ldaptive | extensible Java API for interacting with LDAP servers | Identity Management library

by vt-middleware Java Version: v2.1.2 License: No License

X-Ray Key Features Code Snippets(1)Community Discussions(6)Vulnerabilities Install Support

kandi X-RAY | ldaptive Summary

ldaptive is a Java library typically used in Security, Identity Management applications. ldaptive has no bugs, it has no vulnerabilities, it has build file available and it has low support. You can download it from GitHub, Maven.

This project is dual licensed under both the LGPL and Apache 2.

Support

Quality

Security

License

Reuse

Support

ldaptive has a low active ecosystem.

It has 56 star(s) with 25 fork(s). There are 11 watchers for this library.

It had no major release in the last 12 months.

There are 7 open issues and 127 have been closed. On average issues are closed in 191 days. There are 2 open pull requests and 0 closed requests.

It has a neutral sentiment in the developer community.

The latest version of ldaptive is v2.1.2

Quality

ldaptive has 0 bugs and 0 code smells.

Security

ldaptive has no vulnerabilities reported, and its dependent libraries have no vulnerabilities reported.

ldaptive code analysis shows 0 unresolved vulnerabilities.

There are 0 security hotspots that need review.

License

ldaptive does not have a standard license declared.

Check the repository for any license declaration and review the terms closely.

Without a license, all rights are reserved, and you cannot use the library in your applications.

Reuse

ldaptive releases are available to install and integrate.

Deployable package is available in Maven.

Build file is available. You can build the component from source.

Installation instructions are not available. Examples and code snippets are available.

Top functions reviewed by kandi - BETA

kandi has reviewed ldaptive and discovered the below as its top functions. This is intended to give you an instant insight into ldaptive implemented functionality, and help decide if they suit your requirements.

Parses the filter string
Read a map of substring data from the supplied character buffer
Parses an extensible filter
Parse an assertion value
Launch a profile
Shuts down the given worker group
Get the number of open connections to the specified host
Attempts to reconnect the channel
Sends an exception notification to all pending responses
Commits the roles
Creates a copy of the given search operation
Performs a login
Initialize bind request
Parse the bean definition
This method reads all qd strings from the supplied buffer
Returns a string representation of this object
Writes the given handle to the ldap server
Initializes the default transcoders
Creates a new Response control from the given data
Performs the login
Parse a string of RDNs
Closes this connection
Performs a bind on the given request
Login
Parses the internal bean definition
Initializes the properties cache

Get all kandi verified functions for this library.

ldaptive Key Features

No Key Features are available at this moment for ldaptive.

ldaptive Examples and Code Snippets

Ldaptive ,Building

Java

Lines of Code : 3

License : No License

Copy

git clone git@github.com:vt-middleware/ldaptive.git
cd ldaptive
./mvn_cmd package

Community Discussions

Trending Discussions on ldaptive

CAS and LDAP custom integration

How to configure ldaptive to use connection pooling (jaas)

CAS Server 4.0 Multiple ldap servers settings

Enforce Active Directory password history policy using ldaptive on password reset

Apereo CAS use NTLM instead of Kerberos

StreamSets upgrade and LDAP authentication

QUESTION

CAS and LDAP custom integration

Asked 2019-Oct-21 at 15:44

I'm going to describe an odd situation.. We have a product with a properly working CAS and LDAP integration. The problem is that not all of our clients use LDAP, which is fine, EXCEPT that the integration is still in place and so CAS is actively attempting to connect to the ldap server (and failing of course). It attempts to connect every five minutes, which creates a very bloated Tomcat log. My goal is to prevent it from attempting to connect without gutting the integration. I'm hoping someone knows of a way to prevent or manage when/how CAS attempts to connect to the defined LDAP server.

I've attempted to remove key components of the CAS property file as well as the deployerConfigContext.xml but the integration has too many dependencies, and I haven't been successful.

Here are some of the properties that are used in the cas.properties file. Setting the ldap.auth.enabled to false allows our integration to not use LDAP when authenticating the user but doesn't prevent CAS from attempting to connect to the LDAP server:

...

ANSWER

Answered 2019-Oct-14 at 23:10

I toggle between JDBC and LDAP/AD Handlers. Ensure that you comment out your ldap handler under:

deployerConfigContext.xml xpath:

/beans

/bean[class=org.jasig.cas.authentication.AuthenticationManagerImpl]

/property[name=authenticationHandlers]

/list/

Source https://stackoverflow.com/questions/58307069

QUESTION

How to configure ldaptive to use connection pooling (jaas)

Asked 2019-Sep-14 at 13:54

We have an application that uses ldap to authenticate users. We are using https://www.ldaptive.org/ as our ldap client and we are configuring it via a jaas login configuration file.

Here is an example our our jaas login configuration file:

...

ANSWER

Answered 2019-Sep-14 at 13:54

Note that the ldaptive docs are transitioning for version 2. That's why the documentation seems out of sync. The version 1 docs can be found at http://www.ldaptive.org/v1/

The cause of your problem is this bug: https://bugs.openjdk.java.net/browse/JDK-8217606

The solution for now is to use the UnboundID provider. Update your JAAS config and add the ldaptive-unboundid and unboundid jars to your classpath.

