Question

我的本地计算机上有一台基于SSL的LDAP服务器，并从我的应用程序连接同一台机器。以下是连接LDAP服务器的代码：

// Specify the search scope
    final String returnedAtts[] = { ldapSettingModel.getDepartment(),
            ldapSettingModel.getEmailId(), ldapSettingModel.getLocation(),
            ldapSettingModel.getRole(), ldapSettingModel.getDispName() };
    String searchFilter = "(&(objectClass=*)(" + ldapSettingModel.getLoginId() + "=" + user
            + ")" + ldapSettingModel.getFilter() + ")";

    String adPrincipal = user;
    if (CATAppConstants.ACTIVE_DIRECTORY_WIN_2000_ATTR.equals(ldapSettingModel.getLoginId())) {

        // with domain
        if (user.indexOf("\\") > 0) {
            user = user.substring(user.indexOf("\\") + 1);
            searchFilter = "(&(objectClass=*)(" + ldapSettingModel.getLoginId() + "=" + user
                    + ")" + ldapSettingModel.getFilter() + ")";
        } else {
            String[] pDN = ldapSettingModel.getBaseDNName().split(",");
            for (String dn : pDN) {
                if (dn.indexOf("dc=") == 0) {
                    adPrincipal = dn.substring(3) + "\\" + adPrincipal;
                    break;
                }
            }
        }

    }

    // Create the search controls
    SearchControls searchCtls = new SearchControls();
    searchCtls.setReturningAttributes(returnedAtts);
    searchCtls.setSearchScope(SearchControls.SUBTREE_SCOPE);
    String ldapProtocol = "ldap" + (ldapSettingModel.getSslFlg() == 1 ? "s" : "");
    String providerUrl = ldapProtocol + "://" + ldapSettingModel.getHost() + ":"
            + ldapSettingModel.getPortNo();
    Hashtable<String, String> env = new Hashtable<String, String>();
    env.put(Context.INITIAL_CONTEXT_FACTORY, "com.sun.jndi.ldap.LdapCtxFactory");
    env.put(Context.PROVIDER_URL, providerUrl);
    if (ldapSettingModel.getSslFlg() == 1) {
        env.put(Context.SECURITY_PROTOCOL, "ssl");
        env.put("java.naming.ldap.factory.socket",
                "com.shift.tcm.serviceCust.authenticationManagement.CustomSSLSocketFactory");
    }
    env.put(Context.SECURITY_AUTHENTICATION, "simple");
    switch (ldapSettingModel.getLdapType()) {
    case CATAppConstants.DIRECTORY_TYPE_IS_ACTIVE_DIRECTORY:
        env.put(Context.SECURITY_PRINCIPAL, adPrincipal);
        break;
    default:
        env.put(Context.SECURITY_PRINCIPAL, ldapSettingModel.getLoginId() + "=" + user + ","
                + ldapSettingModel.getBaseDNName());
        break;
    }

    env.put(Context.SECURITY_CREDENTIALS, requestPassword);
    env.put("com.sun.jndi.ldap.connect.timeout", CATAppConstants.LDAP_CONNECT_TIMEOUT + "");

    LdapContext ctxGC = null;
    MstUserModel userDetails = null;

    // This is the actual Authentication piece. Will throw
    // javax.naming.AuthenticationException
    // if the users password is not correct. Other exceptions may
    // include IO (server not found) etc.
    ctxGC = new InitialLdapContext(env, null);

    // Now try a simple search and get some attributes as defined in
    // returnedAtts
    NamingEnumeration<SearchResult> answer = ctxGC.search(ldapSettingModel.getBaseDNName(),
            searchFilter, searchCtls);

    userDetails = getUserDetailsFromLDAP(answer, ldapSettingModel, checkDetailsOnly,
            currentRoleName);
    userDetails.setLoginId(user);

在我尝试使用ldapSettingModel.getFilter()添加搜索过滤器之前，一切正常。通常没有它，搜索过滤器将包含(&(objectClass=*)(uid=vaibhav))用于以下LDAP服务器：

我尝试允许用户使用ldapSettingModel.getFilter()添加其他搜索过滤器，我尝试使用的值进行搜索：

（cn = India）：final searchFilter - ＆gt; （及（objectClass的= *）（UID = Vaibhav的）（CN =印度））
（objectClass = postalAddress）（cn = India ）：final searchFilter - ＆gt; （及（objectClass的= *）（UID = Vaibhav的）（objectClass的=邮寄地址）（CN = 印度））

我不确定我是否正确应用了其他搜索过滤器，但NamingEnumeration<SearchResult> answer从我的getUserDetailsFromLDAP()方法返回null。如果我做错了，请引导我，因为我对LDAP很陌生。

Answer 1

(&(objectClass=*)(uid=vaibhav)(cn=India))

这没有意义。 cn是＆＃39;通用名称的简称＆＃39;。您的用户名不是“印度＆＃39;”。

应该是

(&(objectClass=*)(uid=vaibhav)(postalAddress=India))

事实上，当你正在寻找用户时，它可能是

(&(objectClass=inetOrgPerson)(uid=vaibhav)(postalAddress=India))

你提到的第二种选择更不合理。

如何将其他搜索查询应用于LDAP

1 个答案: