Apache Directory Studio创建组织机构树

Apache Directory Studio创建组织机构树

准备

了解和介绍LDAP的相关知识，一个非常棒的有关介绍LDAP的网站: www.zytrax.com

工具准备

下载Apache Directory Studio

新建

新建ApachDS Server

默认的，ApacheDS给我们新建了两个分区(partition),我们新增一个分区dc=opensource,dc=com*

即domain,这个是必须先创建的,即使是导入一个完整的LDIF文件，也是要先创建domain:

dn: dc=opensource,dc=com
objectclass: top
objectclass: domain
dc: opensource

新建连接

默认用户名/密码: uid=admin,ou=system/secret

新建树

最后附上LDIF文件：

version: 1

dn: cn=Jhon Doe,ou=hr,ou=account,dc=opensource,dc=com
objectClass: inetOrgPerson
objectClass: top
objectClass: person
objectClass: organizationalPerson
cn: Jhon Doe
sn: Doe
telephoneNumber: 18746789098
title: hr
uid: Jhon
userPassword:: e1NIQX1BUnlVWHpET0xMcjhSUzg1aEE4Q1ZwTXpuRUk9

dn: cn=Tom Gor,ou=develop,ou=account,dc=opensource,dc=com
objectClass: inetOrgPerson
objectClass: top
objectClass: person
objectClass: organizationalPerson
cn: Tom Gor
sn: Gor
uid: Tom
userPassword:: e1NIQX1oby8rNUZCaVhTQU9zRFl5bGwwSnZoQ2VTQVU9

dn: ou=hr,ou=account,dc=opensource,dc=com
objectClass: top
objectClass: organizationalUnit
ou: hr

dn: ou=account,dc=opensource,dc=com
objectClass: top
objectClass: organizationalUnit
ou: account

dn: ou=develop,ou=account,dc=opensource,dc=com
objectClass: top
objectClass: organizationalUnit
ou: develop

dn: cn=ROLE_USER,ou=roles,dc=opensource,dc=com
objectClass: top
objectClass: groupOfUniqueNames
cn: ROLE_USER
uniqueMember: cn=Tom Gor,ou=develop,ou=account,dc=opensource,dc=com

dn: ou=roles,dc=opensource,dc=com
objectClass: top
objectClass: organizationalUnit
ou: roles

dn: cn=Tony Dude,ou=hr,ou=account,dc=opensource,dc=com
objectClass: inetOrgPerson
objectClass: top
objectClass: person
objectClass: organizationalPerson
cn: Tony Dude
sn: Tony
uid: tony
userPassword:: e1NIQX0vcWYyVi9WcUtrU05wOVMxTmU1ZUo1eXZQWm89

dn: cn=ROLE_ADMIN,ou=roles,dc=opensource,dc=com
objectClass: top
objectClass: groupOfUniqueNames
cn: ROLE_ADMIN
uniqueMember: cn=Jhon Doe,ou=hr,ou=account,dc=opensource,dc=com
uniqueMember: cn=Tony Dude,ou=hr,ou=account,dc=opensource,dc=com

dn: dc=opensource,dc=com
objectclass: top
objectclass: domain
dc: opensource

注意：如果手动写LDIF时,一定要先保证先创建父节点，然后才创建子节点，即，如分创建ou=hr节点，必先保证ou=account节点先被创建