ldap seach java_#JAVA操作LDAP

package com.wisdombud.unicom.monitor.ldap;

import java.util.ArrayList;

import org.slf4j.Logger;

import org.slf4j.LoggerFactory;

import com.unboundid.ldap.sdk.Attribute;

import com.unboundid.ldap.sdk.LDAPConnection;

import com.unboundid.ldap.sdk.LDAPException;

import com.unboundid.ldap.sdk.Modification;

import com.unboundid.ldap.sdk.ModificationType;

import com.unboundid.ldap.sdk.SearchRequest;

import com.unboundid.ldap.sdk.SearchResult;

import com.unboundid.ldap.sdk.SearchResultEntry;

import com.unboundid.ldap.sdk.SearchScope;

import com.unboundid.ldap.sdk.controls.SubentriesRequestControl;

import com.wisdombud.unicom.monitor.listener.MessageAnalyze;

public class LdapOper {

private static final Logger LOGGER = LoggerFactory

.getLogger(MessageAnalyze.class);

private LDAPConnection connection = null;

private String bindDN = "cn=root,o=ibm,c=cn";

private int port = 389;

private String password = "db2admin";

private String o = "ibm";

private String ou = "users";

private String ouEntry = "o=ibm,c=cn";

private String oEntry = "o=ibm,c=cn";

private String dcEntry = "o=ibm,c=cn";

private String groupEntry = "cn=permitted,o=ibm,c=cn";

private String LDAP_HOST = "127.0.0.1";

static {

//GlobalValues.LDAP_HOST = "127.0.0.1";

// MonitorConfigBean config = CollectDaoFactory.getInstance()

// .getCollectDao().findConfig();

// if (config != null) {

// GlobalValues.LDAP_HOST = config.getLdapIp();

// } else {

//

// GlobalValues.LDAP_HOST = "127.0.0.1";

// }

}

public void RunTest() {

// LOGGER.info(this.ldapConfig.getLdapHost());

this.openConnection();

}

public void openConnection() {

if (connection == null) {

try {

connection = new LDAPConnection(LDAP_HOST, port,

bindDN, password);

LOGGER.info("connect success");

} catch (Exception e) {

LOGGER.info("连接LDAP出现错误：\n" + e.getMessage());

}

}

}

private void createO() {

String entryDN = this.oEntry;

try {

openConnection();

SearchResultEntry entry = connection.getEntry(entryDN);

if (entry == null) {

ArrayList attributes = new ArrayList();

attributes.add(new Attribute("objectClass", "top",

"organization", "dcObject"));

attributes.add(new Attribute("dc", this.o));

attributes.add(new Attribute("o", this.o));

connection.add(entryDN, attributes);

LOGGER.info("创建o" + entryDN + "成功！");

} else {

LOGGER.info("o " + entryDN + "已存在！");

}

} catch (Exception e) {

LOGGER.info("创建DC出现错误：\n" + e.getMessage());

}

}

private void createDC(String dc) {

String entryDN = this.dcEntry;

try {

// 连接LDAP

openConnection();

SearchResultEntry entry = connection.getEntry(entryDN);

if (entry == null) {

// 不存在则创建

ArrayList attributes = new ArrayList();

attributes.add(new Attribute("objectClass", "top",

"organization", "dcObject"));

attributes.add(new Attribute("dc", dc));

connection.add(entryDN, attributes);

LOGGER.info("创建DC" + entryDN + "成功！");

} else {

LOGGER.info("DC " + entryDN + "已存在！");

}

} catch (Exception e) {

LOGGER.info("创建DC出现错误：\n" + e.getMessage());

}

}

private void createOU() {

String entryDN = this.ouEntry;

try {

// 连接LDAP

openConnection();

SearchResultEntry entry = connection.getEntry(entryDN);

if (entry == null) {

// 不存在则创建

ArrayList attributes = new ArrayList();

attributes.add(new Attribute("objectClass", "top",

"organizationalUnit"));

attributes.add(new Attribute("ou", this.ou));

connection.add(entryDN, attributes);

LOGGER.info("创建组织单元" + entryDN + "成功！");

