天天看點

LDAP研究

一、ldap介紹

ldap是輕量級的目錄通路協定,重點是目錄通路協定,更為重點的是協定,好吧他是一個協定。也就是一個标準。

那麼實作這款協定的軟體其中有一款就是openldap.

二、安裝windows版本的openldap

下載下傳好windows版的openldap,一路下一步完成安裝。

重點在安裝根目錄裡也就是%OpenLDAP%下面的slapd.conf檔案  

1. 預設的域名或者組織機構  找到下面的代碼配置 

suffix "dc=tcl,dc=com"

rootdn "cn=Manager,dc=tcl,dc=com"

rootpw 123456

2. 通路控制acl  access開頭的配置   這是通路權限配置

3.資料同步與複制配置 

主伺服器配置這項 

overlay syncprov

 syncprov-nopresent TRUE

 syncprov-reloadhint TRUE 

從伺服器配置 這項

syncrepl  rid=0

               provider=ldap://ldapmaster.symas.com:389

               bindmethod=simple

               binddn="cn=replicator,dc=symas,dc=com"

               credentials=secret

               searchbase="dc=symas,dc=com"

               logbase="cn=accesslog"

               logfilter="(&(objectClass=auditWriteObject)(reqResult=0))"

               schemachecking=on

               type=refreshAndPersist

               retry="60 +"

               syncdata=accesslog

4.注意啟動方式

我下載下傳的是2.4.39

啟動指令在 %OpenLDAP%run 目錄下的指令行

三、java調用

1.spring配置 

<bean id="ldapSource" class="org.springframework.ldap.core.support.LdapContextSource">
		<property name="url" value="ldap://Dh-THINK:389" />
		<property name="base" value="DC=tcl,DC=com" />
		<property name="userDn" value="cn=manager,DC=tcl,DC=com" />
		<property name="password" value="123456" />
	</bean>
	
	<bean id="ldapTemplate" class="org.springframework.ldap.core.LdapTemplate">
		<constructor-arg ref="ldapSource" />
	</bean>
           

2.pom配置

<dependency>
		    <groupId>org.springframework.ldap</groupId>
		    <artifactId>spring-ldap-core</artifactId>
		    <version>2.0.2.RELEASE</version>
		    <exclusions>  
           <exclusion>      
                <groupId>org.springframework</groupId>          
                <artifactId>spring-beans</artifactId>  
           </exclusion>  
           <exclusion>      
                <groupId>org.springframework</groupId>          
                <artifactId>spring-core</artifactId>  
           </exclusion>  
           <exclusion>      
                <groupId>org.springframework</groupId>          
                <artifactId>spring-test</artifactId>  
           </exclusion>  
     </exclusions>  
		</dependency>
           

因為springmvc 是以包沖突,要排包。

3.增删改查操作

@Override
	public int CreatePerson(String dn, Person person) {
		try {
//dn不包括spring中配置的域名 
			ldapTemplate.bind(dn, null, buildAttributes(person));
			return 0;
		} catch (Exception e) {
			e.printStackTrace();
			return -1;
		}
	}
           
/**
	 * 構造人員屬性
	 * @param person
	 * @return
	 */
	private Attributes buildAttributes(Person person) {
		BasicAttribute ba = new BasicAttribute("objectclass");  
        ba.add("top"); //此處的person對應的是core.schema檔案中的objectClass:person  
        ba.add("person"); //此處的person對應的是core.schema檔案中的objectClass:person  
        Attributes attr = new BasicAttributes();  
        attr.put(ba);  
        
        attr.put("cn", person.getCn());  
        attr.put("sn", person.getSn()); 
        if(person.getTelephoneNumber()!=null&&!"".equals(person.getTelephoneNumber())){
        	attr.put("telephoneNumber", person.getTelephoneNumber());  
        }
        if(person.getUserPassword()!=null&&!"".equals(person.getUserPassword())){
        	attr.put("userPassword", person.getUserPassword());
        }
        if(person.getDescription()!=null&&!"".equals(person.getDescription())){
        	attr.put("description", person.getDescription());
        }
        if(person.getSeeAlso()!=null&&!"".equals(person.getSeeAlso())){
//        	attr.put("seeAlso", person.getSeeAlso()); 
        }
		return attr;
	}
           
