如何向LDAP应用附加搜索查询

Question

我在本地机器上有一个通过SSL的LDAP服务器，并从同一台机器和我的应用程序连接它。下面是连接LDAP服务器的代码：

// Specify the search scope
    final String returnedAtts[] = { ldapSettingModel.getDepartment(),
            ldapSettingModel.getEmailId(), ldapSettingModel.getLocation(),
            ldapSettingModel.getRole(), ldapSettingModel.getDispName() };
    String searchFilter = "(&(objectClass=*)(" + ldapSettingModel.getLoginId() + "=" + user
            + ")" + ldapSettingModel.getFilter() + ")";

    String adPrincipal = user;
    if (CATAppConstants.ACTIVE_DIRECTORY_WIN_2000_ATTR.equals(ldapSettingModel.getLoginId())) {

        // with domain
        if (user.indexOf("\\") > 0) {
            user = user.substring(user.indexOf("\\") + 1);
            searchFilter = "(&(objectClass=*)(" + ldapSettingModel.getLoginId() + "=" + user
                    + ")" + ldapSettingModel.getFilter() + ")";
        } else {
            String[] pDN = ldapSettingModel.getBaseDNName().split(",");
            for (String dn : pDN) {
                if (dn.indexOf("dc=") == 0) {
                    adPrincipal = dn.substring(3) + "\\" + adPrincipal;
                    break;
                }
            }
        }

    }

    // Create the search controls
    SearchControls searchCtls = new SearchControls();
    searchCtls.setReturningAttributes(returnedAtts);
    searchCtls.setSearchScope(SearchControls.SUBTREE_SCOPE);
    String ldapProtocol = "ldap" + (ldapSettingModel.getSslFlg() == 1 ? "s" : "");
    String providerUrl = ldapProtocol + "://" + ldapSettingModel.getHost() + ":"
            + ldapSettingModel.getPortNo();
    Hashtable<String, String> env = new Hashtable<String, String>();
    env.put(Context.INITIAL_CONTEXT_FACTORY, "com.sun.jndi.ldap.LdapCtxFactory");
    env.put(Context.PROVIDER_URL, providerUrl);
    if (ldapSettingModel.getSslFlg() == 1) {
        env.put(Context.SECURITY_PROTOCOL, "ssl");
        env.put("java.naming.ldap.factory.socket",
                "com.shift.tcm.serviceCust.authenticationManagement.CustomSSLSocketFactory");
    }
    env.put(Context.SECURITY_AUTHENTICATION, "simple");
    switch (ldapSettingModel.getLdapType()) {
    case CATAppConstants.DIRECTORY_TYPE_IS_ACTIVE_DIRECTORY:
        env.put(Context.SECURITY_PRINCIPAL, adPrincipal);
        break;
    default:
        env.put(Context.SECURITY_PRINCIPAL, ldapSettingModel.getLoginId() + "=" + user + ","
                + ldapSettingModel.getBaseDNName());
        break;
    }

    env.put(Context.SECURITY_CREDENTIALS, requestPassword);
    env.put("com.sun.jndi.ldap.connect.timeout", CATAppConstants.LDAP_CONNECT_TIMEOUT + "");

    LdapContext ctxGC = null;
    MstUserModel userDetails = null;

    // This is the actual Authentication piece. Will throw
    // javax.naming.AuthenticationException
    // if the users password is not correct. Other exceptions may
    // include IO (server not found) etc.
    ctxGC = new InitialLdapContext(env, null);

    // Now try a simple search and get some attributes as defined in
    // returnedAtts
    NamingEnumeration<SearchResult> answer = ctxGC.search(ldapSettingModel.getBaseDNName(),
            searchFilter, searchCtls);

    userDetails = getUserDetailsFromLDAP(answer, ldapSettingModel, checkDetailsOnly,
            currentRoleName);
    userDetails.setLoginId(user);

在尝试使用ldapsettingmodel.getfilter()添加搜索过滤器之前，一切都很好。通常，如果没有它，搜索筛选器将包含(&(ObjectClass=*)(UID=VAIBHAV))，用于以下LDAP服务器：

我试图允许用户使用ldapsettingmodel.getfilter()添加额外的搜索筛选器，我尝试使用以下方法搜索值：

null

我不确定是否正确地应用了附加的搜索筛选器，但是namingenumeration answery 从我的getUserDetailsFromlDap()方法返回null。如果我做错了什么，请指导我，因为我对LDAP非常陌生。

Answer 1

(&(objectClass=*)(uid=vaibhav)(cn=India))

这没道理。cn是“common name”的缩写。您没有通用名为'India'的用户。

应该是

(&(objectClass=*)(uid=vaibhav)(postalAddress=India))

事实上，当你在寻找用户时，它可能是

(&(objectClass=inetOrgPerson)(uid=vaibhav)(postalAddress=India))