通过Quercus使用JAVA更新LDAP

2 周，2 日 Questions & Answers 223

我正在尝试使用java库通过Quercus中的portlet更新密码。下面是我正在使用的一些代码：

import javax.naming.Context;
import javax.naming.InitialContext;
import javax.naming.directory.DirContext;
import javax.naming.directory.InitialDirContext;
import javax.naming.directory.BasicAttributes;
import javax.naming.directory.BasicAttribute;
import javax.naming.directory.SearchControls;
import javax.sql.DataSource;
import java.util.Hashtable;

$uname = isset($_POST['uname'])?$_POST['uname']:'';
$pass1 = isset($_POST['pass1'])?$_POST['pass1']:'';

//connecto to LDAP
$ldapADURL = "ldaps://poplar.example.edu:636";
$ldapEnv = new HashTable();
$ldapEnv->put("java.naming.factory.initial","com.sun.jndi.ldap.LdapCtxFactory");
$ldapEnv->put("java.naming.provider.url", $ldapADURL);
$ldapEnv->put("java.naming.security.protocal", "ssl");
$ldapEnv->put("java.naming.referral", "follow");
$ldapEnv->put("java.naming.security.authentication", "simple");
$ldapEnv->put("java.naming.security.principal", "ADUser");
$ldapEnv->put("java.naming.security.credentials", "P@ssw0rd");
$ADCtx = new InitialDirContext($ldapEnv);

//query the vault for our user
$ctlsAD = new SearchControls();
$attribsAD = array("sAMAccountName","DN","title","extensionAttribute14","extensionAttribute8","cn");
$ctlsAD->setReturningAttributes($attribsAD);
$ctlsAD->setSearchScope(2);
$filter="(sAMAccountName=" . $uname . ")";
$resultAD=$ADCtx->search("DC=conncoll,DC=edu",$filter,$ctlsAD);

if ($resultAD->hasMore()) {
    $item = $resultAD->next();
    $resultADAttribs = $item->getAttributes();
    $rsTitle = str_replace("title: ","",$resultADAttribs->get("title"));
    $rsAttrib14 = str_replace("extensionAttribute14: ","",$resultADAttribs->get("extensionAttribute14"));
    $rsAttrib8 = str_replace("extensionAttribute8: ","",$resultADAttribs->get("extensionAttribute8"));
    $rsUname = str_replace("sAMAccountName: ","",$resultADAttribs->get("sAMAccountName"));
    $rsDN = str_replace("dn: ","",$resultADAttribs->get("DN"));
}

echo ( '<br />' . $rsTitle . '<br />' . $rsAttrib14 . '<br />' . $rsAttrib8 . '<br />' . $rsUname . '<br />' . $rsDN . '<br />');

if (isset($rsUname)/*ccLDAPCheckUser($uname)*/){
    $ADCtx->addToEnvironment("java.naming.security.principal","OtherADUser");
    $ADCtx->addToEnvironment("java.naming.security.credentials","0therP@ssw0rd");
    //$resultAD2 = $ADCtx->search("DC=conncoll,DC=edu",$filter,$ctlsAD);
    $pass2 = "\"" . $pass1 . "\"";
    $newPass = mb_convert_encoding($pass2, "UTF-16LE");
    $ADNewPass = new BasicAttribute("userpassword",$newPass);
    $ADNewAttrib8 = new BasicAttribute("extensionAttribute8",$rsAttrib8);
    $ADAttributes = new BasicAttributes();
    $ADAttributes->put($ADNewPass);
    $ADAttributes->put($ADNewAttrib8);
    $ADCtx->modifyAttributes("sAMAccountName=" . $rsUname,2,$ADAttributes);
}

运行此代码后，LDAP服务器出现以下错误： javax。命名。目录初始化上下文。modifyAttributes:[LDAP:错误代码1-000020D6:SvcErr:DSID-031007DB，问题5012（目录错误），数据0]

所以我想知道一些事情。第一个是modifyAttributes函数调用的语法是否正确。我用dc=example尝试过，dc=edu附加到查询字符串上，但没有成功。第一个查询正确返回结果，因此我确信我正在连接到AD服务器，并且我已经让人验证执行代码的JVM在其存储中是否有有效的最新证书

这个错误使我相信我需要为我试图更新的对象指定的确切位置，而我没有这个位置

谢谢你对这个问题的想法

Python中文网

有 Java 编程相关的问题?

通过Quercus使用JAVA更新LDAP

共 (1) 个答案

# 1 楼答案