@Override
	public int UpdatePerson(String dn, Person person) {
		try {
			ldapTemplate.rebind(dn, null, buildAttributes(person));
			return 0;
		} catch (Exception e) {
			return -1;
		}
	}
           
@Override
	public int deletePerson(String dn, Person person) {
		try {
			ldapTemplate.unbind(dn);
			return 0;
		} catch (Exception e) {
			return -1;
		}
	}
           
@Override
	public List<Person> findByOrganization(String oganizationName) {
		AndFilter filter = new AndFilter();
	      filter.and(new EqualsFilter("objectclass", "person"));
	      ContextMapper person = new PersonAttributesMapper();
	      return  ldapTemplate.search( "o="+oganizationName, filter.encode(),person);
	}
           
@Override
	public List findOrganizationAndPerson(String dn) {
//		Object object = ldapTemplate.lookup("o=product", new AttributesMapper() { public Object mapFromAttributes(Attributes attrs)throws NamingException{
//			return attrs.toString();}});
		OrFilter filter = new OrFilter();
	      filter.or(new LikeFilter("objectclass", "organizationalUnit"));
//	      filter.or(new LikeFilter("objectclass", "top"));
	      filter.or(new LikeFilter("objectclass", "organization"));
//	      filter.or(new LikeFilter("objectclass", "person"));
	      ContextMapper organizationUnit = new OrganizationUnitAttributesMapper();
		 return ldapTemplate.search( dn, filter.encode(), new ContextMapper() {

			@Override
			public Object mapFromContext(Object ctx) throws NamingException {
				DirContextAdapter context = (DirContextAdapter)ctx;
				return context;
			} });
	}
           
@Override
	public List<Person> findPersonListByDn(String dn) {
		OrFilter filter = new OrFilter();
	      filter.or(new LikeFilter("objectclass", "person"));
		 return ldapTemplate.search( dn, filter.encode(), new PersonAttributesMapper());
	}
           
public class PersonAttributesMapper implements ContextMapper<Person> {

	@Override
	public Person mapFromContext(Object ctx) throws NamingException {
		 DirContextAdapter context = (DirContextAdapter)ctx;
         Person person = new Person();
         person.setCn(context.getStringAttribute("cn"));
         person.setSn(context.getStringAttribute("sn"));
         person.setUserPassword(context.getStringAttribute("userPassword"));
         person.setDescription(context.getStringAttribute("description"));
         person.setSeeAlso(context.getStringAttribute("seeAlso"));
         person.setTelephoneNumber(context.getStringAttribute("telephoneNumber"));
         return person;
	}

}
           

接下來介紹一個解析樹的遞歸算法,輸入所有的機構人員資訊,解析出樹狀的機構層次

public JSONArray bulidTree(String dn){
		JSONArray jsonArray = new JSONArray();
		List<DirContextAdapter> list = ldapUtil.findOrganizationAndPerson(dn);
		String[] theDnArray = dn.split("=|,");
		for (DirContextAdapter ctx : list) {
			JSONObject json = new JSONObject();
			String dns = ctx.getDn().toString();
			String[] dnArray = dns.split("=|,");
			if(dnArray.length==theDnArray.length){
				json.put("id", dns);
				if("".endsWith(dnArray[0])){
					json.put("text", ctx.getStringAttribute("dc"));
				}else{
					json.put("text", ctx.getStringAttribute(dnArray[0]));
				}
				json.put("children", findChirld(dns));
				jsonArray.add(json);
			}else{
				
