通過Quercus使用JAVA進行LDAP更新

我正在嘗試通過使用java庫的Quercus中的portlet更新密碼。下面是一些代碼，我使用：通過Quercus使用JAVA進行LDAP更新

import javax.naming.Context; 
import javax.naming.InitialContext; 
import javax.naming.directory.DirContext; 
import javax.naming.directory.InitialDirContext; 
import javax.naming.directory.BasicAttributes; 
import javax.naming.directory.BasicAttribute; 
import javax.naming.directory.SearchControls; 
import javax.sql.DataSource; 
import java.util.Hashtable; 

$uname = isset($_POST['uname'])?$_POST['uname']:''; 
$pass1 = isset($_POST['pass1'])?$_POST['pass1']:''; 

//connecto to LDAP 
$ldapADURL = "ldaps://poplar.example.edu:636"; 
$ldapEnv = new HashTable(); 
$ldapEnv->put("java.naming.factory.initial","com.sun.jndi.ldap.LdapCtxFactory"); 
$ldapEnv->put("java.naming.provider.url", $ldapADURL); 
$ldapEnv->put("java.naming.security.protocal", "ssl"); 
$ldapEnv->put("java.naming.referral", "follow"); 
$ldapEnv->put("java.naming.security.authentication", "simple"); 
$ldapEnv->put("java.naming.security.principal", "ADUser"); 
$ldapEnv->put("java.naming.security.credentials", "[email protected]"); 
$ADCtx = new InitialDirContext($ldapEnv); 

//query the vault for our user 
$ctlsAD = new SearchControls(); 
$attribsAD = array("sAMAccountName","DN","title","extensionAttribute14","extensionAttribute8","cn"); 
$ctlsAD->setReturningAttributes($attribsAD); 
$ctlsAD->setSearchScope(2); 
$filter="(sAMAccountName=" . $uname . ")"; 
$resultAD=$ADCtx->search("DC=conncoll,DC=edu",$filter,$ctlsAD); 

if ($resultAD->hasMore()) { 
    $item = $resultAD->next(); 
    $resultADAttribs = $item->getAttributes(); 
    $rsTitle = str_replace("title: ","",$resultADAttribs->get("title")); 
    $rsAttrib14 = str_replace("extensionAttribute14: ","",$resultADAttribs->get("extensionAttribute14")); 
    $rsAttrib8 = str_replace("extensionAttribute8: ","",$resultADAttribs->get("extensionAttribute8")); 
    $rsUname = str_replace("sAMAccountName: ","",$resultADAttribs->get("sAMAccountName")); 
    $rsDN = str_replace("dn: ","",$resultADAttribs->get("DN")); 
} 

echo ('<br />' . $rsTitle . '<br />' . $rsAttrib14 . '<br />' . $rsAttrib8 . '<br />' . $rsUname . '<br />' . $rsDN . '<br />'); 

if (isset($rsUname)/*ccLDAPCheckUser($uname)*/){ 
    $ADCtx->addToEnvironment("java.naming.security.principal","OtherADUser"); 
    $ADCtx->addToEnvironment("java.naming.security.credentials","[email protected]"); 
    //$resultAD2 = $ADCtx->search("DC=conncoll,DC=edu",$filter,$ctlsAD); 
    $pass2 = "\"" . $pass1 . "\""; 
    $newPass = mb_convert_encoding($pass2, "UTF-16LE"); 
    $ADNewPass = new BasicAttribute("userpassword",$newPass); 
    $ADNewAttrib8 = new BasicAttribute("extensionAttribute8",$rsAttrib8); 
    $ADAttributes = new BasicAttributes(); 
    $ADAttributes->put($ADNewPass); 
    $ADAttributes->put($ADNewAttrib8); 
    $ADCtx->modifyAttributes("sAMAccountName=" . $rsUname,2,$ADAttributes); 
}

運行此代碼我從LDAP服務器下面的錯誤後： javax.naming.directory.InitialDirContext.modifyAttributes：LDAP：錯誤代碼1 - 000020D6：SvcErr：DSID-031007DB，問題5012（DIR_ERROR），數據0]

所以我想知道幾件事情。首先是如果我的modifyAttributes函數調用的語法正確。我試過用dc = example，dc = edu加上查詢字符串沒有成功。第一個查詢返回正確的結果，所以我確信我已連接到AD服務器，並且有人驗證執行代碼的JVM在其存儲中具有有效的最新證書。

該錯誤使我相信我需要爲我試圖更新的對象指定的確切位置，而我沒有這個位置。

感謝您對此問題的看法！

來源

2014-05-13 Mike

所以我找到了我的答案的一部分與獲取DN和使用，而不是sAMAccountName發出密碼重置。

我設置$ rsDN如下：

$rsDN = $item->getNameInNamespace();

，併發出呼籲更改密碼這樣：

$ADCtx->modifyAttributes($rsDN,2,$ADAttributes);

當然現在我收到SSL錯誤，但我在使用更新最少擊中正確的對象。

來源

2014-05-13 14:52:02 Mike

通過Quercus使用JAVA進行LDAP更新

回答

相關問題