Java LDAPConnection.search方法代码示例

import com.unboundid.ldap.sdk.LDAPConnection; //导入方法依赖的package包/类
private Set<String> rolesFromDN(String userDN) throws LDAPException, GeneralSecurityException {
  SearchRequest searchRequest = new SearchRequest(config.getRoleBaseDN(),
      SearchScope.SUB, Filter.createEqualityFilter("uniqueMember", userDN));
  Set<String> roles = Sets.newLinkedHashSet();

  LDAPConnection connection = connectionFactory.getLDAPConnection();
  try {
    SearchResult sr = connection.search(searchRequest);

    for (SearchResultEntry sre : sr.getSearchEntries()) {
      X500Name x500Name = new X500Name(sre.getDN());
      RDN[] rdns = x500Name.getRDNs(BCStyle.CN);
      if (rdns.length == 0) {
        logger.error("Could not create X500 Name for role:" + sre.getDN());
      } else {
        String commonName = IETFUtils.valueToString(rdns[0].getFirst().getValue());
        roles.add(commonName);
      }
    }
  } finally {
    connection.close();
  }

  return roles;
}
 

import com.unboundid.ldap.sdk.LDAPConnection; //导入方法依赖的package包/类
private SearchResult doSearch(LDAPConnection ldapConnection, String base, boolean dereferenceAliases, String filter, List<String> attributes) {
    try {
        SearchRequest searchRequest = new SearchRequest(base, SearchScope.SUB, filter);
        if (dereferenceAliases) {
            searchRequest.setDerefPolicy(DereferencePolicy.SEARCHING);
        }
        if (attributes != null) {
            searchRequest.setAttributes(attributes);
        }
        return ldapConnection.search(searchRequest);

    } catch (LDAPException e) {
        if (!Strings.isNullOrEmpty(e.getDiagnosticMessage())) {
            log.error(e.getDiagnosticMessage());
        } else {
            log.error("Problem searching LDAP", e);
        }
        return null;
    }
}
 

import com.unboundid.ldap.sdk.LDAPConnection; //导入方法依赖的package包/类
private String dnFromUsername(String username) throws LDAPException, GeneralSecurityException {
  String baseDN = config.getUserBaseDN();
  String lookup = String.format("(%s=%s)", config.getUserAttribute(), username);
  SearchRequest searchRequest = new SearchRequest(baseDN, SearchScope.SUB, lookup);

  LDAPConnection connection = connectionFactory.getLDAPConnection();
  try {
    SearchResult sr = connection.search(searchRequest);

    if (sr.getEntryCount() == 0) {
      throw new LDAPException(ResultCode.INVALID_CREDENTIALS);
    }

    return sr.getSearchEntries().get(0).getDN();
  } finally {
    connection.close();
  }
}
 

import com.unboundid.ldap.sdk.LDAPConnection; //导入方法依赖的package包/类
private ASN1OctetString scrollSimplePagedResultsControl(LDAPConnection ldapConnection, String dn, Filter filter, SearchScope scope, Control[] controls, int startIndex) throws LDAPException, InvalidSimplePageControlException {
	SearchRequest searchRequest = new SearchRequest(dn, scope, filter, "dn");

	int currentStartIndex = startIndex;
	ASN1OctetString cookie = null;
	do {
		int pageSize = Math.min(currentStartIndex, 100);
		searchRequest.setControls(new Control[]{new SimplePagedResultsControl(pageSize, cookie, true)});
		setControls(searchRequest, controls);
		SearchResult searchResult = ldapConnection.search(searchRequest);

		currentStartIndex -= searchResult.getEntryCount();
		try {
			SimplePagedResultsControl c = SimplePagedResultsControl.get(searchResult);
			if (c != null) {
				cookie = c.getCookie();
			}
		} catch (LDAPException ex) {
			log.error("Error while accessing cookie", ex);
			throw new InvalidSimplePageControlException(ex.getResultCode(), "Error while accessing cookie");
		}
	} while ((cookie != null) && (cookie.getValueLength() > 0) && (currentStartIndex > 0));

	return cookie;
}
 

import com.unboundid.ldap.sdk.LDAPConnection; //导入方法依赖的package包/类
private long getPasswordLastSet() {

