/** * Search for the uid and then authenticate with the * password * * @param args host, port, uid, password */ public static void main( String[] args ) { if ( argslength != 5 ) { Systemoutprintln( "Usage: java UidLogin " + "<host> <port> <baseDN> " + "<uid> <password>" ); Systemoutprintln( "Example:" ); Systemoutprintln( " java UidLogin " + "localhost 389 " + "\"o=airiuscom\" " + "cathyp password" ); Systemexit(1); } String host = args[0]; int port = IntegerparseInt( args[1] ); String baseDN = args[2]; String authid = args[3]; String authpw = args[4]; if ( (authidlength() == 0) || (authpwlength() == 0) || (authidindexOf( * ) >= 0) ) { Systemoutprintln( "You must supply a uid and " + "password" ); Systemexit(1); } boolean authed = false; LDAPConnection ld = new LDAPConnection(); try { // Connect to server anonymously ldconnect( host, port ); // Search for entries with a matching uid LDAPSearchConstraints cons = ldgetSearchConstraints(); conssetBatchSize( 0 );

LDAPSearchResults results = ldsearch( baseDN, ldSCOPE_SUB, "uid=" + authid, new String[] {ldNO_ATTRS}, false, cons ); // There should be exactly one match if ( !resultshasMoreElements() ) { Systemoutprintln( "uid not found" ); } else if ( resultsgetCount() > 1 ) { Systemoutprintln( "More than one matching " + "uid" ); } else { LDAPEntry entry = resultsnext(); String authDN = entrygetDN(); Systemoutprintln( "uid maps to: " + authDN ); ldauthenticate( authDN, authpw ); authed = true; } } catch( LDAPException e ) { Systemoutprintln( etoString() ); } // Done, so disconnect if ( (ld != null) && ldisConnected() ) { try { lddisconnect(); } catch ( LDAPException e ) { Systemoutprintln( etoString() ); } } int rc = 0; if ( authed ) { Systemoutprintln( "Authenticated!" ); } else { Systemoutprintln("Not Authenticated!"); rc = 1; } Systemexit(rc); } }

You can add new entries to the directory by de ning a DN for the entry, creating the attributes for the entry, and requesting that the LDAP server add the new entry

Creating an entry in the directory requires the following steps: 1 Instantiate an LDAPAttribute object for each attribute that forms the entry 2 Instantiate an LDAPAttributeSet object and use the add method to add each LDAPAttribute object from step 1 3 Instantiate an LDAPEntry object that speci es the new DN and the LDAPAttributeSet from step 2 4 Call the LDAPConnectionadd method with the LDAPEntry object from step 3 The LDAPAttribute class represents an attribute An LDAPAttribute is used to build each attribute and the corresponding values for the entry The following code fragment shows calls to create an LDAPAttribute for a single-valued attribute, a multivalued attribute, and an attribute that contains binary data

LDAPAttribute attr1 = new LDAPAttribute( "cn", "Babs Jensen" ); String attrvals = { "Babs Jensen", "Barbara Jensen" }; LDAPAttribute attr2 = new LDAPAttribute( "cn", attrvals); byte[] jpeg_data = readImage( "myimagejpg" ); LDAPAttribute attr3 = new LDAPAttribute( "jpegPhoto", jpeg_data );

Once the attributes have been built, they are put into an LDAPAttributeSet using the add method on the LDAPAttributeSet object An LDAPEntry object is then created with the LDAPAttributeSet and the String representing the DN Figure 6-1 shows what is contained in an LDAPEntry object This LDAPEntry is passed to the LDAPConnectionadd method, as illustrated in the following code, which adds a new person entry to the directory

LDAPAttributeSet attrs = new LDAPAttributeSet(); String objclass[] = { "top", "person", "organizationalPerson",

"inetOrgPerson" }; attrsadd( new LDAPAttribute( "objectclass", objclass ) ); attrsadd( new LDAPAttribute( "cn", "Babs Jensen" ) ); attrsadd( new LDAPAttribute( "sn", "Jensen" ) ); attrsadd( new LDAPAttribute( "mail", "bjensen@airiuscom" ) ); String dn = "uid=bjensen,ou=People,o=airiuscom"; LDAPEntry theEntry = new LDAPEntry( dn, attrs ); try { // The add may fail for lack of privileges or other reasons ldadd( theEntry ); } catch ( LDAPException e ) { }

You must include the required attributes for the speci ed object class as part of the entry For person and its derived object classes, the required attributes are objectclass, sn, and cn In the example just given, we are also adding an optional attribute mail Note that not only inetOrgPerson should be speci ed as object class, but also its ancestors (top, person, and organizationalPerson) You must also be authenticated with credentials that allow adding entries to the directory at the point speci ed by the DN In this case, you must have the right to add child entries to ou=People, o=airiuscom Finally, the parent entry ou=People, o=airiuscom in this case must exist