public class LDAPHelper {
/**
* LDAP可以理解为一个多级目录，这里，表示要连接到那个具体的目录
*/
private final String baseDn = "ou=People,dc=changyeyi,dc=com";
private LdapContext ctx = null;
private final Control[] connCtls = null;
private void connect() {
Hashtable env = new Hashtable<>();
String factory = "com.sun.jndi.ldap.LdapCtxFactory";
env.put(Context.INITIAL_CONTEXT_FACTORY, factory);
String url = "ldap://192.168.31.178:389/";
env.put(Context.PROVIDER_URL, url + baseDn);
env.put(Context.SECURITY_AUTHENTICATION, "simple");
String root = "cn=admin,dc=changyeyi,dc=com";
//管理员dn
env.put(Context.SECURITY_PRINCIPAL, root);
// 管理员密码
env.put(Context.SECURITY_CREDENTIALS, "123456");
try {
ctx = new InitialLdapContext(env, connCtls);
System.out.println( "连接成功" );
} catch (javax.naming.AuthenticationException e) {
System.out.println("连接失败：");
e.printStackTrace();
} catch (Exception e) {
System.out.println("连接出错：");
e.printStackTrace();
}
}
private void closeContext(){
if (ctx != null) {
try {
ctx.close();
}
catch (NamingException e) {
e.printStackTrace();
}
}
}
/**
* dn就是目标名字+当前目录名字
*/
private String getUserDN(String uid) {
String userDN = "";
connect();
try {
SearchControls constraints = new SearchControls();
constraints.setSearchScope(SearchControls.SUBTREE_SCOPE);
//第一个参数是从哪个目录下开始查，因为连接的url里已经指定了ou=People,dc=gosun,dc=com，所以这里填""即可
//第二个参数是查询条件，uid、email等，都是ldap中存放的参数
NamingEnumeration en = ctx.search("", "uid=" + uid, constraints);
if (en == null || !en.hasMoreElements()) {
System.out.println("未找到该用户");
}
while (en != null && en.hasMoreElements()) {
SearchResult obj = en.nextElement();
if (obj != null) {
SearchResult si = obj;
userDN += si.getName();
userDN += "," + baseDn;
} else {
System.out.println((Object) null);
}
}
} catch (Exception e) {
System.out.println("查找用户时产生异常。");
e.printStackTrace();
}
return userDN;
}
/**
* 通过uid获取dn,然后连接验证
*/
public boolean authentication(String uid, String password) {
boolean valide = false;
String userDN = getUserDN(uid);
try {
ctx.addToEnvironment(Context.SECURITY_PRINCIPAL, userDN);
ctx.addToEnvironment(Context.SECURITY_CREDENTIALS, password);
ctx.reconnect(connCtls);
System.out.println(userDN + " 验证通过");
valide = true;
} catch (AuthenticationException e) {
System.out.println(userDN + " 验证失败");
System.out.println(e.toString());
} catch (NamingException e) {
System.out.println(userDN + " 验证失败");
}
closeContext();
return valide;
}
public boolean addUser(String usr, String pwd,String uid,String description) {
try {
connect();
BasicAttributes attrsbu = new BasicAttributes();
BasicAttribute objclassSet = new BasicAttribute("objectclass");
objclassSet.add("inetOrgPerson");
attrsbu.put(objclassSet);
attrsbu.put("sn", usr);
attrsbu.put("cn", usr);
attrsbu.put("uid", uid);
attrsbu.put("userPassword", pwd);
attrsbu.put("description", description);
//这里指定目录名字，可以用uid=/cn=，如uid=changyeyi,或者cn=yaoji
ctx.createSubcontext("uid="+uid+"", attrsbu);
return true;
} catch (NamingException ex) {
ex.printStackTrace();
}
closeContext();
return false;
}
public static void main(String[] args) {
LDAPHelper ldap = new LDAPHelper();
/**
* 用户认证
*/
/*if(ldap.authentication("changyeyi", "changyeyi")){
System.out.println( "该用户认证成功" );
}*/
/**
* 用户添加
*/
ldap.addUser("emma","emma","emma_uid","测试");
}
}
如果觉得《java 连接ldap_ldap java 连接demo》对你有帮助，请点赞、收藏，并留下你的观点哦！
