JAVA_基本LDAP操作實(shí)例

更新時(shí)間：2013年09月17日 16:24:53 作者：

這篇文章介紹了JAVA_基本LDAP操作實(shí)例，有需要的朋友可以參考一下

一、簡(jiǎn)介

Lightweight Directory Access Protocol (LDAP)，輕型目錄訪問(wèn)協(xié)議是一個(gè)訪問(wèn)在線目錄服務(wù)的協(xié)議。下面的例子中簡(jiǎn)單介紹在java中隊(duì)ldap的增刪該查功能。目錄結(jié)構(gòu)為：

CD=CAS,DC=MYDC

--cn=users

----uid=zhangsan

二、示例
1、通過(guò)LdapContext連接ldap

復(fù)制代碼代碼如下:

 
/** 
 * 連接LDAP 
 */  
@SuppressWarnings({ "rawtypes", "unchecked" })  
public LdapContext connetLDAP() throws NamingException {  
    // 連接Ldap需要的信息  
    String ldapFactory = "com.sun.jndi.ldap.LdapCtxFactory";  
    String ldapUrl = "ldap:/IP:port";// url  
    String ldapAccount = "cn=root"; // 用戶名  
    String ldapPwd = "password";//密碼  
    Hashtable env = new Hashtable();  
    env.put(Context.INITIAL_CONTEXT_FACTORY, ldapFactory);  
    // LDAP server  
    env.put(Context.PROVIDER_URL, ldapUrl);  
    env.put(Context.SECURITY_AUTHENTICATION, "simple");  
    env.put(Context.SECURITY_PRINCIPAL, ldapAccount);  
    env.put(Context.SECURITY_CREDENTIALS, ldapPwd);  
    env.put("java.naming.referral", "follow");  
    LdapContext ctxTDS = new InitialLdapContext(env, null);  
    return ctxTDS;  
}  

2、增加用戶zhangsan

復(fù)制代碼代碼如下:

  
// 添加  
    public void testAdd() throws Exception {  
        LdapContext ctx = connetLDAP();  
        Attributes attrs = new BasicAttributes(true);  
        Attribute objclass = new BasicAttribute("objectclass");  
        // 添加ObjectClass  
        String[] attrObjectClassPerson = { "inetOrgPerson", "organizationalPerson", "person", "top" };  
        Arrays.sort(attrObjectClassPerson);  
        for (String ocp : attrObjectClassPerson) {  
            objclass.add(ocp);  
        }  
        attrs.put(objclass);  
        String uid = "zhangsan";  
        String userDN = "uid=" + uid + "," + "cn=users,dc=cas,dc=mydc";  
        // 密碼處理  
        // attrs.put("uid", uid);  
        attrs.put("cn", uid);  
        attrs.put("sn", uid);  
        attrs.put("displayName", "張三");  
        attrs.put("mail", "abc@163.com");  
        attrs.put("description", "");  
        attrs.put("userPassword", "Passw0rd".getBytes("UTF-8"));  
        ctx.createSubcontext(userDN, attrs);  
    }  

3、刪除用戶zhangsan

復(fù)制代碼代碼如下:

//刪除  
    public void testRemove() throws Exception {  
        LdapContext ctx = connetLDAP();  
        String uid = "zhangsan";  
        String userDN = "uid=" + uid + "," + "cn=users,dc=cas,dc=mydc";  
        ctx.destroySubcontext(userDN);  

    }  

4、修改zhangsan的郵件地址

復(fù)制代碼代碼如下:

  
//修改  
    public boolean testModify() throws Exception {  
        boolean result = true;  
        LdapContext ctx = connetLDAP();  
        String uid = "zhangsan";  
        String userDN = "uid=" + uid + "," + "cn=users,dc=cas,dc=mydc";  
        Attributes attrs = new BasicAttributes(true);  
        attrs.put("mail", "zhangsan@163.com");  
        ctx.modifyAttributes(userDN, DirContext.REPLACE_ATTRIBUTE, attrs);  
        return result;  

    }  

5、查找用戶

復(fù)制代碼代碼如下:

 
//查詢  
    public void testSearch() throws Exception {  
        LdapContext ctx = connetLDAP();  
        // 設(shè)置過(guò)濾條件  
        String uid = "zhangsan";  
        String filter = "(&(objectClass=top)(objectClass=organizationalPerson)(uid=" + uid + "))";  
        // 限制要查詢的字段內(nèi)容  
        String[] attrPersonArray = { "uid", "userPassword", "displayName", "cn", "sn", "mail", "description" };  
        SearchControls searchControls = new SearchControls();  
        searchControls.setSearchScope(SearchControls.SUBTREE_SCOPE);  
        // 設(shè)置將被返回的Attribute  
        searchControls.setReturningAttributes(attrPersonArray);  
        // 三個(gè)參數(shù)分別為：  
        // 上下文；  
        // 要搜索的屬性，如果為空或 null，則返回目標(biāo)上下文中的所有對(duì)象；  
        // 控制搜索的搜索控件，如果為 null，則使用默認(rèn)的搜索控件  
        NamingEnumeration<SearchResult> answer = ctx.search("cn=users,dc=cas,dc=mydc", filter.toString(), searchControls);  
        // 輸出查到的數(shù)據(jù)  
        while (answer.hasMore()) {  
            SearchResult result = answer.next();  
            NamingEnumeration<? extends Attribute> attrs = result.getAttributes().getAll();  
            while (attrs.hasMore()) {  
                Attribute attr = attrs.next();  
                System.out.println(attr.getID() + "=" + attr.get());  
            }  
            System.out.println("============");  
        }  
    }  