JavaJAVA通过LDAP+SSL（证书）实现用户和组织（部门）增删改查

公共代码，可以根据自己的需求将日志更改

dn：CN=xxx,OU=xxx,DC=xxx,DC=com
cn：就是DN的CN的值xxx

package test;
import java.io.Serializable;
/**
* ad用户属性
*
* @author chenmd
* @date 2020/5/9
* @version 1.0
*
*/
public class AdUser implements Serializable {
/**
*
*/
private static final long serialVersionUID = 6648591000684940318L;
// 常用名
private String cn;
// 用户登录名(Windows 2000 以前版本)(W)
private String sAMAccountName;
// 用户登录名(U)
private String name;
// 姓(L)
private String sn;
//
private String userAccountControl;
// 电话号码(T)
private String telephoneNumber;
// 名(F)
private String givenName;
// 描述(D)
private String description;
// 显示名称(S)
private String displayName;
// 电子邮件(M)
private String mail;
// 密码
private String unicodePwd;
//标识名
//CN=xx,OU=xx,DC=xx,DC=com
private String dn;
//部门 oa组织最后一级
private String department;
public String getCn() {
return cn;
}
public void setCn(String cn) {
this.cn = cn;
}
public String getsAMAccountName() {
return sAMAccountName;
}
public void setsAMAccountName(String sAMAccountName) {
this.sAMAccountName = sAMAccountName;
}
public String getName() {
return name;
}
public void setName(String name) {
this.name = name;
}
public String getSn() {
return sn;
}
public void setSn(String sn) {
this.sn = sn;
}
public String getUserAccountControl() {
return userAccountControl;
}
public void setUserAccountControl(String userAccountControl) {
this.userAccountControl = userAccountControl;
}
public String getTelephoneNumber() {
return telephoneNumber;
}
public void setTelephoneNumber(String telephoneNumber) {
this.telephoneNumber = telephoneNumber;
}
public String getGivenName() {
return givenName;
}
public void setGivenName(String givenName) {
this.givenName = givenName;
}
public String getDescription() {
return description;
}
public void setDescription(String description) {
this.description = description;
}
public String getDisplayName() {
return displayName;
}
public void setDisplayName(String displayName) {
this.displayName = displayName;
}
public String getMail() {
return mail;
}
public void setMail(String mail) {
this.mail = mail;
}
public String getUnicodePwd() {
return unicodePwd;
}
public void setUnicodePwd(String unicodePwd) {
this.unicodePwd = unicodePwd;
}
public String getDn() {
return dn;
}
public void setDn(String dn) {
this.dn = dn;
}
public String getDepartment() {
return department;
}
public void setDepartment(String department) {
this.department = department;
}
}

账号和密码方式

	/**
* @Description:使用帐户密码登录
* @date 2020-06-02
*/
public void init() {
Properties env = new Properties();
String ldapURL = "ldap://" + host + ":389";// ip:port
env.put(Context.INITIAL_CONTEXT_FACTORY,
"com.sun.jndi.ldap.LdapCtxFactory");
env.put(Context.SECURITY_AUTHENTICATION, "simple");// LDAP访问安全级别："none","simple","strong"
env.put(Context.SECURITY_PRINCIPAL, adminName);
env.put(Context.SECURITY_CREDENTIALS, adminPassword);
env.put(Context.PROVIDER_URL, ldapURL);
try {
dc = new InitialLdapContext(env, null);
System.out.println("AD域帐户密码认证成功");
} catch (Exception e) {
System.out.println("AD域帐户密码认证失败");
e.printStackTrace();
}
}

通过证书连接

	/**
* @Description:使用SSl的方式登录
* @date 2020-06-29
*/
public void certinit() {
Properties env = new Properties();
String ldapURL = "ldap://" + host + ":636";// ip:port
env.put(Context.INITIAL_CONTEXT_FACTORY,
"com.sun.jndi.ldap.LdapCtxFactory");
env.put(Context.SECURITY_AUTHENTICATION, "simple");// LDAP访问安全级别："none","simple","strong"
env.put(Context.SECURITY_PRINCIPAL, adminName);
env.put(Context.SECURITY_CREDENTIALS, adminPassword);
env.put(Context.PROVIDER_URL, ldapURL);
String keystore = "D:\cacerts";
System.setProperty("javax.net.ssl.trustStore", keystore);
env.put(Context.SECURITY_PROTOCOL, "ssl");
try {
dc = new InitialLdapContext(env, null);
System.out.println("AD域ssl身份认证成功");
} catch (Exception e) {
System.out.println("AD域ssl身份认证失败");
e.printStackTrace();
}
}