			}
		}
		return jsonArray;
	}
	public JSONArray findChirld(String dn){
		JSONArray jsonArray = new JSONArray();
		List<DirContextAdapter> list = ldapUtil.findOrganizationAndPerson(dn);
		String[] theDnArray = dn.split("=|,");
		for (DirContextAdapter ctx : list) {
			JSONObject json = new JSONObject();
			String dns = ctx.getDn().toString();
			String[] dnArray = dns.split("=|,");
			if(dnArray.length-theDnArray.length==2||dnArray.length-theDnArray.length==1){
				json.put("id", dns);
				json.put("text", ctx.getStringAttribute(dnArray[0]));
				json.put("children", findChirld(dns));
				jsonArray.add(json);
			}
		}
		return jsonArray;	
	}
           

接下來前台采用jquery easyUI做的增删改查

<%@ taglib uri="http://java.sun.com/jsp/jstl/core" prefix="c" %>
<%@ page language="java" pageEncoding="UTF-8"%>
<!DOCTYPE html>
<html>
<head>
<meta charset="UTF-8">
	<title>ldap</title>
	<link rel="stylesheet" type="text/css" href="<c:url value=" target="_blank" rel="external nofollow"  target="_blank" rel="external nofollow"  target="_blank" rel="external nofollow" /resources/jquery-easyui-1.4/themes/default/easyui.css"/>">
	<link rel="stylesheet" type="text/css" href="<c:url value=" target="_blank" rel="external nofollow"  target="_blank" rel="external nofollow"  target="_blank" rel="external nofollow" /resources/jquery-easyui-1.4/themes/icon.css"/>">
	<link rel="stylesheet" type="text/css" href="<c:url value=" target="_blank" rel="external nofollow"  target="_blank" rel="external nofollow"  target="_blank" rel="external nofollow" /resources/jquery-easyui-1.4/demo.css"/>">
<title>ldapTest</title>
<style>  
body{ margin:0; height:100%}  
html{ height:100%} /*相容firefox的div高度100%*/  
#left{ position:absolute; top:0; left:0; width:200px; height:100%; background-color:#98f5ff;border-style: inset groove; border-width: 5px;}  
#right{ margin-left:200px; height:100%; background-color:#fffaf0;border-style: outset; border-width: 5px;}  
</style>
</head>
<body>
	<script type="text/javascript" src="<c:url value="/resources/jquery-easyui-1.4/jquery.min.js"/>"></script>
	<script type="text/javascript" src="<c:url value="/resources/jquery-easyui-1.4/jquery.easyui.min.js"/>"></script>
	<div id="left" >
	<button id="btnAddOrganization">添加組織</button>
	<button id="btnAddOrganizationUnit">添加小組</button>
	<ul class="easyui-tree"  id="ldapTree" >
		</ul></div>  
<div id="right">
<button id="btnAddPerson">添加人員</button>
<table class="easyui-datagrid" style="width:600px;" title="ldap-person"  id="personTable">
</table>
<div id="win" class="easyui-window" title="添加人員" style="width:600px;height:400px"
        data-options="modal:true" >
<form id="personForm" method="post">
<input type="hidden" id="dn" name="dn">
    <table cellpadding="4">
                <tr>
                    <td>名字:</td>
                    <td><input class="easyui-textbox" type="text" name="cn" data-options="required:true"></input></td>
                </tr>
                <tr>
                    <td>姓氏:</td>
                    <td><input class="easyui-textbox" type="text" name="sn" data-options="required:true"></input></td>
                </tr>
                <tr>
                    <td>手機号碼:</td>
                    <td><input class="easyui-textbox" type="text" name="telephoneNumber" data-options="validType:'number'"></input></td>
                </tr>
                <tr>
                    <td>描述:</td>
                    <td><input class="easyui-textbox" name="description" data-options="multiline:true" style="height:60px"></input></td>
                </tr>
                <tr>
                    <td>其他:</td>
                    <td><input class="easyui-textbox" name="seeAlso" data-options="multiline:true" style="height:60px"></input></td>
                </tr>
                <tr>
                	<td colspan="2"> <span id="warming"></span></td>
                </tr>
            </table>
</form>
		<div style="text-align:center;padding:5px">
