Apache Directory Studio is a visual LDAP browser and LDIF editor. We use it when interactive attribute inspection, binary value viewing, LDIF import/export, or quick object browsing is faster than repeated command-line queries.
Connection values:
Host: dc01.ootw.local
Port: 389
Encryption: StartTLS
Bind: OOTW\student
Password: student
Base DN: DC=ootw,DC=local
LDAPS connection:
Host: dc01.ootw.local
Port: 636
Encryption: SSL
Bind: OOTW\student
Password: student
Base DN: DC=ootw,DC=local
Kerberos JVM options:
-Djava.security.krb5.conf=/etc/krb5.conf
-Djavax.security.auth.useSubjectCredsOnly=false
-Dsun.security.krb5.debug=true
Start with an existing TGT:
kinit student@OOTW.LOCAL
klist
ApacheDirectoryStudio
Search filters:
(&(objectCategory=person)(objectClass=user))
(objectCategory=computer)
(objectClass=group)
(servicePrincipalName=*)
(msDS-AllowedToActOnBehalfOfOtherIdentity=*)
(sIDHistory=*)
Attributes to inspect:
servicePrincipalName
objectSid
objectGUID
memberOf
member
userAccountControl
msDS-KeyCredentialLink
msDS-AllowedToActOnBehalfOfOtherIdentity
msDS-ManagedPassword
nTSecurityDescriptor
LDIF import from Windows:
ldifde -i -f change.ldif
LDIF import from Linux:
ldapmodify -H ldap://dc01.ootw.local -D "OOTW\\student" -w 'student' -f change.ldif
Add SPN LDIF:
dn: CN=svc_web,OU=Service Accounts,OU=OOTW Lab,DC=ootw,DC=local
changetype: modify
add: servicePrincipalName
servicePrincipalName: HTTP/dc01.ootw.local
-
Add group member LDIF:
dn: CN=ACL Operators,OU=Groups,OU=OOTW Lab,DC=ootw,DC=local
changetype: modify
add: member
member: CN=student,CN=Users,DC=ootw,DC=local