環境設定ファイル

#
include         /usr/local/etc/openldap/schema/core.schema
include         /usr/local/etc/openldap/schema/cosine.schema
include         /usr/local/etc/openldap/schema/inetorgperson.schema
include         /usr/local/etc/openldap/schema/nis.schema
 
schemacheck     off
 
referral        ldap://master.foobar.co.jp
 
pidfile         /usr/local/var/slapd.pid
argsfile        /usr/local/var/slapd.args
 
#######################################################################
# ldbm database definitions
#######################################################################
database        ldbm
suffix          "o=FOOBAR,c=JP"
rootdn          "cn=root,o=FOOBAR,c=JP"
rootpw          secret
directory       /usr/local/var/openldap-ldbm
 
objectClass     person
 
replogfile      /usr/local/var/slurpd.replog
 
replica         host=repl.foobar.co.jp:389 binddn="cn=root,o=FOOBAR,c=JP"
                bindmethod=simple credentials credentials=secret

# すべてのユーザーにして読み取り許可を与える
access to * by * read
 
# 自分のエントリーは更新／認証可能で、認証されたユーザーは読み取り許可を与える
access to *
    by self write
    by anonymouse auth
    by * read

ldapadd

root#
root# ldapadd -D "cn=root,o=FOOBAR,c=JP" -w secret
dn: o=FOOBAR,c=JP
o: FOOBAR
objectclass: organization
<CR> 
adding new entry "o=FOOBAR,c=JP"
^D
root# 

root#
root# ldapadd -D "cn=root,o=FOOBAR,c=JP" -w secret
dn: ou=People, o=FOOBAR, c=JP
ou: People
objectclass: top
objectclass: organizationalUnit
<CR>
adding new entry "ou=People, o=FOOBAR, c=JP"
 
dn: uid=momo, ou=People, o=FOOBAR, c=JP
objectclass: account
objectclass: posixAccount
objectclass: top
cn: Tarou Momo
uid: momo
uidnumber: 1230
gidnumber: 100
homedirectory: /home/tarou
loginshell: /bin/bash
gecos: Tarou Momo
mail: momo@foobar.co.jp
<CR>
adding new entry "uid=momo, ou=People, o=FOOBAR, c=JP"
 
dn: uid=hana, ou=People, o=FOOBAR, c=JP
objectclass: account
objectclass: posixAccount
objectclass: top
cn: Hanako Hanazono
uid: hana
uidnumber: 1231
gidnumber: 100
homedirectory: /home/hanako
loginshell: /bin/csh
gecos: Hanako Hanazono
mail: hana@foobar.co.jp
<CR>
adding new entry "uid=hana, ou=People, o=FOOBAR, c=JP"
 
dn: uid=jack, ou=People, o=FOOBAR, c=JP
objectclass: account
objectclass: posixAccount
objectclass: top
cn: Jack Beans
uidnumber: 1232
gidnumber: 100
homedirectory: /home/jack
loginshell: /bin/bash
gecos: Jack Beans
mail: jack@foobar.co.jp
<CR>
adding new entry "uid=jack, ou=People, o=FOOBAR, c=JP"
^D
root# 

root#
root# ldapsearch -b "o=FOOBAR, c=JP" "(uidnumber=1232)"
version: 2
 
#
# filter: (uidnumber=1232)
# requesting: ALL
#
 
# jack, People, FOOBAR, JP
dn: uid=jack, ou=People, o=FOOBAR, c=JP
objectClass: account
objectClass: posixAccount
objectClass: top
cn: Jack Beans
uidNumber: 1232
gidNumber: 100
homeDirectory: /home/jack
loginShell: /bin/bash
gecos: Jack Beans
mail: jack@foobar.co.jp

# search result
search: 2
result: 0 Success

# numResponses: 2
# numEntries: 1
root# 

#include <stdio.h>
#include <ldap.h>

#define LDAP_SERVER     "master.foobar.co.jp"
#define BASE_DN         "o=FOOBAR,c=JP"

main()
{
    LDAP        *ld;
    LDAPMessage *result;
    int          entries;

    // Initialize
    if ((ld = ldap_init(LDAP_SERVER, LDAP_PORT )) == NULL) {
        perror("ldap_init");
        exit(1);
    }
    if (ldap_simple_bind_s(ld, NULL, NULL) != LDAP_SUCCESS) {
        ldap_perror(ld, "ldap_simple_bind_s");
        ldap_unbind(ld);
        exit(1);
    }
    // Search Entry
    if (ldap_search_s(ld, BASE_DN, LDAP_SCOPE_SUBTREE,
        NULL, NULL, 0, &result) != LDAP_SUCCESS)
    {
        ldap_perror(ld, "ldap_search_s");
        ldap_unbind(ld);
        exit(1);
    }

    entries = ldap_count_entries(ld, result);
    printf("Found %d entries\n", entries);

    ldap_msgfree(result);
    ldap_unbind(ld);
}

import javax.naming.*;
// import javax.naming.Context;
// import javax.naming.InitialContext;
// import javax.naming.NamingException;
// import javax.naming.NameAlreadyBoundException;
// import javax.naming.NamingEnumeration;
import javax.naming.directory.*;
import java.util.*;
// import java.util.Properties;
// import java.util.Enumeration;
 
public class TestLDAP {
    final static String ldapServerName = "master.foobar.co.jp";
    final static String rootdn = "cn=root,o=FOOBAR,c=JP";
    final static String rootpass = "secret";
    final static String rootContext = "o=FOOBAR,c=JP";
 
    public static void main(String[] args) {
        // set up environment to access the server
        Properties env = new Properties();
 
        env.put(Context.INITIAL_CONTEXT_FACTORY,
                "com.sun.jndi.ldap.LdapCtxFactory");
        env.put(Context.PROVIDER_URL,
                "ldap://" + ldapServerName + "/" + rootContext);
        env.put(Context.SECURITY_PRINCIPAL, rootdn);
        env.put(Context.SECURITY_CREDENTIALS, rootpass);
 
        try {
            int i;
 
            // obtain initial directory context using the environment
            DirContext ctx = new InitialDirContext(env);
            SearchControls constraints = new SearchControls();
            // specify search constraints to search subtree
            constraints.setSearchScope(SearchControls.SUBTREE_SCOPE);
            NamingEnumeration results = ctx.search("", "(objectclass=*)", 
                                                   constraints);
            for (i=0; results.hasMore(); i++)
                results.next();
            System.out.println("Fond " + i + " entries");
        } catch (NameAlreadyBoundException nabe) {
            System.err.println("Value has already been bound!");
        } catch (Exception e) {
            System.err.println(e);
        }
    }
}