微软操作微软AD（LDAP）---链接，查询，添加，删除

package com.abc.xyz;

import java.util.Hashtable;

import javax.naming.Context;
import javax.naming.NamingEnumeration;
import javax.naming.NamingException;
import javax.naming.directory.Attribute;
import javax.naming.directory.Attributes;
import javax.naming.directory.BasicAttribute;
import javax.naming.directory.BasicAttributes;
import javax.naming.directory.DirContext;
import javax.naming.directory.InitialDirContext;
import javax.naming.directory.ModificationItem;
import javax.naming.directory.SearchControls;
import javax.naming.directory.SearchResult;

public class LDAPtest {
	public static void main(String[] args) {
		String account = "administrator";
		String password = "abc";
		String baseName = ",cn=users,dc=xyz,dc=abc,dc=com"; 

		Hashtable<String, String> env = new Hashtable<String, String>();
		env.put(Context.INITIAL_CONTEXT_FACTORY,
				"com.sun.jndi.ldap.LdapCtxFactory");
		env.put(Context.PROVIDER_URL, "ldap://10.221.204.XXX:389");
		env.put(Context.SECURITY_AUTHENTICATION, "simple");
		env.put(Context.SECURITY_PRINCIPAL, "cn=" + account +baseName);
		env.put(Context.SECURITY_CREDENTIALS, password);

		DirContext ctx = null;
		try {
			// 链接ldap
			ctx = new InitialDirContext(env);
			System.out.println("ldap认证成功");

			// 3.添加节点
		    String newUserName = "test";
		    BasicAttributes attrsbu = new BasicAttributes();
		    BasicAttribute objclassSet = new BasicAttribute("objectclass");
		    objclassSet.add("top");
		    objclassSet.add("person");
		    objclassSet.add("organizationalPerson");//可以添加相应的属性
		    objclassSet.add("user");
		    attrsbu.put(objclassSet);
		    attrsbu.put("sn",   newUserName);
		    attrsbu.put("displayName",   newUserName);
		    ctx.createSubcontext("cn=" + newUserName+baseName, attrsbu);
		    System.out.println("添加成功");
		    
			 // 5.修改节点
		    account = "test";
		    String newDisplayName = "testchange";
		    ModificationItem modificationItem[] = new ModificationItem[1];
		    modificationItem[0] = new ModificationItem(DirContext.REPLACE_ATTRIBUTE, new BasicAttribute("displayName", newDisplayName));
		    ctx.modifyAttributes("cn=" + account+baseName, modificationItem);
		    System.out.println("修改成功");


			// 查询节点
			SearchControls constraints = new SearchControls();
			constraints.setSearchScope(SearchControls.SUBTREE_SCOPE);
			// constraints.setSearchScope(SearchControls.ONELEVEL_SCOPE);
			//String searchFilter = "objectClass=User"; // specify the LDAP search  filter											
			String searchFilter = "cn=test234";
			String searchBase = "dc=xyz,dc=abc,dc=com"; //Specify the Base for the search搜索域节点													
			NamingEnumeration<SearchResult> en = ctx.search(searchBase,searchFilter, constraints); // 查询所有用户
			while (en != null && en.hasMoreElements()) {
				Object obj = en.nextElement();
				if (obj instanceof SearchResult) {
					SearchResult si = (SearchResult) obj;
					System.out.println("name:   " + si.getName());
					Attributes attrs = si.getAttributes();
					if (attrs == null) {
						System.out.println("No   attributes");
					} else {
						for (NamingEnumeration<? extends Attribute> ae = attrs.getAll(); ae.hasMoreElements();) {
							Attribute attr = (Attribute) ae.next();
							String attrId = attr.getID();

							for (NamingEnumeration<?> vals = attr.getAll(); vals.hasMoreElements();) {
								System.out.print(attrId + ":   ");
								Object o = vals.nextElement();
								if (o instanceof byte[])
									System.out.println();// new String((byte[])o)
								else
									System.out.println(o);
							}
						}
					}
				} else {
					System.out.println(obj);
				}
				System.out.println();
			}

			// 4.删除节点
			
			  account = "test"; 
			  ctx.destroySubcontext("cn=" + account+baseName);
			  System.out.println("删除成功");
			

		} catch (javax.naming.AuthenticationException e) {
			System.out.println("认证失败");
		} catch (Exception e) {
			System.out.println("认证出错：");
			e.printStackTrace();
		}

		if (ctx != null) {
			try {
				ctx.close();
			} catch (NamingException e) {
				// ignore
			}
		}
		System.exit(0);
	}
}