Tester
|---- ---- objectClass = organizationalUnit
DN =: uid=Michael,ou=Developer,dc=micmiu,dc=com
|---- Attributes list:
|---- ---- userPassword = 111111
|---- ---- labeledURI = http://www.micmiu.com
|---- ---- uid = Michael
|---- ---- sn = Sun
|---- ---- cn = Michael Sun
|---- ---- mail = [email protected]
|---- ---- objectClass = inetOrgPerson
DN =: uid=Miumiu,ou=Tester,dc=micmiu,dc=com
|---- Attributes list:
|---- ---- userPassword = 111111
|---- ---- labeledURI = http://www.micmiu.com
|---- ---- uid = Miumiu
|---- ---- sn = Wu
|---- ---- cn = Miumiu Wu
|---- ---- objectClass = inetOrgPerson
DN =: dc=app1,dc=micmiu,dc=com
|---- Attributes list:
|---- ---- dc = app1
|---- ---- o = Michael Demo
|---- ---- objectClass = domain
DN =: dc=app2,dc=micmiu,dc=com
|---- Attributes list:
|---- ---- dc = app2
|---- ---- o = Michael Demo
|---- ---- objectClass = domain
DN =: ou=Demo,dc=app1,dc=micmiu,dc=com
|---- Attributes list:
|---- ---- description = Container for Demo entries
|---- ---- ou = Developer
|---- ---- ou = Demo
|---- ---- objectClass = organizationalUnit
DN =: ou=Demo,dc=app2,dc=micmiu,dc=com
|---- Attributes list:
|---- ---- description = Container for Demo entries
|---- ---- ou = Developer
|---- ---- ou = Demo
|---- ---- objectClass = organizationalUnit
DN =: uid=michael,ou=Demo,dc=app1,dc=micmiu,dc=com
|---- Attributes list:
|---- ---- userPassword = 111111
|---- ---- labeledURI = http://www.micmiu.com
|---- ---- uid = michael
|---- ---- sn = Sun
|---- ---- cn = Michael Sun
|---- ---- mail = [email protected]
|---- ---- objectClass = inetOrgPerson
DN =: uid=hazel,ou=Demo,dc=app1,dc=micmiu,dc=com
|---- Attributes list:
|---- ---- userPassword = 111111
|---- ---- labeledURI = http://www.micmiu.com
|---- ---- uid = hazel
|---- ---- sn = Wu
|---- ---- cn = Hazel Wu
|---- ---- objectClass = inetOrgPerson
DN =: uid=michael,ou=Demo,dc=app2,dc=micmiu,dc=com
|---- Attributes list:
|---- ---- userPassword = 111111
|---- ---- labeledURI = http://www.micmiu.com
|---- ---- uid = michael
|---- ---- sn = Sun
|---- ---- cn = Michael Sun
|---- ---- mail = [email protected]
|---- ---- objectClass = inetOrgPerson
DN =: uid=hazel,ou=Demo,dc=app2,dc=micmiu,dc=com
|---- Attributes list:
|---- ---- userPassword = 111111
|---- ---- labeledURI = http://www.micmiu.com
|---- ---- uid = hazel
|---- ---- sn = Wu
|---- ---- cn = Hazel Wu
|---- ---- objectClass = inetOrgPerson