		long pwdLastSet = -1;
		LDAPConnection ldapConnection = null;
		
		try {
			ldapConnection = getLdapConnection(userDn, getLdapPassword(), url);	
			String[] attributes = new String[] {Constants.AD_PWD_LAST_SET};
			String filter = "(" + Constants.AD_SAM_ACCOUNT_NAME + "=" + username + ")";
			SearchResult searchResult = ldapConnection.search(baseDn, SearchScope.SUB, filter, attributes);
			
			for (SearchResultEntry searchResultEntry : searchResult.getSearchEntries()) {
				Attribute pwdLastSetAttribute = searchResultEntry.getAttribute(Constants.AD_PWD_LAST_SET);
				pwdLastSet = pwdLastSetAttribute.getValueAsLong();
			}
		}
		catch (Exception e) {
			e.printStackTrace();
		}
		finally {
			if (ldapConnection != null) {
				ldapConnection.close();
			}
		}
		
		return pwdLastSet;
	}
 

import com.unboundid.ldap.sdk.LDAPConnection; //导入方法依赖的package包/类
private long getMaxPasswordAge() {
	
	long maxPwdAge = -1;
	LDAPConnection ldapConnection = null;
	
	try {
		ldapConnection = getLdapConnection(userDn, getLdapPassword(), url);
		String[] attributes = new String[] {Constants.AD_MAX_PWD_AGE};
		String filter = "(" + Constants.AD_OBJECT_CLASS + "=" + Constants.AD_DOMAIN + ")";
		SearchResult searchResult = ldapConnection.search(baseDn, SearchScope.BASE, filter, attributes);
		
		for (SearchResultEntry searchResultEntry : searchResult.getSearchEntries()) {
			Attribute maxPwdAgeAttribute = searchResultEntry.getAttribute(Constants.AD_MAX_PWD_AGE);
			maxPwdAge = maxPwdAgeAttribute.getValueAsLong();
		}
	}
	catch (Exception e) {
		e.printStackTrace();
	}
	finally {
		if (ldapConnection != null) {
			ldapConnection.close();
		}
	}
	
	return maxPwdAge;
}
 

import com.unboundid.ldap.sdk.LDAPConnection; //导入方法依赖的package包/类
private SearchResult doSearch(LDAPConnection ldapConnection, String base, String filter) {
	try {
		return ldapConnection.search(base, SearchScope.SUB, filter);
	} catch (LDAPSearchException e) {
		logger.error("Problem Searching LDAP", e);
		
		return null;
	}
}
 

import com.unboundid.ldap.sdk.LDAPConnection; //导入方法依赖的package包/类
@Test
public void testInMemBind() throws Exception {
	String user = "cn=test,dc=staticsecurity,dc=geomajas,dc=org";
	LDAPConnection connection = new LDAPConnection("localhost", PORT);

	BindResult auth = connection.bind(user, "cred");
	System.out.println("auth " + auth);
	System.out.println("  rc " + auth.getResultCode());
	System.out.println("  cu " + auth.getResultCode().isConnectionUsable());
	System.out.println("  dn " + auth.getMatchedDN());
	System.out.println("  dm " + auth.getDiagnosticMessage());

	SearchRequest request = new SearchRequest(user,
			SearchScope.ONE, Filter.createEqualityFilter("objectclass", "person"),
			"cn", "groupMembership", "givenName", "sn", "ou");
	SearchResult search = connection.search(request);
	System.out.println(search);
	System.out.println("count " + search.getEntryCount());
	System.out.println("count " + search.getSearchEntries());
	for (SearchResultEntry se : search.getSearchEntries()) {
		System.out.println("-- cn " + se.getAttributeValue("cn"));
		System.out.println("   givenName " + se.getAttributeValue("givenName"));
		System.out.println("   sn " + se.getAttributeValue("sn"));
		System.out.println("   ou " + se.getAttributeValue("ou"));
		System.out.println("   groupMembership ");
		if (null != se.getAttributeValues("groupMembership")) {
			for (String val : se.getAttributeValues("groupMembership")) {
				System.out.println("      " + val);
			}
		}
	}
}