            <a href="javascript:void(0)" target="_blank" rel="external nofollow"  target="_blank" rel="external nofollow"  target="_blank" rel="external nofollow"  target="_blank" rel="external nofollow"  target="_blank" rel="external nofollow"  target="_blank" rel="external nofollow"  class="easyui-linkbutton" οnclick="submitForm()">送出</a>
            <a href="javascript:void(0)" target="_blank" rel="external nofollow"  target="_blank" rel="external nofollow"  target="_blank" rel="external nofollow"  target="_blank" rel="external nofollow"  target="_blank" rel="external nofollow"  target="_blank" rel="external nofollow"  class="easyui-linkbutton" οnclick="clearForm()">重置</a>
        </div>
</div>
<div id="winOrganization" class="easyui-window" title="添加組織"  style="width:600px;height:400px"
        data-options="modal:true" >
<form id="organizationForm" method="post">
<input type="hidden" id="dnOrganization" name="dn">
    <table cellpadding="4">
                <tr>
                    <td>機構名稱:</td>
                    <td><input class="easyui-textbox" type="text" name="o" data-options="required:true"></input></td>
                </tr>
                <tr>
                    <td>業務編碼:</td>
                    <td><input class="easyui-textbox" type="text" name="businessCatagory" ></input></td>
                </tr>
                <tr>
                    <td>聯系電話:</td>
                    <td><input class="easyui-textbox" type="text" name="telephoneNumber" data-options="validType:'number'"></input></td>
                </tr>
                <tr>
                    <td>位址:</td>
                    <td><input class="easyui-textbox" name="streetAdress" data-options="multiline:true" style="height:60px"></input></td>
                </tr>
                <tr>
                    <td>其他:</td>
                    <td><input class="easyui-textbox" name="seeAlso" data-options="multiline:true" style="height:60px"></input></td>
                </tr>
                <tr>
                	<td colspan="2"> <span id="OrganizationWarming"></span></td>
                </tr>
            </table>
</form>
		<div style="text-align:center;padding:5px">
            <a href="javascript:void(0)" target="_blank" rel="external nofollow"  target="_blank" rel="external nofollow"  target="_blank" rel="external nofollow"  target="_blank" rel="external nofollow"  target="_blank" rel="external nofollow"  target="_blank" rel="external nofollow"  class="easyui-linkbutton" οnclick="submitOrganizationForm()">送出</a>
            <a href="javascript:void(0)" target="_blank" rel="external nofollow"  target="_blank" rel="external nofollow"  target="_blank" rel="external nofollow"  target="_blank" rel="external nofollow"  target="_blank" rel="external nofollow"  target="_blank" rel="external nofollow"  class="easyui-linkbutton" οnclick="clearOrganizationForm()">重置</a>
        </div>
</div>
<div id="winOrganizationUnit" class="easyui-window" title="添加小組"  style="width:600px;height:400px"
        data-options="modal:true" >
<form id="organizationUnitForm" method="post">
<input type="hidden" id="dnOrganizationUnit" name="dn">
    <table cellpadding="4">
                <tr>
                    <td>小組名稱:</td>
                    <td><input class="easyui-textbox" type="text" name="o" data-options="required:true"></input></td>
                </tr>
                <tr>
                    <td>業務編碼:</td>
                    <td><input class="easyui-textbox" type="text" name="businessCatagory" ></input></td>
                </tr>
                <tr>
                    <td>聯系電話:</td>
                    <td><input class="easyui-textbox" type="text" name="telephoneNumber" data-options="validType:'number'"></input></td>
                </tr>
                <tr>
                    <td>位址:</td>
                    <td><input class="easyui-textbox" name="streetAdress" data-options="multiline:true" style="height:60px"></input></td>
                </tr>
                <tr>
                    <td>其他:</td>
