java ldap api_使用JAVA自带方法增删改查LDAP

今天搭建了一个openLDAP的环境，并创建了下面的结构：

dc=ibm,dc=com

ou=developer,dc=ibm,dc=com

ou=tester,dc=ibm,dc=com

uid=bill,ou=developer,dc=ibm,dc=com

uid=kent,ou=tester,dc=ibm,dc=com

OpenLDAP的配置方法:

1, 安装.

2, 修改slapd.conf, 更改suffix和root dn. 重启instance. 如果是windows,则重启service.

3, 创建ldif文件, 写入要往ldap中添加的entry. 可以参考openLDAP目录下给的example.

4, 执行添加任务. 如果存在ldapadd,则运行"ldapadd -x -D "bindDN" -w password -f xxx.ldif". 如果没有,则使用slapdadd. "slapadd -v -l xxx.ldif". 记住,执行slapdadd之前,要先停掉ldap.

5, 在Base DN下搜用户 ldapsearch -b "ou=tester,dc=ibm,dc=com "(uid=bi*)"

JAVA操作LDAP:

Official Guide：http://docs.oracle.com/javase/jndi/tutorial/getStarted/examples/directory.html

使用JAVA自带方法，添加修改查询并删除下面的记录

uid=test,ou=tester,dc=ibm,dc=com

执行类

public class TestLdap {

public static void main(String[] args) throws NamingException {

Ldap ldap = Factory.createInstance();

ldap.connect();

try {

// add uid=test,ou=tester,dc=ibm,dc=com

ldap.add();

// search uid=test

ldap.search();

// update cn with new value of "changed name"

ldap.update();

// search uid=test to see cn value.

ldap.search();

// delete uid=test,ou=tester,dc=ibm,dc=com

ldap.delete();

// search again.

ldap.search();

} finally {

ldap.close();

}

}

}

接口

public interface Ldap {

public void connect() throws NamingException;

public void search() throws NamingException;

public void update() throws NamingException;

public void add() throws NamingException;

public void delete() throws NamingException;

public void close() throws NamingException;

}

静态工厂模式

public class Factory {

private static Ldap instance;

public synchronized static Ldap createInstance() {

if (instance == null) {

try {

instance = (Ldap) Class.forName("ldap.LdapImpl").newInstance();

} catch (Exception e) {

throw new RuntimeException(e);

}

}

return instance;

}

}

接口实现

public class LdapImpl implements Ldap {

private DirContext ds;

@Override

public void search() throws NamingException {

System.out.println("Searching...");

SearchControls searchCtls = new SearchControls();

// Specify the search scope

searchCtls.setSearchScope(SearchControls.SUBTREE_SCOPE);

// specify the LDAP search filter

String searchFilter = "uid=test";

// Specify the Base for the search

String searchBase = "dc=ibm,dc=com";

// Specify the attributes to return

String returnedAtts[] = { "cn" };

searchCtls.setReturningAttributes(returnedAtts);

// Search for objects using the filter

NamingEnumeration entries = ds.search(searchBase,

searchFilter, searchCtls);

// Loop through the search results

while (entries.hasMoreElements()) {

SearchResult entry = entries.next();

System.out.println(">>>" + entry.getName());

// Print out the groups

Attributes attrs = entry.getAttributes();

if (attrs != null) {

for (NamingEnumeration extends Attribute> names = attrs

.getAll(); names.hasMore();) {

Attribute attr = names.next();

System.out.println("AttributeID: " + attr.getID());

for (NamingEnumeration> e = attr.getAll(); e.hasMore();) {

System.out.println("Attributes:" + e.next());

}

}

}

}

System.out.println("Search complete.");

}

@Override

public void update() throws NamingException {

System.out.println("Updating...");

ModificationItem[] mods = new ModificationItem[1];

Attribute attr = new BasicAttribute("cn", "changed value");

// Support add, replace and remove an attribute.

mods[0] = new ModificationItem(DirContext.REPLACE_ATTRIBUTE, attr);

ds.modifyAttributes("uid=test,ou=tester,dc=ibm,dc=com", mods);

System.out.println("Updated.");

}

@Override

public void add() throws NamingException {

System.out.println("Adding...");

Attributes attrs = new BasicAttributes();

attrs.put("uid", "test");

attrs.put("sn", "test");

attrs.put("cn", "test test");

attrs.put("userPassword", "111111".getBytes());

// the following attribute has two values

Attribute objclass = new BasicAttribute("objectClass");

objclass.add("inetOrgPerson");

attrs.put(objclass);

this.ds.createSubcontext("uid=test,ou=tester,dc=ibm,dc=com", attrs);

System.out.println("Add complete.");

}

@Override

public void delete() throws NamingException {

System.out.println("Deleting...");

this.ds.destroySubcontext("uid=test,ou=tester,dc=ibm,dc=com");

System.out.println("Deleted.");

}

@Override

public synchronized void connect() throws NamingException {

System.out.println("connecting...");

if (ds == null) {

Hashtable env = new Hashtable(11);

env.put(Context.INITIAL_CONTEXT_FACTORY, "com.sun.jndi.ldap.LdapCtxFactory");

env.put(Context.PROVIDER_URL, "ldap://localhost:389");

env.put(Context.SECURITY_AUTHENTICATION, "simple");

env.put(Context.SECURITY_PRINCIPAL, "cn=Manager,dc=ibm,dc=com");

env.put(Context.SECURITY_CREDENTIALS, "secret");

ds = new InitialDirContext(env);

// ds = (DirContext) initial.lookup("ldap://localhost:389");

}

System.out.println("connected.");

}

@Override

public void close() throws NamingException {

System.out.println("closing...");

ds.close();

System.out.println("closed.");

}

}