Retrieving E-mail address from LDAP context object?

[cpjust]

Hi,
I need to modify a function that gets passed a username and returns the E-mail address (from LDAP) associated with that user.

Currently the function has the LDAP Host, Port and RootDN hard-coded in, and I need to remove those and just get the E-mail address from an LDAP context object returned by Tomcat...

I know nothing about web or database programming. I've only done simple stand-alone Java apps so far.

Any help would be much appreciated.

 

[Diancecht]

Can we see a piece of code?

Cheers,
Dian

 

[cpjust]

    private String getEmailAddress (String user) throws QueueException {
    	
    	// Connect to LDAP server.
    	Hashtable<String,String> env = new Hashtable<String, String>(11);
    	env.put(Context.INITIAL_CONTEXT_FACTORY, "com.sun.jndi.ldap.LdapCtxFactory");
    	env.put(Context.PROVIDER_URL, "ldap://"+ldapHost+":"+ldapPort);
    	
    	InitialDirContext ctx = null;
        try {
			ctx = new InitialDirContext(env);
        } catch (Exception e) {
        	throw new QueueException ("Problem connecting to LDAP server:" + e.getLocalizedMessage());
        }
        
		String[] searchAttrs = {ldapSearchAttribs};
		SearchControls constraints1 = new SearchControls();
		constraints1.setSearchScope(SearchControls.SUBTREE_SCOPE);
        constraints1.setCountLimit(0);
        constraints1.setTimeLimit(0);

        constraints1.setReturningAttributes(searchAttrs);
        
        StringBuffer s = new StringBuffer(ldapSearchTmpl);
        int idx = s.toString().indexOf("?");
        s.replace(idx, idx + 1, user);

        // Search for user's email given matching user ID.
        String email = null;
	    try {
	        NamingEnumeration<SearchResult> answer = ctx.search(ldapRootDN, s.toString(), constraints1);
	        
	        while (answer.hasMore()) {
	        	SearchResult ldapResult = answer.next();
                Attributes attrs = ldapResult.getAttributes();
                Attribute emailAttr = attrs.get(ldapSearchAttribs);
                email = (String) emailAttr.get();
	        }
	        ctx.close();

		} catch (Exception e) {
			// default to simply appending the domain if LDAP failed
			RequestQueue.logWarn("getEmailAddress: Unable to query email from LDAP for user: " + user);
			RequestQueue.logWarn("getEmailAddress: ", e);
			RequestQueue.logWarn("getEmailAddress: Appending @" + sDefaultEmailDomain + " instead.");
			email = user + "@" + sDefaultEmailDomain;
		}
		
		return email;
    }

I think I need to use the code from this site:

http://wiki.apache.org/tomcat/HowTo#head-42e95596753a1fa4a4aa396d53010680e3d509b5

and do something like this:

Server server = ServerFactory.getServer();
//Note, this assumes the Container is "Catalina"
Service service = server.findService("Catalina");
Container engine = service.getContainer();
//Note, this assumes your context is "myContext"
JNDIRealm realm = (JNDIRealm) engine.getRealm();

But I'm not sure what to do with the JNDIRealm object after that?

 

[cpjust]

OK, I was able to replace these lines:

env.put(Context.INITIAL_CONTEXT_FACTORY, "com.sun.jndi.ldap.LdapCtxFactory");
env.put(Context.PROVIDER_URL, "ldap://"+ldapHost+":"+ldapPort);

with this:

env.put( Context.INITIAL_CONTEXT_FACTORY, realm.getContextFactory() );
env.put( Context.PROVIDER_URL, realm.getConnectionURL() );

But I still have to replace the ldapRootDN variable (which is currently hard-coded) in this line:

NamingEnumeration<SearchResult> answer = ctx.search([b]ldapRootDN[/b], s.toString(), constraints1);

Any ideas on how to get the RootDN (whatever that means) from the JNDIRealm object?

 

[cpjust]

I tried using the JNDIRealm.getUserPattern() function, but it returns something like:

"uid={0},ou=People,dc=mycompany,dc=com"

instead of the

"dc=mycompany,dc=com"

that was hard-coded before.

 

[Diancecht]

Any help here?

Cheers,
Dian

 

[cpjust]

Thanks. I'm not sure if that will work or not, but I just took the easy way out and simply chopped off the "uid={0}," from the string that JNDIRealm.getUserPattern() returns.

Everything seems to be working now.

 

[Diancecht]

Ah, the old good programmer rule: "If it works, don't touch it"

Cheers,
Dian