无法通过spring LDAP更改openDJ中禁用的ds pwp帐户的值

Question

我正在使用openDJ for LDAP，无法从spring LDAP模板更改openDJ中的ds pwp account disabled属性值。

我已经通过SpringLDAP创建了DirContextOperations类对象。当我使用spring ldap获取ds pwp account disabled属性的值时，它是给定的。但它不允许通过spring ldap更新ds pwp account disabled属性值。您能帮助我如何通过spring ldap更新ds pwp帐户禁用属性值吗。我在google上读了很多文章，可能是通过springldap修改opendj中的权限问题，也可能是其他问题。

我正在分享一些代码来识别我如何使用开放DJ使用Spring ldap-

私有LdapTemboard ldapTemboard；

ErrorDTO createAccountIfNotExists(Account account){

    DirContextAdapter context = new DirContextAdapter(dn);
    context.setAttributeValues(OBJECTCLASS, new String[] { TOP, USERACCOUNTS });
    mapToContext(account, context);
    try {
        ldapTemplate.bind(context);

    } catch (Exception e) {
    }
    return error;
}

public LdapTemplate getLdapTemplate() {
    return ldapTemplate;
}

public void setLdapTemplate(LdapTemplate ldapTemplate) {
    this.ldapTemplate = ldapTemplate;
}

void mapToContext(Account account, DirContextOperations context) {
    context.setAttributeValue("cn", account.getFirstName());
    context.setAttributeValue("sn", account.getLastName());
    context.setAttributeValue("x-user-id", account.getUserId());
    context.setAttributeValue("mail", account.getEmail());
    context.setAttributeValue("givenname", account.getFirstName());
    context.setAttributeValue("mobile", account.getMobilePhone());
    context.setAttributeValue("telephonenumber", account.getBusinessPhone());
    context.setAttributeValue("title", account.getJobTitle());
    context.setAttributeValue("x-incident-ref", account.getIncidentRef());
    context.setAttributeValue("x-client-category", account.getClientCategory());
    context.setAttributeValue("x-organization", account.getOrganization());
    context.setAttributeValue("facsimiletelephonenumber", account.getFax());
    context.setAttributeValue("x-bureau", account.getBureau());
    context.setAttributeValue("x-company", account.getCompany());
    context.setAttributeValue("ds-pwp-account-disabled", account.getEnabled());
    if (account.getAccountCode() != null) {
        context.setAttributeValue("x-account-code", account.getAccountCode());
        context.setAttributeValue("uid", account.getAccountCode() + "#" + account.getUserId());
    } else {
        context.setAttributeValue("uid", account.getUserId());
    }

}

下面给出了错误-组织。springframework。ldap。InvalidateTributeValueException：“ds pwp帐户已禁用”属性值格式错误；嵌套的异常是javax。命名。目录InvalidateTributeValueException：“ds pwp帐户已禁用”属性值格式错误；剩余名称“uid=coy#user8，ou=User Accounts”

Answer 1

正如我所知如果

ds-pwp-account-disabled

所以试一试，不添加这个属性是用户启用的。

if(!account.getEnabled()){ //suppose that it's returning a boolean
  context.setAttributeValue("ds-pwp-account-disabled", "true");
}

Answer 2

ds pwp account disabled属性具有LDAP语法布尔值。OpenDJ服务器唯一接受的值是“true”和“false”。我不是Spring LDAP方面的专家，但如果属性的语法未知，我怀疑该库是否能正确地将Java布尔值转换为正确的LDAP值。