                    <td><input class="easyui-textbox" name="seeAlso" data-options="multiline:true" style="height:60px"></input></td>
                </tr>
                <tr>
                	<td colspan="2"> <span id="OrganizationUnitWarming"></span></td>
                </tr>
            </table>
</form>
		<div style="text-align:center;padding:5px">
            <a href="javascript:void(0)" target="_blank" rel="external nofollow"  target="_blank" rel="external nofollow"  target="_blank" rel="external nofollow"  target="_blank" rel="external nofollow"  target="_blank" rel="external nofollow"  target="_blank" rel="external nofollow"  class="easyui-linkbutton" οnclick="submitOrganizationUnitForm()">送出</a>
            <a href="javascript:void(0)" target="_blank" rel="external nofollow"  target="_blank" rel="external nofollow"  target="_blank" rel="external nofollow"  target="_blank" rel="external nofollow"  target="_blank" rel="external nofollow"  target="_blank" rel="external nofollow"  class="easyui-linkbutton" οnclick="clearOrganizationUnitForm()">重置</a>
        </div>
</div>
</div> 
	<script>
	function submitForm(){
        $('#personForm').form('submit');
    }
    function clearForm(){
        $('#personForm').form('clear');
    }
    function submitOrganizationForm(){
    	 $('#organizationForm').form('submit');
    }
    function clearOrganizationForm(){
    	$('#organizationForm').form('clear');
    }
    function submitOrganizationUnitForm(){
    	 $('#organizationUnitForm').form('submit');
    }
    function clearOrganizationUnitForm(){
    	$('#organizationUnitForm').form('clear');
    }
	$(document).ready(function() {
		$("#ldapFormDiv").hide();
		$("#win").window('close');
		$("#winOrganization").window('close');
		$("#winOrganizationUnit").window('close');
		$('#ldapTree').tree({
		    url:'http://localhost:8080/spring-mvc-showcase/simple',
		    onClick:function(node){
		    	$('#personTable').datagrid('reload','http://localhost:8080/spring-mvc-showcase/loadPerson/dn='+node.id);
		    	$("#dn").val(node.id);
		    	$("#dnOrganization").val(node.id);
		    	$("#dnOrganizationUnit").val(node.id);
		    }
		});
		$('#personTable').datagrid({
			url : 'http://localhost:8080/spring-mvc-showcase/loadPerson/dn=o=product',
			pagination:true ,
			rownumbers:true,
			collapsible:true,
			singleSelect:true,
		    columns:[[
		        {field:'cn',title:'name',width:100},
		        {field:'sn',title:'sn',width:100},
		        {field:'telephoneNumber',title:'telephone',width:100}
		    ]]
		});
		$('#personForm').form({
		    url:"http://localhost:8080/spring-mvc-showcase/submitPerson",
		    onSubmit: function(){
		    	if(""==$("#dn").val()){
		    		$("#warming").html("<font color='red'>請選擇機構</font>");
		    		return false;
		    	}
		    	$("#warming").html("");
		        return true;
		    },
		    success:function(data){
		    	$("#win").window('close');
		    	$('#personTable').datagrid('reload','http://localhost:8080/spring-mvc-showcase/loadPerson/dn='+data);
		    }
		});
		$('#organizationForm').form({
		    url:"http://localhost:8080/spring-mvc-showcase/submitOrganization",
		    onSubmit: function(){
		        return true;
		    },
		    success:function(data){
		    	$("#winOrganization").window('close');
		    	$('#ldapTree').tree('reload');
		    }
		});
		$('#organizationUnitForm').form({
		    url:"http://localhost:8080/spring-mvc-showcase/submitOrganizationUnit",
		    onSubmit: function(){
		        return true;
		    },
		    success:function(data){
		    	$("#winOrganizationUnit").window('close');
		    	$('#ldapTree').tree('reload');
		    }
		});
		$("#btnAddPerson").click(function(){
			$("#win").window('open');
		});
		$("#btnAddOrganization").click(function(){
			$("#winOrganization").window('open');
		});
		$("#btnAddOrganizationUnit").click(function(){
			$("#winOrganizationUnit").window('open');
		});
		});
	</script>
</body>
</html>
           

附件是maven項目   下載下傳後想運作需要配置maven庫  該項目是在pringmvc-showcase的基礎上做的,所有springmvc-showcase的作用功能都有。

繼續閱讀