一,LDAP连接
按套路出牌:
try {
Hashtable env = new Hashtable();
env.put(Context.INITIAL_CONTEXT_FACTORY,"com.sun.jndi.ldap.LdapCtxFactory");
env.put(Context.PROVIDER_URL, url);
env.put(Context.REFERRAL, "follow");
env.put(Context.SECURITY_PRINCIPAL, principal);
env.put(Context.SECURITY_CREDENTIALS, credential);
InitialLdapContext initialContext = new InitialLdapContext(env, null);
System.out.println("连接成功");
return initialContext;
}catch (Exception e){
System.out.println("连接失败:"+e);
return null;
}
二,增加用户账号
首先确定objectClass用那些
BasicAttribute objClasses = new BasicAttribute("objectClass");
objClasses.add("inetOrgPerson");
objClasses.add("posixAccount");
objClasses.add("top");
objClasses.add("enterprisePerson");
objClasses.add("inetLocalMailRecipient");
Attributes attrs = new BasicAttributes();
attrs.put(objClasses);
attrs.put("uidNumber","4100");//针对posixAccount架构而来且ldap要登陆验证需要uidNumver,gidNumber
attrs.put("gidNumber","2000");
attrs.put("homeDirectory","/home/xulu/"+gh);
三,禁用账号
1,修改账号密码:
Change the Password to an Unknown Value
2,增加管理禁用角色:
Assign the nsmanageddisabledrole Role
3,设置账号锁属性:
Set the nsAccountLock Attribute
详细描述:https://docs.oracle.com/cd/E19225-01/820-6551/bzaoe/index.html