【Java】java连接ldap

首先必须了解ldap，ldap相关可以问度娘。这边我重点要提的是dn(distinguished name)，通俗的来说就是唯一标示。

然后现在可以先下一个ldapadmin，通过ldapadmin先连接已经配置好的ldap，下面是微软ad的图。

比如administrator这个用户的dn就是cn=administrator,cn=users,dc=ds-66,dc=com(简单来说就是全路径+域的形式)

最后就可以编码了，连接的代码比较简单，使用fliter的查询部门稍微复杂点，不过仔细看看也很容易理解，如下。

	public static void main(String[] args) {
		String url = "ldap://10.1.0.66:389/";
		String domain = "dc=ds-66,dc=com";
		String user = "cn=administrator,cn=users";
		String password = "111111";
		Hashtable<String, String> env = new Hashtable<String, String>();
		env.put(Context.INITIAL_CONTEXT_FACTORY, "com.sun.jndi.ldap.LdapCtxFactory"); // LDAP 工厂
		env.put(Context.SECURITY_AUTHENTICATION, "simple"); // LDAP访问安全级别
		env.put(Context.PROVIDER_URL, url);
		env.put(Context.SECURITY_PRINCIPAL, user+","+domain); //  填DN
		env.put(Context.SECURITY_CREDENTIALS, password); // AD Password
		env.put("java.naming.ldap.attributes.binary", "objectSid objectGUID");
		LdapContext ldapCtx = null;
		try {
			ldapCtx = new InitialLdapContext(env , null);
			queryGroup(ldapCtx);
			//queryUser(ldapCtx);		
			
		} catch (NamingException e) {
			e.printStackTrace();
		} finally {
			if(ldapCtx != null) {
				try {
					ldapCtx.close();
				} catch (NamingException e) {
				}
			}
		}
	}
	
	private static void queryGroup(LdapContext ldapCtx) throws NamingException {
		SearchControls searchCtls = new SearchControls();
		searchCtls.setSearchScope(SearchControls.SUBTREE_SCOPE);
		String searchFilter = "objectClass=organizationalUnit";
		String searchBase = "ou=myDeptSubDept,ou=myDept,dc=DS-66,dc=com";
		String returnedAtts[] = {"distinguishedName", "objectGUID", "name"};
		searchCtls.setReturningAttributes(returnedAtts);
		NamingEnumeration<SearchResult> answer = ldapCtx.search(searchBase, searchFilter, searchCtls);
		while (answer.hasMoreElements()) {
			SearchResult sr = answer.next();
			Attributes Attrs = sr.getAttributes();
			if (Attrs != null) {
				NamingEnumeration<?> ne = Attrs.getAll();
				while(ne.hasMore()) {
					Attribute Attr = (Attribute)ne.next();
					String name = Attr.getID();
					Enumeration<?> values = Attr.getAll();
					if (values != null) { // 迭代
						while (values.hasMoreElements()) {
							String value = "";
							if("objectGUID".equals(name)) {
								value = UUID.nameUUIDFromBytes((byte[]) values.nextElement()).toString();
							} else {
								value = (String)values.nextElement();
							}
							System.out.println(name + " " + value);
						}
					}
				}
				System.out.println("=====================");
			}
		}
		
	}