查詢結果和客戶端查詢出的信息一致。

2.添加

java代碼：LDAPAddEntry.java

1 package com.micmiu.ldap;
2  
3 import java.io.UnsupportedEncodingException;
4  
5 import com.novell.ldap.LDAPAttribute;
6 import com.novell.ldap.LDAPAttributeSet;
7 import com.novell.ldap.LDAPConnection;
8 import com.novell.ldap.LDAPEntry;
9 import com.novell.ldap.LDAPException;
10  
11 /**
12  * 添加新條目的示例
13  * blog http://www.micmiu.com
14  *
15  * @author Michael
16  *
17  */
18 public class LDAPAddEntry {
19  
20     /**
21      *
22      * @param args
23      */
24     public static void main(String[] args) {
25  
26         String ldapHost = "localhost";
27         String loginDN = "cn=Manager,dc=micmiu,dc=com";
28         String password = "secret";
29         String containerName = "dc=micmiu,dc=com";
30  
31         int ldapPort = LDAPConnection.DEFAULT_PORT;
32         int ldapVersion = LDAPConnection.LDAP_V3;
33         LDAPConnection lc = new LDAPConnection();
34         LDAPAttributeSet attributeSet = new LDAPAttributeSet();
35  
36         attributeSet.add(new LDAPAttribute("objectclass", new String(
37                 "inetOrgPerson")));
38         attributeSet.add(new LDAPAttribute("cn", "Wukong Sun"));
39         attributeSet.add(new LDAPAttribute("sn", "Sun"));
40         attributeSet.add(new LDAPAttribute("mail", "[email protected]"));
41         attributeSet.add(new LDAPAttribute("labeledURI",
42                 "http://www.micmiu.com"));
43         attributeSet.add(new LDAPAttribute("userPassword", "111111"));
44         attributeSet.add(new LDAPAttribute("uid", "addnew"));
45         String dn = "uid=addnew,ou=Developer,"+containerName;
46         LDAPEntry newEntry = new LDAPEntry(dn, attributeSet);
47         try {
48             lc.connect(ldapHost, ldapPort);
49             lc.bind(ldapVersion, loginDN, password.getBytes("UTF8"));
50             System.out.println("login ldap server successfully.");
51             lc.add(newEntry);
52             System.out.println("Added object: " + dn + " successfully.");
53         } catch (LDAPException e) {
54             e.printStackTrace();
55         } catch (UnsupportedEncodingException e) {
56             System.out.println("Error: " + e.toString());
57         } finally {
58             try {
59                 if (lc.isConnected()) {
60                     lc.disconnect();
61                 }
62             } catch (Exception e) {
63                 e.printStackTrace();
64             }
65         }
66     }
67 }

運行結果：

login ldap server successfully.
Added object: uid=addnew,ou=Developer,dc=micmiu,dc=com successfully.

客戶端刷新後的截圖：

3.刪除

java代碼：LDAPDeleteEntry.java

1 package com.micmiu.ldap;
2  
3 import java.io.UnsupportedEncodingException;
4  
5 import com.novell.ldap.LDAPConnection;
6 import com.novell.ldap.LDAPException;
7  
8 /**
9  * 刪除條目的示例
10  * blog http://www.micmiu.com
11  *
12  * @author Michael
13  *
14  */
15 public class LDAPDeleteEntry {
16  
17     /**
18      * @param args
19      */
20     public static void main(String[] args) {
21  
22         String ldapHost = "localhost";
23         String loginDN = "cn=Manager,dc=micmiu,dc=com";
24         String password = "secret";
25         String deleteDN = "uid=addnew,ou=Developer,dc=micmiu,dc=com";
26  
27         int ldapPort = LDAPConnection.DEFAULT_PORT;
28         int ldapVersion = LDAPConnection.LDAP_V3;
29         LDAPConnection lc = new LDAPConnection();
30         try {
31             lc.connect(ldapHost, ldapPort);
32             lc.bind(ldapVersion, loginDN, password.getBytes("UTF8"));
33  
34             lc.delete(deleteDN);
35             System.out.println(" delete Entry: " + deleteDN + " success.");
36             lc.disconnect();
37         } catch (LDAPException e) {
38             if (e.getResultCode() == LDAPException.NO_SUCH_OBJECT) {
39                 System.err.println("Error: No such object");
40             } else if (e.getResultCode() == LDAPException.INSUFFICIENT_ACCESS_RIGHTS) {
41                 System.err.println("Error: Insufficient rights");
42             } else {
43                 System.err.println("Error: " + e.toString());
44             }
45         } catch (UnsupportedEncodingException e) {
46             System.out.println("Error: " + e.toString());
47         } finally {
48             try {
49                 if (lc.isConnected()) {
50                     lc.disconnect();
51                 }
52             } catch (Exception e) {
53                 e.printStackTrace();
54             }
55         }
56  
57     }
58  
59 }

運行結果：

delete Entry: uid=addnew,ou=Developer,dc=micmiu,dc=com success.

