LDAP

From UA Wiki

Jump to: navigation, search
Addressbook.jpg


The UA keeps information about their employees (such as e-mail addresses and phone numbers) in an MS Active Directory structure. This makes it easy for Microsoft users to access this information, but leaves users of other operating system out in the cold.

Luckily, part of the information is being made available through the standard LDAP protocol. One can use this access to check username and passwords against the UA's database (such as done on this wiki, for example), or simply look up information about other employees. This article explains how to do that.

Note: Unfortunately, the UA LDAP servers are configured in such a way that they only allow unencrypted communication. This makes it necessary to restrict LDAP communication to campus premises. Hence, when trying to connect, make sure that you are physically on the campus or that you tunnel your traffic to the campus through VPN.

Contents

Groupware clients

Mozilla Thunderbird

Thunderbird-ldap1.png


Mozilla Thunderbird configuration for the UA's LDAP server.
Note: It is also possible to leave OU=Employees out of the DN. You'll then get access to more LDAP entries, for example referring to students, guests, and technical accounts.

Searching the UA's LDAP server with Mozilla Thunderbird.

Now Tools->Addressbook should contain the entry 'UA LDAP' and you can go ahead and look up information on all the employees of the UA and more.


Microsoft Entourage for Mac

Note: It is also possible to leave OU=Employees out of the DN. You'll then get access to more LDAP entries, for example referring to students, guests, and technical accounts.

KAddressBook

KDE's KAddressBook configuration for the UA's LDAP server.

Go to Settings->Configure Addressbook...->LDAP Lookup and add a host with following configuration:

Note: It is also possible to leave OU=Employees out of the DN. You'll then get access to more LDAP entries, for example referring to students, guests, and technical accounts.

Searching the UA's LDAP server with KAddressBook.

Now, you'll have an 'LDAP lookup' button which gives you access to the search interface.

LDAP browsers

LDAP browsers can be useful for getting the big picture of an LDAP directory structure. It enables you to click through the whole structure, and inspect every item of every entry. It can be quite interesting to find out what LDAP know about you!

LdapMiner

[1]

Luma

Luma is a LDAP browser and editor based on the (cross-platform) interface kit Qt.

JXplorer

JXplorer is a GUI for browsing and editing LDAP settings any any particular server; because it's Java-based, it run in Windows, Mac OS, Linux and any other Java-supporting operating system.

JXplorer's configuration.
JXplorer in action.

You can also save these options as a template for later use.

LDAP Browser\Editor

LDAP Browser\Editor is a nice and ancient Java-based LDAP browser.

Because it is so old, LDAP Browser\Editor's website has actually disappeared, but the tool itself is still quite popular and circulates on the web; search for Browser282b2.tar.gz and pick a download location.

LDAP Browser\Editor's configuration interface.

The configuration for a session on the UA's LDAP server is:

Browsing the UA's LDAP server with LDAP Browser\Editor.

If everything has been entered correctly, you should be greeted with a tree-structured overview over the information available on the server.

More

More browsers and editors are to be found in the FAQ's of openldap.

External links

Personal tools
Namespaces
Variants
Actions
Navigation
Toolbox