AD::LDAP

A small wrapper to Net::LDAP to provide some extended functionality and utility.

AD::LDAP is a small wrapper to the Net::LDAP library. Net::LDAP provides a nice low-level interface for interacting with an LDAP server. AD::LDAP simply wraps that interface and provides some extended functionality through:

• Built-in logging of any communication with the LDAP server
• Easier searching

gem install ad-ldap

First, you need to configure the gem:

AD::LDAP.configure do |config|
  config.host = "127.0.0.1"
  config.port = 389
  config.base = "DC=mydomain, DC=com"
  config.encrytion = :simple_tls
  config.logger = Rails.logger
end

Then you can start running LDAP commands like you would with Net::LDAP.

AD::LDAP.search({
  :base => "DC=Users, DC=mydomain, DC=com",
  :filter => "(name=collin)"
})

Most of the commands have the same syntax as they do in net-ldap:

AD::LDAP.add({
  :dn => "DN=collin, DC=Users, DC=mydomain, DC=com",
  :attributes => { :givenname => "Collin", :lastname => "Redding" }
})

Some are slightly different though, the following:

AD::LDAP.delete("DN=collin, DC=Users, DC=mydomain, DC=com")

is equivalent to:

ldap = Net::LDAP.new
ldap.delete({ :dn => "DN=collin, DC=Users, DC=mydomain, DC=com })`

The biggest feature of AD::LDAP is some of the conventions when using the search method. If I don't provide a filter and have extra keys not supported by net-ldap's search, they are converted to filters automatically:

AD::LDAP.search({ :name__eq => "collin" })

which can be simplified even further:

AD::LDAP.search({ :name => "collin" })

Multiple filters are joined together (Net::LDAP::Filter.join) by default:

AD::LDAP.search({ :name => "collin", :objectclass => "user" })

AD::LDAP won't get in your wa if you need to do something complex:

name_filter = Net::LDAP::Filter.eq("name", "collin*")
class_filter = Net::LDAP::Filter.eq("objectclass", "user")
filters = name_filter | class_filter
AD::LDAP.search({ :filter => filters, :size => 1 })

Finally, because the LDAP names for most fields are not very ruby-ish (are all one word) it's sometimes convenient to setup mappings from a more ruby friendly name to a LDAP name:

AD::LDAP.configure do |config|
  # ...
  config.mapppings = {
    "login" => "samaccountname"
  }
end

with the above config you can then search with the mapping:

AD::LDAP.search({ :login => "jcredding" })

Copyright (c) 2011 Collin Redding and Team Insight

Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:

The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.

THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.