} else {

LOGGER.info("组织单元" + entryDN + "已存在！");

}

} catch (Exception e) {

LOGGER.info("创建组织单元出现错误：\n" + e.getMessage());

}

}

private void DeleteGroupMember(String userEntry) {

try {

SearchResultEntry entry = connection.getEntry(groupEntry);

if (entry != null) {

ArrayList md = new ArrayList();

md.add(new Modification(ModificationType.DELETE, "member",

userEntry));

connection.modify(groupEntry, md);

LOGGER.info("删除member成功：" + userEntry);

}

} catch (LDAPException e) {

e.printStackTrace();

}

}

private void AddGroupMember(String userEntry) {

try {

SearchResultEntry entry = connection.getEntry(groupEntry);

if (entry != null) {

ArrayList md = new ArrayList();

md.add(new Modification(ModificationType.ADD, "member",

userEntry));

connection.modify(groupEntry, md);

LOGGER.info("添加member成功：" + userEntry);

}

} catch (LDAPException e) {

e.printStackTrace();

}

}

public void createUserEntry(String user, String passwd, String ip) {

String entryDN = "uid=" + user + "," + this.ouEntry;

try {

// 连接LDAP

openConnection();

SearchResultEntry entry = connection.getEntry(entryDN);

if (entry == null) {

// 不存在则创建

ArrayList attributes = new ArrayList();

attributes.add(new Attribute("uid", user));

attributes.add(new Attribute("objectClass", "top",

"organizationalPerson", "inetOrgPerson", "person"));

attributes.add(new Attribute("userPassword", passwd));

attributes.add(new Attribute("street", passwd));

attributes.add(new Attribute("sn", user));

attributes.add(new Attribute("cn", user));

connection.add(entryDN, attributes);

LOGGER.info("创建用户" + entryDN + "成功！");

this.AddGroupMember(entryDN);

} else {

LOGGER.info("用户" + entryDN + "已存在！");

}

} catch (Exception e) {

LOGGER.info("创建用户出现错误：\n" + e.getMessage());

}

}

public void deleteUserEntry(String user) {

String requestDN = "uid=" + user + "," + this.ouEntry;

try {

// 连接LDAP

openConnection();

SearchResultEntry entry = connection.getEntry(requestDN);

if (entry == null) {

LOGGER.info(requestDN + " user:" + requestDN + "不存在");

return;

}

// 删除

connection.delete(requestDN);

LOGGER.info("删除用户信息成功！");

this.DeleteGroupMember(requestDN);

} catch (Exception e) {

LOGGER.info("删除用户信息出现错误：\n" + e.getMessage());

}

}

public void queryLdap(String searchDN, String filter) {

try {

// 连接LDAP

openConnection();

// 查询企业所有用户

SearchRequest searchRequest = new SearchRequest(searchDN,

SearchScope.SUB, "(" + filter + ")");

searchRequest.addControl(new SubentriesRequestControl());

SearchResult searchResult = connection.search(searchRequest);

LOGGER.info(">>>共查询到" + searchResult.getSearchEntries().size()

+ "条记录");

int index = 1;

for (SearchResultEntry entry : searchResult.getSearchEntries()) {

LOGGER.info((index++) + "\t" + entry.getDN());

}

} catch (Exception e) {

LOGGER.info("查询错误，错误信息如下：\n" + e.getMessage());

}

}

public static void main(String[] args) {

LdapOper loper = new LdapOper();

System.out.println("start to create ldap user");

//loper.createO();

//loper.createOU();

/*

* IFM_XQJZ IFM_JZBYXY IFM_JZBYMC IFM_JZBYCZC

*

* ifm@1234

*/

String password = "ifm@1234";

loper.createUserEntry("IFM_XQJZ", password, "1.1.1.1");

loper.createUserEntry("IFM_JZBYXY", password, "1.1.1.1");

loper.createUserEntry("IFM_JZBYMC", password, "1.1.1.1");

loper.createUserEntry("IFM_JZBYCZC", password, "1.1.1.1");

loper.createUserEntry("INMS_QCHMD", "inms@123", "1.1.1.1");

// INMS_QCHMD这个也没有，密码是inms@123

}

}