问题来了，证书怎么导入呢？？？

证书导入

打开cmd ，根据自己的jdk位置，例如证书放在D:chenmd.cer
D:Program FilesMyEclipseCommonbinarycom.sun.java.jdk.win32.x86_64_1.6.0.013bin
PS:可以在指定地址栏直接输入cmd

keytool -import -keystore ..jrelibsecuritycacerts -storepass changeit -keypass changeit -alias chenmd-file D:chenmd.cer

PS两个证书都要导入
证书的导出可以参照我写的
JAVA通过LDAP+SSL（证书）实现用户和组织（部门）增删改查（AD域证书导出）

用户的增删改查

新增(实现新增的同时将密码也设置上去)

	/**
* @Description:新增AD域用户
* @date 2020-06-02
*/
public boolean add(AdUser user) {
boolean flag = false;
try {
Attributes attrs = new BasicAttributes(true);
// 对象类 取值person, organizationalPerson, user
attrs.put("objectClass", "user");
// 用户登录名(Windows 2000 以前版本)(W)
attrs.put("samAccountName", user.getsAMAccountName());
// 用户登录名(U)
attrs.put("userPrincipalName", user.getsAMAccountName() + domain);
attrs.put(
"userAccountControl",
Integer.toString(UF_NORMAL_ACCOUNT + UF_PASSWD_NOTREQD
+ UF_PASSWORD_EXPIRED + UF_ACCOUNTDISABLE));
// 电话号码(T)
attrs.put("telephoneNumber", user.getTelephoneNumber());
// 显示名称(S)
attrs.put("displayName", user.getDisplayName());
// 描述(D)
attrs.put("description", user.getDescription());
// 电子邮件(M)
attrs.put("mail", user.getsAMAccountName() + domain);
// 名(F)
attrs.put("givenName", user.getGivenName());
// //
// attrs.put("name",user.getName());
// 部门
attrs.put("department", user.getDepartment());
// 姓(L)
attrs.put("sn", user.getSn());
dc.createSubcontext(user.getDn(), attrs);
System.out.println("新增AD域用户成功:" + user.getCn());
ModificationItem[] mods = new ModificationItem[2];
String newQuotedPassword = """ + user.getUnicodePwd() + """;
byte[] newUnicodePassword;
try {
newUnicodePassword = newQuotedPassword.getBytes("UTF-16LE");
mods[0] = new ModificationItem(DirContext.REPLACE_ATTRIBUTE,
new BasicAttribute("unicodePwd", newUnicodePassword));
mods[1] = new ModificationItem(DirContext.REPLACE_ATTRIBUTE,
new BasicAttribute("userAccountControl",
Integer.toString(UF_NORMAL_ACCOUNT
+ UF_PASSWORD_EXPIRED)));
dc.modifyAttributes(user.getDn(), mods);
flag = true;
} catch (UnsupportedEncodingException e1) {
e1.printStackTrace();
return flag;
}
} catch (Exception e) {
e.printStackTrace();
System.out.println("新增AD域用户失败:" + user.getCn());
return flag;
}
return flag;
}

修改

	/**
* @Description:修改AD域用户属性
* @date 2020-06-02
*/
public void updateUser(AdUser user) {
if (user == null || user.getDn() == null
|| user.getDn().length() <= 0) {
return;
}
// 修改的属性
List<ModificationItem> mList = new ArrayList<ModificationItem>();
mList.add(new ModificationItem(DirContext.REPLACE_ATTRIBUTE,
new BasicAttribute("sn", user.getSn())));
mList.add(new ModificationItem(DirContext.REPLACE_ATTRIBUTE,
new BasicAttribute("telephoneNumber", user
.getTelephoneNumber())));
mList.add(new ModificationItem(DirContext.REPLACE_ATTRIBUTE,
new BasicAttribute("givenName", user.getGivenName())));
mList.add(new ModificationItem(DirContext.REPLACE_ATTRIBUTE,
new BasicAttribute("displayName", user.getDisplayName())));
mList.add(new ModificationItem(DirContext.REPLACE_ATTRIBUTE,
new BasicAttribute("description", user.getDescription())));
mList.add(new ModificationItem(DirContext.REPLACE_ATTRIBUTE,
new BasicAttribute("department", user.getDepartment())));
mList.add(new ModificationItem(DirContext.REPLACE_ATTRIBUTE,
new BasicAttribute("description", user.getDescription())));
if (mList.size() > 0) {
// 集合转为数组
ModificationItem[] mArray = new ModificationItem[mList.size()];
for (int i = 0; i < mList.size(); i++) {
mArray[i] = mList.get(i);
}
try {
dc.modifyAttributes(user.getDn(), mArray);
System.out.println("修改AD域用户属性成功");
} catch (NamingException e) {
System.err.println("修改AD域用户属性失败");
e.printStackTrace();
}
}
}

