com.jalios.ldap

Class LDAPUtil

java.lang.Object

com.jalios.ldap.LDAPUtil

public class LDAPUtil
extends java.lang.Object

Utilily methods to perform miscelleanous operation related to LDAP.

Version:

$Revision: 54756 $

Nested Class Summary

Nested Classes

Modifier and Type	Class and Description
static class	LDAPUtil.SRVRecord SRV record entry

Field Summary

Fields

Modifier and Type	Field and Description
static java.lang.String	OBJECT_CLASS_ATTR "objectClass"
static java.lang.String	REVISION

Constructor Summary

Constructors

Constructor and Description
LDAPUtil()

Method Summary

Methods

Modifier and Type	Method and Description
static boolean	checkConnect(java.lang.String hostname, java.lang.String port, java.lang.String isSSL, java.lang.String bindDN, java.lang.String bindPassword) Try a LDAP connection using the given host information and credential.
static java.lang.String	escapeDN(java.lang.String name) Escape certain meta-characters in LDAP DN.
static java.lang.String	escapeLDAPSearchFilter(java.lang.String filter) Escape certain meta-characters of a name for use in LDAP search filter.
static java.lang.String	extractSAMAccountName(java.lang.String login) Retrieve the sAMAccountName from the specified login (if possible).
static java.lang.String	getFirstDomainControllerHostname(java.lang.String domain) Retrieve the first domain controler available for query for the specified windows domain.
static LDAPUtil.SRVRecord	getFirstSrvRecord(java.lang.String srvRecordName) Retrieve the first SRV record value for the specified SRV record name.
static java.lang.String	getSid(netscape.ldap.LDAPAttribute objectSidAttribute) Retrieve a string representation of the specified objectSid LDAP attribute which contains a value that specifies the security identifier (SID) of the user.
static java.util.List<LDAPUtil.SRVRecord>	getSrvRecords(java.lang.String srvRecordName) Retrieve all SRV record values for the specified SRV record name.
static java.lang.String	getString(netscape.ldap.LDAPAttribute attribute, java.lang.String defaultValue) Return first available value of LDAPAttribute attr, or defaultValue if not available.
static boolean	isGroupEntry(netscape.ldap.LDAPEntry entry, LDAPConfiguration conf) Determines if the given LDAPEntry is a group entry according to parameters specified by the given LDAPConfiguration object.
static boolean	isUserEntry(netscape.ldap.LDAPEntry entry, LDAPConfiguration conf) Determines if the given LDAPEntry is a user entry according to parameters specified by the given LDAPConfiguration object.
static boolean	supportsVLV(netscape.ldap.LDAPConnection lc) Checks if the remote LDAP server support Virtual List View control.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

REVISION

public static final java.lang.String REVISION

See Also:

Constant Field Values

OBJECT_CLASS_ATTR

public static final java.lang.String OBJECT_CLASS_ATTR

"objectClass"

See Also:

Constant Field Values

Constructor Detail

LDAPUtil

public LDAPUtil()

Method Detail

getString

public static java.lang.String getString(netscape.ldap.LDAPAttribute attribute,
                         java.lang.String defaultValue)

Return first available value of LDAPAttribute attr, or defaultValue if not available.

Parameters:

attribute - LDAPAttribute from which to retrieve value.

defaultValue - the default value to use if none could be read

Returns:

a the first value of attr or defaultValue (never return null unless defaultValue is null).

isGroupEntry

public static boolean isGroupEntry(netscape.ldap.LDAPEntry entry,
                   LDAPConfiguration conf)

Determines if the given LDAPEntry is a group entry according to parameters specified by the given LDAPConfiguration object.

Parameters:

entry - the LDAPEntry to check

conf - the LDAPConfiguration to use, MUST NOT be null

Returns:

true if the entry is a group, false otherwise

Since:

jcms-5.7

isUserEntry

public static boolean isUserEntry(netscape.ldap.LDAPEntry entry,
                  LDAPConfiguration conf)

Determines if the given LDAPEntry is a user entry according to parameters specified by the given LDAPConfiguration object.