在刷新客戶端後發現剛新增加的條目：addnew 已經被刪除了。

4.修改屬性

java代碼:LDAPAddEntry.java

1 package com.micmiu.ldap;
2  
3 import java.io.UnsupportedEncodingException;
4 import java.util.ArrayList;
5 import java.util.Date;
6 import java.util.List;
7  
8 import com.novell.ldap.LDAPAttribute;
9 import com.novell.ldap.LDAPConnection;
10 import com.novell.ldap.LDAPException;
11 import com.novell.ldap.LDAPModification;
12  
13 /**
14  * 修改操作示例
15  * blog http://www.micmiu.com
16  *
17  * @author Michael
18  *
19  */
20 public class LDAPModifyAttrs {
21  
22     /**
23      * @param args
24      */
25     public static void main(String[] args) {
26  
27         String ldapHost = "localhost";
28         String loginDN = "cn=Manager,dc=micmiu,dc=com";
29         String password = "secret";
30         String modifyDN = "uid=Michael,ou=Developer,dc=micmiu,dc=com";
31  
32         int ldapPort = LDAPConnection.DEFAULT_PORT;
33         int ldapVersion = LDAPConnection.LDAP_V3;
34         LDAPConnection lc = new LDAPConnection();
35  
36         List<LDAPModification> modList = new ArrayList<LDAPModification>();
37  
38         // Add a new value to the description attribute
39         String desc = "This object was modified at " + new Date();
40         LDAPAttribute attribute = new LDAPAttribute("description", desc);
41         modList.add(new LDAPModification(LDAPModification.ADD, attribute));
42  
43         attribute = new LDAPAttribute("telephoneNumber", "180-8888-xxxx");
44         modList.add(new LDAPModification(LDAPModification.ADD, attribute));
45  
46         // Replace the labeledURI address with a new value
47         attribute = new LDAPAttribute("labeledURI", "www.micmiu.com");
48         modList.add(new LDAPModification(LDAPModification.REPLACE, attribute));
49  
50         // delete the email attribute
51         attribute = new LDAPAttribute("mail");
52         modList.add(new LDAPModification(LDAPModification.DELETE, attribute));
53  
54         LDAPModification[] mods = new LDAPModification[modList.size()];
55         mods = (LDAPModification[]) modList.toArray(mods);
56  
57         try {
58             lc.connect(ldapHost, ldapPort);
59             lc.bind(ldapVersion, loginDN, password.getBytes("UTF8"));
60             lc.modify(modifyDN, mods);
61             System.out
62                     .println("LDAPAttribute add、replace、delete all successful.");
63         } catch (LDAPException e) {
64             e.printStackTrace();
65         } catch (UnsupportedEncodingException e) {
66             System.out.println("Error: " + e.toString());
67         } finally {
68             try {
69                 if (lc.isConnected()) {
70                     lc.disconnect();
71                 }
72             } catch (Exception e) {
73                 e.printStackTrace();
74             }
75         }
76  
77     }
78  
79 }

修改後客戶端查詢到的信息截圖如下：

5.驗證密碼

java代碼：LDAPVerifyPassword.java

1 package com.micmiu.ldap;
2  
3 import java.io.UnsupportedEncodingException;
4  
5 import com.novell.ldap.LDAPAttribute;
6 import com.novell.ldap.LDAPConnection;
7 import com.novell.ldap.LDAPException;
8  
9 /**
10  * 驗證密碼的示例
11  * blog http://www.micmiu.com
12  *
13  * @author Michael
14  *
15  */
16 public class LDAPVerifyPassword {
17  
18     /**
19      * @param args
20      */
21     public static void main(String[] args) {
22  
23         String ldapHost = "localhost";
24         String loginDN = "cn=Manager,dc=micmiu,dc=com";
25         String password = "secret";
26         String verifyDN = "uid=Michael,ou=Developer,dc=micmiu,dc=com";
27         String verifyPassword = "111111";
28  
29         int ldapPort = LDAPConnection.DEFAULT_PORT;
30  
31         int ldapVersion = LDAPConnection.LDAP_V3;
32         LDAPConnection lc = new LDAPConnection();
33  
34         try {
35             lc.connect(ldapHost, ldapPort);
36             lc.bind(ldapVersion, loginDN, password.getBytes("UTF8"));
37             LDAPAttribute attr = new LDAPAttribute("userPassword",
38                     verifyPassword);
39             boolean correct = lc.compare(verifyDN, attr);
40             System.out.println(correct ? "The password is correct.^_^"
41                     : "The password is incorrect.!!!");
42         } catch (LDAPException e) {
43             e.printStackTrace();
44             if (e.getResultCode() == LDAPException.NO_SUCH_OBJECT) {
45                 System.err.println("Error: No such entry");
46             } else if (e.getResultCode() == LDAPException.NO_SUCH_ATTRIBUTE) {
47                 System.err.println("Error: No such attribute");
48             } else {
49                 System.err.println("Error: " + e.toString());
50             }
51         } catch (UnsupportedEncodingException e) {
52             System.err.println("Error: " + e.toString());
53         } finally {
54             try {
55                 if (lc.isConnected()) {
56                     lc.disconnect();
57                 }
58             } catch (Exception e) {
59                 e.printStackTrace();
60             }
61         }
62     }
63 }

