java 活动目录_java 访问活动目录代码

packagedemo;importjava.util.Hashtable;importjavax.naming.Context;importjavax.naming.NamingEnumeration;importjavax.naming.NamingException;importjavax.naming.directory.Attribute;importjavax.naming.directory.Attributes;importjavax.naming.directory.SearchControls;importjavax.naming.directory.SearchResult;importjavax.naming.ldap.InitialLdapContext;importjavax.naming.ldap.LdapContext;public classADOperTest {public void GetADInfo(booleanisUser) {

String host= "192.168.1.188"; //AD服务器

String port = "389"; //端口

String url = new String("ldap://" + host + ":" +port);

Hashtable HashEnv= newHashtable();

String adminName= "[email protected]"; //注意用户名的写法：domain\User

String adminPassword = "2015"; //密码

HashEnv.put(Context.SECURITY_AUTHENTICATION, "simple"); //LDAP访问安全级别

HashEnv.put(Context.SECURITY_PRINCIPAL, adminName); //AD User

HashEnv.put(Context.SECURITY_CREDENTIALS, adminPassword); //AD Password

HashEnv.put(Context.INITIAL_CONTEXT_FACTORY,"com.sun.jndi.ldap.LdapCtxFactory"); //LDAP工厂类

HashEnv.put(Context.PROVIDER_URL, url);try{

LdapContext ctx= new InitialLdapContext(HashEnv, null);//域节点

String searchBase = "OU=广州日报集团,DC=gzrb,DC=local";//LDAP搜索过滤器类

String searchFilter = isUser ? "(&(objectClass=user))":"(&(objectClass=organizationalUnit))";//搜索控制器

SearchControls searchCtls = new SearchControls(); //Create the//创建搜索控制器

searchCtls.setSearchScope(SearchControls.SUBTREE_SCOPE); //Specify//定制返回属性

String[] returnedAtts = null;if(isUser) {

returnedAtts= new String[] { "sAMAccountName","distinguishedName", "name"};

}else{

returnedAtts= new String[] { "ou", "distinguishedName", "name"};

}

searchCtls.setReturningAttributes(returnedAtts);//设置返回属性集//根据设置的域节点、过滤器类和搜索控制器搜索LDAP得到结果

NamingEnumeration answer =ctx.search(searchBase, searchFilter,

searchCtls);//Search for objects using the filter

while (answer.hasMoreElements()) {//遍历结果集

SearchResult sr = (SearchResult) answer.next();//得到符合搜索条件的DN

String dn = sr.getAttributes().get("distinguishedName").get()

.toString();

System.out.println(dn);

Attributes Attrs= sr.getAttributes();//得到符合条件的属性集

if (Attrs != null) {try{for (NamingEnumeration ne =Attrs.getAll(); ne

.hasMore();) {

Attribute Attr= (Attribute) ne.next();//得到下一个属性

System.out.print(" 属性名：" +Attr.getID().toString());//读取属性值

for (NamingEnumeration e =Attr.getAll(); e

.hasMore();) {

String val=e.next().toString();

System.out.println(" 属性值：" +val);

}

}

}catch(NamingException e) {

System.err.println("Throw Exception : " +e);

}

}//if

}

ctx.close();

}catch(NamingException e) {

e.printStackTrace();

System.err.println("Throw Exception : " +e);

}

}public voidlogin() {

String userName= "[email protected]"; //用户名称

String password = "2015"; //密码

String host = "192.168.1.188"; //AD服务器

String port = "389"; //端口

String domain = "@hotent.local"; //邮箱的后缀名

String url = new String("ldap://" + host + ":" +port);

String user= userName.indexOf(domain) > 0 ?userName : userName+domain;

Hashtable env= newHashtable();

LdapContext ctx= null;

env.put(Context.SECURITY_AUTHENTICATION,"simple");

env.put(Context.SECURITY_PRINCIPAL, user);//不带邮箱后缀名的话，会报错，具体原因还未探究。高手可以解释分享。

env.put(Context.SECURITY_CREDENTIALS, password);

env.put(Context.INITIAL_CONTEXT_FACTORY,"com.sun.jndi.ldap.LdapCtxFactory");

env.put(Context.PROVIDER_URL, url);try{

ctx= new InitialLdapContext(env, null);

ctx.close();

System.out.println("验证成功!");

}catch(NamingException err) {

err.printStackTrace();

System.out.println("验证失败!");

}

}public static voidmain(String args[]) {//实例化

ADOperTest ad = newADOperTest();

ad.GetADInfo(true);//System.out.println("---------组织---------");//ad.GetADInfo(false);

ad.login();

}

}