如何在 J2SE 中使用 Novell eDirectory 服务?
如何在 J2SE 中使用 Novell eDirectory 服务? JNDI 可以与 eDirectory 一起使用吗? 我可以使用哪些资源来了解您建议的一个或多个图书馆?
我现在只想尝试通过 LDAP 检索信息,如果我按照我想要的方式工作,我以后可能需要能够修改对象。
谢谢!
How can I work with Novell eDirectory services in J2SE? Will JNDI work with eDirectory? What are some resources I can use to learn about whatever library or libraries you suggest?
I just want to play around with retrieving information via LDAP for right now, and if I get things working the way I want, I will probably need to be able to modify objects later on.
Thanks!
如果你对这篇内容有疑问,欢迎到本站社区发帖提问 参与讨论,获取更多帮助,或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱,如果其他用户或者作者回复了您的评论,将不能在第一时间通知您!
发布评论
评论(3)
JNDI 应该与 eDirectory 一起使用......
JNDI should work with eDirectory.....
尝试; http://developer.novell.com/wiki/index.php/Jldap 和 http://developer.novell.com/wiki/index.php/Novell_LDAP_Extended_Library< /a>
已成功将其与 OpenLDAP 一起使用,并且对于 eDirectory 也应该足够了。
try; http://developer.novell.com/wiki/index.php/Jldap and http://developer.novell.com/wiki/index.php/Novell_LDAP_Extended_Library
Used it successfully with OpenLDAP and should suffice for eDirectory as well.
您想要使用的任何 LDAP 接口都应该可以在 eDirectory 上正常工作。
请注意,LDAP 服务器的配置可能不允许使用明文密码,因此需要通过 SSL(已将证书导入密钥库)或通过 TLS(动态检索树 CA 的公钥)绑定到端口 636 。
如果您拥有 eDirectory 服务器的管理访问权限,则可以轻松更改它,但最好还是确认您可以使其通过 SSL/TLS(又名 LDAPS)运行。
如果您确实需要它,您可以向管理员请求一台仅包含某些测试分区副本的服务器(因此在其视图中没有真实的用户数据),并通过明文对其进行测试。
在 eDirectory 中添加分区的新副本、分割或合并分区非常容易,而且所有操作都可以实时完成。
同样,在一台服务器上托管多个分区的副本也非常容易。 (官方的限制是,对树中的数量或分区或服务器上的副本没有限制,但在旧版本(8.x 之前)中曾经是 256)
如果允许您访问 eDirectory 服务器,则想要请求访问 Dstrace(此版本的多个版本,请参阅 Dstrace 的许多面孔)。 有一个Web界面(服务器:Netware上为8008,Windows上为8010,Unix/Linux上通常为8028)或其他接口。 如果启用 LDAP 跟踪选项(并关闭所有其他选项),您可以相当完整地调试服务器端发生的情况。 查看错误、沟通或缺乏沟通等。
Any LDAP interface you want to use should work fine against eDirectory.
Be aware that the configuration of the LDAP server may not allow clear text passwords, thus a bind to port 636 via SSL (Where you have the certificate imported into the keystore already) or via TLS (retrieve the tree CA's public key on the fly).
If you have administrative access to the eDirectory server, you can easily change that, but still best to confirm that you can get it to work over SSL/TLS (aka LDAPS).
If you really need it, you can ask the admins for a server with only a replica of some test partition (and thus no real user data in its view) and test via cleartext against that.
It is very easy in eDirectory to add a new replica of a partition, carve off or merge a partition, and all can be done live.
It is similarly very easy to host replicas of many partitions on one server. (The official limit is, no limit on the number or partitions in a tree, or replicas on a server, but it used to be 256 in older versions (before 8.x) )
If you are allowed access to the eDirectory server, you want to to ask for access to Dstrace (several versions of this, see Many Faces of Dstrace). There is a web interface (server:8008 on Netware, 8010 on Windows, 8028 on Unix/Linux usually) or other interfaces. If you enable the LDAP trace option (and turn off all the others) you can fairly completely debug what is going on at the server side. See the errors, the communication, or lack thereof and so on.