JavaのLDAPを使う方法

2年 ago
優斗, 朝陽
2 minutes

JavaでLDAP（Lightweight Directory Access Protocol）を使用すると、ディレクトリサービスとの接続、検索、追加、変更、削除などの操作が可能です。

  1. 初期LdapContext
String url = "ldap://localhost:389";
String user = "cn=admin,dc=example,dc=com";
String password = "password";

Hashtable<String, String> env = new Hashtable<>();
env.put(Context.INITIAL_CONTEXT_FACTORY, "com.sun.jndi.ldap.LdapCtxFactory");
env.put(Context.PROVIDER_URL, url);
env.put(Context.SECURITY_AUTHENTICATION, "simple");
env.put(Context.SECURITY_PRINCIPAL, user);
env.put(Context.SECURITY_CREDENTIALS, password);
InitialLdapContext context = new InitialLdapContext(env, null);
  1. 検索制御
String baseDN = "dc=example,dc=com";
String filter = "(objectClass=person)";
SearchControls controls = new SearchControls();
controls.setSearchScope(SearchControls.SUBTREE_SCOPE);
controls.setReturningAttributes(new String[] { "cn", "email" });

NamingEnumeration<SearchResult> results = context.search(baseDN, filter, controls);
while (results.hasMore()) {
    SearchResult result = results.next();
    Attributes attrs = result.getAttributes();
    String cn = attrs.get("cn").get().toString();
    String email = attrs.get("email").get().toString();
    System.out.println("CN: " + cn + ", Email: " + email);
}
  1. ネイティブな基本属性
  2. context.サブコンテキストを作成()
String dn = "cn=user,ou=people,dc=example,dc=com";
BasicAttributes attrs = new BasicAttributes();
attrs.put(new BasicAttribute("objectClass", "person"));
attrs.put(new BasicAttribute("cn", "user"));
attrs.put(new BasicAttribute("sn", "User"));
attrs.put(new BasicAttribute("email", "user@example.com"));

context.createSubcontext(dn, attrs);
  1. `context.setAttributes()`
String dn = "cn=user,ou=people,dc=example,dc=com";
ModificationItem[] mods = new ModificationItem[1];
mods[0] = new ModificationItem(DirContext.REPLACE_ATTRIBUTE, new BasicAttribute("email", "newemail@example.com"));

context.modifyAttributes(dn, mods);
  1. コンテキストを削除 Subcontext
String dn = "cn=user,ou=people,dc=example,dc=com";
context.destroySubcontext(dn);

以上のJavaにおけるLDAPの基礎的な使い方を参考に、具体的な要求に合わせてさらに操作と拡張を行ってください。

bannerAds