LDAP：如何獲取Active Directory中的所有組？

Question

有沒有辦法使用java獲取Active Directory中所有組的名稱？

Answer 1

使用Java JNDI，並搜索（objectclass = group）並請求cn屬性。這將獲得所有組名稱。

代碼示例：

import java.util.Hashtable; 

import javax.naming.Context; 
import javax.naming.NamingEnumeration; 
import javax.naming.NamingException; 
import javax.naming.directory.Attributes; 
import javax.naming.directory.DirContext; 
import javax.naming.directory.InitialDirContext; 
import javax.naming.directory.SearchControls; 
import javax.naming.directory.SearchResult; 

public class Test { 

    public static String ldapUri = "ldap://localhost"; 
    public static String usersContainer = "cn=users,dc=example,dc=com"; 

    public static void main(String args[]) { 

     if (args.length != 2) { 
      System.out.println("Usage: test userName password"); 
      return; 
     } 
     String username = args[0]; 
     String password = args[1]; 

     Hashtable env = new Hashtable(); 
     env.put(Context.INITIAL_CONTEXT_FACTORY, "com.sun.jndi.ldap.LdapCtxFactory"); 
     env.put(Context.PROVIDER_URL, ldapUri); 
     env.put(Context.SECURITY_PRINCIPAL, username); 
     env.put(Context.SECURITY_CREDENTIALS, password); 
     try { 
      DirContext ctx = new InitialDirContext(env); 
      SearchControls ctls = new SearchControls(); 
      String[] attrIDs = { "cn" }; 
      ctls.setReturningAttributes(attrIDs); 
      ctls.setSearchScope(SearchControls.ONELEVEL_SCOPE); 

      NamingEnumeration answer = ctx.search(usersContainer, "(objectclass=group)", ctls); 
      while (answer.hasMore()) { 
       SearchResult rslt = (SearchResult) answer.next(); 
       Attributes attrs = rslt.getAttributes(); 
       System.out.println(attrs.get("cn")); 
      } 

      ctx.close(); 

     } catch (NamingException e) { 
      e.printStackTrace(); 
     } 

    } 
} 

Answer 2

你可以使用這個庫。它易於使用，功能強大的

http://code.google.com/p/jedi-obi/

Answer 3

我用格利揚的例子來查詢的用戶羣體，但發現，雖然查詢工作，它沒有返回的所有用戶組。經過一番挖掘，我開始意識到AD全球目錄和基於this example，我能夠修改Kalyan的答案，以返回全局編錄中的所有用戶組。

所需要的變化是：

1. 新增全球港口3268到ldapUri

2. 設置的第一個參數Context.search到""。

   public static void main(String args[]) { 
       String ldapUri = "ldap://ad.domain.com"; 
   
       if (args.length != 2) { 
        System.out.println("Usage: test userName password"); 
        return; 
       } 
       String username = args[0]; 
       String password = args[1]; 
   
       Hashtable env = new Hashtable(); 
       env.put(Context.INITIAL_CONTEXT_FACTORY, 
         "com.sun.jndi.ldap.LdapCtxFactory"); 
       env.put(Context.PROVIDER_URL, ldapUri + ":3268"); 
       env.put(Context.SECURITY_PRINCIPAL, username); 
       env.put(Context.SECURITY_CREDENTIALS, password); 
       try { 
        DirContext context = new InitialDirContext(env); 
        SearchControls searchControls = new SearchControls(); 
        String[] attrIDs = {"cn"}; 
        searchControls.setReturningAttributes(attrIDs); 
        searchControls.setSearchScope(SearchControls.SUBTREE_SCOPE); 
   
        NamingEnumeration answer = context.search("", "(objectclass=group)", searchControls); 
        while (answer.hasMore()) { 
         SearchResult rslt = (SearchResult) answer.next(); 
         Attributes attrs = rslt.getAttributes(); 
         System.out.println(attrs.get("cn")); 
        } 
   
        context.close(); 
   
   
       } catch (NamingException e) { 
        e.printStackTrace(); 
       } 
   
   }