Source https://stackoverflow.com/questions/57914310

QUESTION

CAS Server 4.0 Multiple ldap servers settings

Asked 2018-Nov-13 at 09:10

I'm implementing CAS Server 4.0 with two LDAP Servers, Below I have given my code for single LDAP Setting, Please help me to add Two LDAP Servers like ldap://01.xx.xx.xx, ldap://02.xx.xx.xx in CAS Server Settings.

deployerConfigContext.xml

...

ANSWER

Answered 2018-Nov-13 at 09:10

If you just need multiple LDAP servers for redundancy, you may be able to do this:

Source https://stackoverflow.com/questions/53104766

QUESTION

Enforce Active Directory password history policy using ldaptive on password reset

Asked 2018-Mar-29 at 19:32

I'm using Java ldaptive library to communicate with Active Directory via LDAP protocol. My problem is as follows: I need to have password reset feature, honoring password history and complexity requirements, but ignoring minimum password age rule. I perform password reset using admin account:

...

ANSWER

Answered 2018-Mar-29 at 19:32

The documentation is wrong. You are not going to be able to make it work like that. The Minimum Password Age rule will be honored and you cannot override it through code.

Note that in Active Directory, unlike a typical LDAP server, it does not enforce password policy like you think it would. Password policy is managed by Group Policy and enforced in Windows, specifically by the Windows LSASS.exe process.

Since you configure Password policy via Group Policy. Those settings are written directly to the Security Hive on the Domain Controller. This is where LSASS reads them from. The only time those settings are overwritten is when you change the password directly from ADUC.

Other than AD tool, you would have to write a password filter .dll that runs within the LSASS process:

Custom Password Filters https://blogs.technet.microsoft.com/tristank/2005/07/18/custom-password-filters/

Password Filters https://msdn.microsoft.com/en-us/library/windows/desktop/ms721882(v=vs.85).aspx

This information was given to me by a Microsoft PSS Field Engineer when I brought this question up to him.

Source https://stackoverflow.com/questions/49533301

QUESTION

Apereo CAS use NTLM instead of Kerberos

Asked 2017-Nov-24 at 12:20

I use Apereo Cas 5.1.1 (Central Authentication Service) for such "architecture":

...

ANSWER

Answered 2017-Nov-24 at 12:20

Is dev.domain.com a CNAME? If it is, change it into an A record. Many web browsers, particularly Chrome and Firefox, don't always work well with Kerberos when the FQDN portion of the service instance is a CNAME. When Kerberos fails, NTLM is the fallback under many (but not all) scenarios.

Source https://stackoverflow.com/questions/46395024

QUESTION

StreamSets upgrade and LDAP authentication

Asked 2017-Mar-17 at 19:45

Just upgraded StreamSets from 2.1.0.2 to 2.4.0.0 using Cloudera Manager (5.8.2). I can't login anymore into StreamSets - I get "login failed". The new version seem to be using a different LDAP lookup method.

My logs BEFORE Update looks as below:

Mar 15, 10:42:07.799 AM INFO com.streamsets.datacollector.http.LdapLoginModule
Searching for users with filter: '(&(objectClass={0})({1}={2}))' from base dn: DC=myComp,DC=Statistics,DC=ComQ,DC=uk Mar 15, 10:42:07.826 AM INFO com.streamsets.datacollector.http.LdapLoginModule
Found user?: true Mar 15, 10:42:07.826 AM INFO com.streamsets.datacollector.http.LdapLoginModule
Attempting authentication: CN=UserDV,OU=London,OU=ComQ,DC=ComQ,DC=Statistics,DC=comQ,DC=uk

My logs AFTER Update looks as below:

Mar 15, 11:10:21.406 AM INFO com.streamsets.datacollector.http.LdapLoginModule
Accessing LDAP Server: ldaps://comQ.statisticsxxx.com:3269 startTLS: false Mar 15, 11:10:22.086 AM INFO org.ldaptive.auth.SearchDnResolver
search for user=[org.ldaptive.auth.User@1573608120::identifier= userdv, context=null] failed using filter=[org.ldaptive.SearchFilter@1129802876::filter=(&(objectClass=user)(uid={user})), parameters={context=null, user=userdv}] Mar 15, 11:10:22.087 AM INFO com.streamsets.datacollector.http.LdapLoginModule
Found user?: false Mar 15, 11:10:22.087 AM ERROR com.streamsets.datacollector.http.LdapLoginModule
Result code: null - DN cannot be null

...

ANSWER

Answered 2017-Mar-17 at 19:44

You should change ldap.userFilter in Cloudera Manager from uid={user} to name={user}

Source https://stackoverflow.com/questions/42813696

Community Discussions, Code Snippets contain sources that include Stack Exchange Network

Vulnerabilities

No vulnerabilities reported

Install ldaptive

You can download it from GitHub, Maven.
You can use ldaptive like any standard Java library. Please include the the jar files in your classpath. You can also use any IDE and you can run and debug the ldaptive component as you would do with any other Java program. Best practice is to use a build tool that supports dependency management such as Maven or Gradle. For Maven installation, please refer maven.apache.org. For Gradle installation, please refer gradle.org .