Apache Directory Studio创建组织机构树

Apache Directory Studio创建组织机构树

准备

了解和介绍LDAP的相关知识，一个非常棒的有关介绍LDAP的网站: www.zytrax.com

工具准备

下载Apache Directory Studio

新建

新建ApachDS Server

默认的，ApacheDS给我们新建了两个分区(partition),我们新增一个分区dc=opensource,dc=com*

即domain,这个是必须先创建的,即使是导入一个完整的LDIF文件，也是要先创建domain:

dn: dc=opensource,dc=com objectclass: top objectclass: domain dc: opensource

新建连接

默认用户名/密码: uid=admin,ou=system/secret

新建树

最后附上LDIF文件：

version: 1 dn: cn=Jhon Doe,ou=hr,ou=account,dc=opensource,dc=com objectClass: inetOrgPerson objectClass: top objectClass: person objectClass: organizationalPerson cn: Jhon Doe sn: Doe telephoneNumber: 18746789098 title: hr uid: Jhon userPassword:: e1NIQX1BUnlVWHpET0xMcjhSUzg1aEE4Q1ZwTXpuRUk9 dn: cn=Tom Gor,ou=develop,ou=account,dc=opensource,dc=com objectClass: inetOrgPerson objectClass: top objectClass: person objectClass: organizationalPerson cn: Tom Gor sn: Gor uid: Tom userPassword:: e1NIQX1oby8rNUZCaVhTQU9zRFl5bGwwSnZoQ2VTQVU9 dn: ou=hr,ou=account,dc=opensource,dc=com objectClass: top objectClass: organizationalUnit ou: hr dn: ou=account,dc=opensource,dc=com objectClass: top objectClass: organizationalUnit ou: account dn: ou=develop,ou=account,dc=opensource,dc=com objectClass: top objectClass: organizationalUnit ou: develop dn: cn=ROLE_USER,ou=roles,dc=opensource,dc=com objectClass: top objectClass: groupOfUniqueNames cn: ROLE_USER uniqueMember: cn=Tom Gor,ou=develop,ou=account,dc=opensource,dc=com dn: ou=roles,dc=opensource,dc=com objectClass: top objectClass: organizationalUnit ou: roles dn: cn=Tony Dude,ou=hr,ou=account,dc=opensource,dc=com objectClass: inetOrgPerson objectClass: top objectClass: person objectClass: organizationalPerson cn: Tony Dude sn: Tony uid: tony userPassword:: e1NIQX0vcWYyVi9WcUtrU05wOVMxTmU1ZUo1eXZQWm89 dn: cn=ROLE_ADMIN,ou=roles,dc=opensource,dc=com objectClass: top objectClass: groupOfUniqueNames cn: ROLE_ADMIN uniqueMember: cn=Jhon Doe,ou=hr,ou=account,dc=opensource,dc=com uniqueMember: cn=Tony Dude,ou=hr,ou=account,dc=opensource,dc=com dn: dc=opensource,dc=com objectclass: top objectclass: domain dc: opensource

注意：如果手动写LDIF时,一定要先保证先创建父节点，然后才创建子节点，即，如分创建ou=hr节点，必先保证ou=account节点先被创建