運行結果：

The password is correct.^_^

驗證密碼成功。

—-

發表評論
所有評論
還沒有人評論，想成為第一個評論的人麼? 請在上方評論欄輸入並且點擊發布.
相關文章

Java使用證書ssl連接域服務器設置

域服務器採用的是windows server 2016版本，由於要新增修改密碼和部門所以要證書才能操作，但是生成了證書以後導入到jdk證書庫也不行，後面發現要在域服務器設置一下開啓AD域證書服務，生成證書可以參考這個博客：生成證書 1、打

辉之素狂 2020-07-02 20:36:38

Ldap之givenName之大坑

givenName字符過長，會導致ldap分配給用戶的權限失敗

Goodjuan 2020-07-08 03:49:09

java對Ldap操作1

前一陣學習了ldap，用java小試了一下，只實現java對ldap的查找、登陸功能，傳上來供初級學者參考: UserDaoLdap:  package ldap;import java.util.List;import ldap.p

sniperit8 2020-07-07 19:26:49

LDAP簡介 - Light weight directory access protocol

Table of Contents 1. 學習資源 2. LDAP入門 1. 學習資源 百度百科 https://baike.baidu.com/item/LDAP LDAP入門：https://www.jianshu.com/p/7e4

RaymondLove~ 2020-07-03 21:42:30

通過rpm安裝openldap

1. 準備安裝包 下載地址: https://download.csdn.net/download/greatjoe/11239861   2. 執行安裝命令 創建安裝腳本 install.sh rpm -ivh cyrus-sasl-

泊凉青川 2020-07-03 19:58:19

Apache Directory Studio Connection openLdap 出現錯誤 (Numerical result out of range)

記錄一個錯誤 在使用Apache Directory Studio Connection openLdap是連接ldap服務出現的錯誤。   這個是因爲我自做主張的改了一個配置，我選了中間的那個SSL。改爲第一個後就可以正常連接了。

泊凉青川 2020-07-03 19:58:18

阿里雲上安裝FreeIPA（ipa-server && ipa-client）

基礎配置 環境：Centos7.6 1core 2GB hostname:ipa.haohaozhu.hadoop 配置hosts 172.17.239.208 ipa.haohaozhu.hadoop ipa.haohaozhu

woloqun 2020-07-02 10:08:33

SonarQube篇-安裝配置sonarqube+gitlab+jenkins+ldap集羣

1 下載需要的軟件包 sonarqube free edition 6.7.5：    https://binaries.sonarsource.com/Distribution/sonarqube/sonarqube-6.7.5.zip

鬼刺 2020-07-01 00:57:35

記第一次提交patch給開源項目的經歷

近期由於工作的原因接觸到了openldap的開源庫，在一次偶然的代碼review的情況下發現了一個內存泄漏的bug。對，不是測試發現的，是代碼審覈看出來的。 問題代碼 該項目github源碼路徑爲：https://github.com/o

Fireplusplus 2020-06-28 11:45:30

單點登陸連接超時的解決方式

登入時自動生成在所有系統的驗證標誌　　本方法需要在各個子系統的登入頁面放置於框架頁面中，在框架的其他頁面中隱藏其他子系統的登入頁面，當點擊“登陸”時觸

wurfl 2020-06-28 11:39:49

spark jobserver加入認證

如何給jobserver加入認證，本文給一些尋找答案的方式。 通過官方文檔和示例一般就能夠解決了。 首先啓用shiro認證 在你的 conf配置文件里加入： shiro { authentication = on # 推薦

嗜血的羔羊 2020-06-26 21:04:49

centos lnmp php安裝ldap拓展

編譯安裝 對LDAP進行檢查安裝 檢查： yum list openldap yum list openldap-devel 安裝 ： yum install openldap yum install openldap-de

渡目成书 2020-06-26 14:28:19

openldap+php-ldap操作

https://www.cnblogs.com/dwj97/p/7513509.html openldap+php-ldap操作 一、基礎知識 首先，如果您對LDAP 不認識，建議先看看[原]LDAP服務介紹一文。本文以Linux 下常用

疯飙的蜗牛 2020-06-25 07:07:26

gitlab使用LDAP用戶管理配置

進入容器修改gitlab配置文件： docker exec -it gitlab bash vi /etc/gitlab/gitlab.rb 或在宿主機下容器卷的映射gitlab目錄下更改配置文件： vi /srv/gitlab/c

爪哇_怪盗基德 2020-06-22 03:42:54

Jenkins使用LDAP用戶管理配置

       因爲Jenkins配置後，管理員賬戶會失效，爲防止一次配置失敗，首先備份下Jenkins的配置文件，當配置失敗時，即還原配置文件。 (具體路徑看安裝時候定義的路徑，參考：/var/lib/jenkins/config.xml

爪哇_怪盗基德 2020-06-22 03:42:54