删除

	/**
* @Description:删除AD域用户
* @date 2020-06-02
*/
public void deleteUser(String dn) {
try {
dc.destroySubcontext(dn);
System.out.println("删除AD域用户成功:" + dn);
} catch (Exception e) {
System.out.println("删除AD域用户失败:" + dn);
e.printStackTrace();
}
}

组织的新增

	/**
* 创建组织单元
*
* @param newUserName
*/
public void createOU(String newUserName) {
try {
BasicAttributes attrsbu = new BasicAttributes();
BasicAttribute objclassSet = new BasicAttribute("objectclass");
objclassSet.add("top");
objclassSet.add("organizationalUnit");
attrsbu.put(objclassSet);
attrsbu.put("ou", newUserName);
attrsbu.put("description", newUserName);
dc.createSubcontext("ou=" + newUserName + "," + root, attrsbu);
} catch (Exception e) {
e.printStackTrace();
System.out.println("新增AD域用户失败:" + newUserName);
}
}

组织的修改

	/**
* @Description:重命名OU
* @date 2020-06-02
* @author chenmd
*/
public boolean renameOU(String oldDN, String newDN) {
try {
dc.rename(oldDN, newDN);
System.out.println("重命名OU成功");
return true;
} catch (NamingException ne) {
System.out.println("重命名OU失败");
ne.printStackTrace();
return false;
}
}

组织的删除

	/**
* 只能组织单元为空才可以删除
* @Description:删除OU
* @date 2020-06-02
* @author chenmd
*/
public void deleteOU(String dn) {
try {
dc.destroySubcontext(dn);
System.out.println("删除OU成功:" + dn);
} catch (Exception e) {
System.out.println("删除OU失败:" + dn);
e.printStackTrace();
}
}

循环创建组织

	public void createOU(String oaUnit, String description) {
try {
if (oaUnit.indexOf(oldReplace) > -1) {
// 去除根组织,因为根组织名称已被占用，另起炉灶
oaUnit = oaUnit.replace(oldReplace, replace);
}
String arr[] = oaUnit.split("\.");
BasicAttributes attrsbu = new BasicAttributes();
BasicAttribute objclassSet = new BasicAttribute("objectclass");
objclassSet.add("top");
objclassSet.add("organizationalUnit");
attrsbu.put(objclassSet);
attrsbu.put("description", description);
String result = root;
for (int i = 0; i < arr.length; i++) {
result = "OU=" + arr[i] + "," + result;
try {
attrsbu.put("ou", arr[i]);
dc.createSubcontext(result, attrsbu);
} catch (Exception e) {
System.out.println("新增组织单元域失败:" + result + "，异常信息："
+ e.getMessage());
}
}
} catch (Exception e) {
e.printStackTrace();
System.out.println("新增组织单元域失败:" + e.getMessage());
}
}

还有很多方法就不在这里一一列出，完整代码会打包放在附件中
????

最后

以上就是无情魔镜为你收集整理的JAVA通过LDAP+SSL（证书）实现用户和组织（部门）增删改查（Java代码部分）JavaJAVA通过LDAP+SSL（证书）实现用户和组织（部门）增删改查的全部内容，希望文章能够帮你解决JAVA通过LDAP+SSL（证书）实现用户和组织（部门）增删改查（Java代码部分）JavaJAVA通过LDAP+SSL（证书）实现用户和组织（部门）增删改查所遇到的程序开发问题。

如果觉得靠谱客网站的内容还不错，欢迎将靠谱客网站推荐给程序员好友。