java 操作ldap

最新推荐文章于 2024-07-13 05:32:22 发布

奋斗的蜗牛，奔跑吧

最新推荐文章于 2024-07-13 05:32:22 发布

阅读量316

点赞数

分类专栏：协议文章标签： ldap

本文链接：https://blog.csdn.net/weixin_42666837/article/details/112172863

版权

协议专栏收录该内容

2 篇文章 0 订阅

订阅专栏

package com.zs.sso.client.sss;

import java.util.Hashtable;

import javax.naming.AuthenticationException;
import javax.naming.Context;
import javax.naming.NamingEnumeration;
import javax.naming.NamingException;
import javax.naming.directory.BasicAttribute;
import javax.naming.directory.BasicAttributes;
import javax.naming.directory.SearchControls;
import javax.naming.directory.SearchResult;
import javax.naming.ldap.Control;
import javax.naming.ldap.InitialLdapContext;
import javax.naming.ldap.LdapContext;

/**
 * 
 * @ClassName: LDAPAuthentication
 * @Description: ldap操作
 * @author: xxxx
 * @date: 2021年1月4日 下午1:18:17
 */
public class LDAPAuthentication {
	private final String URL = "ldap://127.0.0.1:389/";
	private final String BASEDN = "dc=maxcrc,dc=com"; // 根据自己情况进行修改
	private final String FACTORY = "com.sun.jndi.ldap.LdapCtxFactory";
	private LdapContext ctx = null;
	private final Control[] connCtls = null;

	/**
	 * 
	 * @Title: LDAP_connect
	 * @Description: 连接
	 * @param:
	 */
	private void LDAP_connect() {
		Hashtable<String, String> env = new Hashtable<String, String>();
		env.put(Context.INITIAL_CONTEXT_FACTORY, FACTORY);
		env.put(Context.PROVIDER_URL, URL + BASEDN);
		env.put(Context.SECURITY_AUTHENTICATION, "simple");

		String root = "cn=Manager,dc=maxcrc,dc=com"; // 根据自己情况修改
		env.put(Context.SECURITY_PRINCIPAL, root); // 管理员
		env.put(Context.SECURITY_CREDENTIALS, "secret"); // 管理员密码

		try {
			ctx = new InitialLdapContext(env, connCtls);
			System.out.println("连接成功");

		} catch (javax.naming.AuthenticationException e) {
			System.out.println("连接失败：");
			e.printStackTrace();
		} catch (Exception e) {
			System.out.println("连接出错：");
			e.printStackTrace();
		}

	}

	/**
	 * 
	 * @Title: closeContext
	 * @Description: 关闭
	 * @param:
	 */
	private void closeContext() {
		if (ctx != null) {
			try {
				ctx.close();
			} catch (NamingException e) {
				e.printStackTrace();
			}

		}
	}

	/**
	 * 
	 * @Title: getUserDN
	 * @Description: 查找用户
	 * @param: @param  uid
	 * @param: @return
	 */
	private String getUserDN(String uid) {
		String userDN = "";
		LDAP_connect();
		try {
			SearchControls constraints = new SearchControls();
			constraints.setSearchScope(SearchControls.SUBTREE_SCOPE);

			NamingEnumeration<SearchResult> en = ctx.search("", "uid=" + uid, constraints);

			if (en == null || !en.hasMoreElements()) {
				System.out.println("未找到该用户");
			}
			// maybe more than one element
			while (en != null && en.hasMoreElements()) {
				Object obj = en.nextElement();
				if (obj instanceof SearchResult) {
					SearchResult si = (SearchResult) obj;
					userDN += si.getName();
					userDN += "," + BASEDN;
				} else {
					System.out.println(obj);
				}
			}
		} catch (Exception e) {
			System.out.println("查找用户时产生异常。");
			e.printStackTrace();
		}

		return userDN;
	}

	/**
	 * 
	 * @Title: authenricate
	 * @Description: 验证
	 * @param: @param  UID
	 * @param: @param  password
	 * @param: @return
	 */
	public boolean authenricate(String UID, String password) {
		boolean valide = false;
		String userDN = getUserDN(UID);

		try {
			ctx.addToEnvironment(Context.SECURITY_PRINCIPAL, userDN);
			ctx.addToEnvironment(Context.SECURITY_CREDENTIALS, password);
			ctx.reconnect(connCtls);
			System.out.println(userDN + " 验证通过");
			valide = true;
		} catch (AuthenticationException e) {
			System.out.println(userDN + " 验证失败");
			System.out.println(e.toString());
			valide = false;
		} catch (NamingException e) {
			System.out.println(userDN + " 验证失败");
			valide = false;
		}
		closeContext();
		return valide;
	}

	/**
	 * 
	 * @Title: addUser
	 * @Description: 添加用户
	 * @param: @param  usr
	 * @param: @param  pwd
	 * @param: @return
	 */
	private boolean addUser(String usr, String pwd) {

		try {
			LDAP_connect();
			BasicAttributes attrsbu = new BasicAttributes();
			BasicAttribute objclassSet = new BasicAttribute("objectclass");
			objclassSet.add("inetOrgPerson");
			attrsbu.put(objclassSet);
			attrsbu.put("sn", usr);
			attrsbu.put("cn", usr);
			attrsbu.put("uid", usr);
			attrsbu.put("userPassword", pwd);
			ctx.createSubcontext("uid=" + usr, attrsbu);

			return true;
		} catch (NamingException ex) {
			ex.printStackTrace();
		}
		closeContext();
		return false;
	}

	public static void main(String[] args) {
		LDAPAuthentication ldap = new LDAPAuthentication();
		ldap.LDAP_connect();
		ldap.addUser("test", "123456");
		System.out.println("成功");
	}
}