Parameters:

entry - the LDAPEntry to check

conf - the LDAPConfiguration to use, MUST NOT be null

Returns:

true if the entry is a user, false otherwise

Since:

jcms-5.7

checkConnect

public static boolean checkConnect(java.lang.String hostname,
                   java.lang.String port,
                   java.lang.String isSSL,
                   java.lang.String bindDN,
                   java.lang.String bindPassword)

Try a LDAP connection using the given host information and credential.

Parameters:

hostname - the hostname of the ldap server to connect to.

port - the port of the ldap server to connect to.

isSSL - whether the connection should be made using SSL.

bindDN - the Distinguished Name to use to bind to the ldap server to connect to.

bindPassword - the password to use to bind to the ldap server to connect to.

Returns:

true if the connection was successful, false if an error occured

Since:

jcms-5.7

escapeDN

public static java.lang.String escapeDN(java.lang.String name)

Escape certain meta-characters in LDAP DN.

Parameters:

name - the name to escape

Returns:

the escaped name

escapeLDAPSearchFilter

public static final java.lang.String escapeLDAPSearchFilter(java.lang.String filter)

Escape certain meta-characters of a name for use in LDAP search filter.

Parameters:

filter - the filter to escape

Returns:

the escaped filter

extractSAMAccountName

public static java.lang.String extractSAMAccountName(java.lang.String login)

Retrieve the sAMAccountName from the specified login (if possible).

Support login in Down-Level logon name formats (eg DOMAIN\sAMAccountName).

Parameters:

login - a user login

Returns:

the extracted sAMAccountName or the original login, never return null.

getSid

public static java.lang.String getSid(netscape.ldap.LDAPAttribute objectSidAttribute)

Retrieve a string representation of the specified objectSid LDAP attribute which contains a value that specifies the security identifier (SID) of the user.
The SID is a unique value used to identify the user as a security principal.

• MSDN : Object-Sid attribute (Windows)
• MSDN : Well-Known SID Structures

Parameters:

objectSidAttribute - the objectSid as retrieved from

Returns:

a SID string such as "S-1-5-21-2029357233-986718560-1400240716-2155", or null if it could not be extracted

getFirstDomainControllerHostname

public static java.lang.String getFirstDomainControllerHostname(java.lang.String domain)

Retrieve the first domain controler available for query for the specified windows domain.

This methods looks for all SRV record "_ldap._tcp.dc._msdcs.{domain}" and return the first one as defined by priority and weight in all records.

Parameters:

domain - a windows domain name

Returns:

the hostname of the first domain controler available, or null if it could not be found

Since:

jcms-8.0.1

getFirstSrvRecord

public static LDAPUtil.SRVRecord getFirstSrvRecord(java.lang.String srvRecordName)

Retrieve the first SRV record value for the specified SRV record name.

Parameters:

srvRecordName - the name of the SRV record to query, ie "_sip._tcp.example.com."

Returns:

the first SRVRecord in the order of the priority and weight defined in all srv results, or null if none could not be found

Since:

jcms-8.0.1

getSrvRecords

public static java.util.List<LDAPUtil.SRVRecord> getSrvRecords(java.lang.String srvRecordName)

Retrieve all SRV record values for the specified SRV record name.

Parameters:

srvRecordName - the name of the SRV record to query, ie "_sip._tcp.example.com."

Returns:

a SortedSet of all SRVRecord, in the order of the priority and weight defined in all srv results, never return null

Since:

jcms-8.0.1

supportsVLV

public static boolean supportsVLV(netscape.ldap.LDAPConnection lc)

Checks if the remote LDAP server support Virtual List View control.

LDAP v3 MUST have been used prior to binding on the remote LDAP server.

Parameters:

lc - the LDAPConnection already opened on the LDAP server

Returns:

true if remote server supports use of Virtual List View control, false otherwise

Since:

jcms-8.0.1