ldap

关于<Java 中 RMI、JNDI、LDAP、JRMP、JMX、JMS那些事儿（上）>看后的一些总结-1

由 谁都会走 提交于 2020-01-23 23:41:58
原文地址： https://www.anquanke.com/post/id/194384#h3-3 1.java rmi 关于rmi客户端和服务端通信的过程，java的方法都实现在rmi服务端，客户端实际上是通过访问rmi注册表拿到stub，然后再通过它调用服务端方法，那么调用方法时要传递参数，参数可以为一般类型，也可以为引用类型，那么如果为引用类型，就能够利用服务端已经有的gaget chain来打server，因为参数实际上是序列化传输的，那么数据到达服务端后必定会经过反序列化。 客户端： RMIClient.java package com.longofo.javarmi; import java.rmi.registry.LocateRegistry; import java.rmi.registry.Registry; public class RMIClient { /** * Java RMI恶意利用demo * * @param args * @throws Exception */ public static void main(String[] args) throws Exception { Registry registry = LocateRegistry.getRegistry("127.0.0.1", 9999); // 获取远程对象的引用

CAS 4 - Not able to retrieve the LDAP groups after successful authentication

由 心不动则不痛 提交于 2020-01-23 17:29:06
问题 I have configured CAS 4 / Spring Security / Active Directory and able to authenticate successfully. But I have difficulty in to retrieve roles and later use that for authorisation. I have the roles available after the authentication in CAS but I want to pass this to the service (web app) so that it can be used to check the authorisation (for eg. hasRole('ROLE_EDITOR') ) I think I am making some configuration mistake in the below beans which I investigating further. I have shown these

Conquering Active Directory's 1000 record limit

由 北战南征 提交于 2020-01-23 13:21:30
问题 PowerShell is capable of pulling list of 1492 records. When I using Python with ldap3 module I'm bumping into 1000 records limit. Please help me change Python code to exceed the limit. PowerShell input: get-aduser -filter * -SearchBase "OU=SMZ USERS,OU=SMZ,OU=EUR,DC=my_dc,DC=COM" | Measure-Object output: Count : 1492 Average : Sum : Maximum : Minimum : Property : import json from ldap3 import Server, \ Connection, \ AUTO_BIND_NO_TLS, \ SUBTREE, \ ALL_ATTRIBUTES def get_ldap_info(u): with

Conquering Active Directory's 1000 record limit

由 妖精的绣舞 提交于 2020-01-23 13:21:07
问题 PowerShell is capable of pulling list of 1492 records. When I using Python with ldap3 module I'm bumping into 1000 records limit. Please help me change Python code to exceed the limit. PowerShell input: get-aduser -filter * -SearchBase "OU=SMZ USERS,OU=SMZ,OU=EUR,DC=my_dc,DC=COM" | Measure-Object output: Count : 1492 Average : Sum : Maximum : Minimum : Property : import json from ldap3 import Server, \ Connection, \ AUTO_BIND_NO_TLS, \ SUBTREE, \ ALL_ATTRIBUTES def get_ldap_info(u): with

Does SearchControls.setTimeLimit() handle read timeout?

由 时间秒杀一切 提交于 2020-01-23 13:05:16
问题 I'm having an issue where an LdapContext.search() against a directory will occasionally hang forever. I tried supplying a SearchControls object for which I've called setTimeLimit(10000), but the issue still happens. Given this, my thought now is that the SearchControls object is being used only as an advisory to the server and won't arrange a timeout on the client side read if no packets come back. I looked around but didn't find any wording in the class documentation to explicitly confirm

ldap_add in php returning “already exists 68” error

由 半腔热情 提交于 2020-01-23 12:59:27
问题 I just cannot figure out what I'm doing wrong, I've scoured the web for answers but cannot find anything that works. Please can someone look at my code and tell me where I'm going wrong? If I comment out "objectclass" I get "server is unwilling to perform 53", if I change the OU to something silly (the $dn) then I get "Naming Violation", if I mash the keyboard and put in random letters for the user's name I still get "already exists" error even though no parts of the things I'm entering exist

ldap_add in php returning “already exists 68” error

由 时光毁灭记忆、已成空白 提交于 2020-01-23 12:59:20
问题 I just cannot figure out what I'm doing wrong, I've scoured the web for answers but cannot find anything that works. Please can someone look at my code and tell me where I'm going wrong? If I comment out "objectclass" I get "server is unwilling to perform 53", if I change the OU to something silly (the $dn) then I get "Naming Violation", if I mash the keyboard and put in random letters for the user's name I still get "already exists" error even though no parts of the things I'm entering exist

How do I search for an object in LDAP based on its dn, in python-ldap?

由 淺唱寂寞╮ 提交于 2020-01-23 01:27:29
问题 I am trying to use e.g. the search_s function to search for an object based on its full distinguished name, but am not finding this to be convenient. For example, search_s('DC=example, DC=com', ldap.SCOPE_SUBTREE, '(CN=Somebody, OU=Department, DC=example, DC=com)') How do I just retrieve one object based on its full LDAP distinguished name? 回答1: Use SCOPE_BASE and a wildcard filter to return only the dn given by the first argument (the filter still has to match that object!) For example,

Can GitoLite and Git Using LDAP and NOT SSH keys

由 徘徊边缘 提交于 2020-01-22 12:52:25
问题 my firm is looking at using git and gitolite but does not want to use SSH keys and work like to use LDAP.. Can this be done?? I never seen this done.. everyplace I have this setup with always used SSH keys 回答1: Yes, you can do it without any issue. You simply need your Apache to do the authentication part (since gitolite is only an authorization layer), and call gitolite-shell instead of git-http-backend , with REMOTE_USER set by Apache (and used by gitolite-shell). See a detailed example in

Can GitoLite and Git Using LDAP and NOT SSH keys

由 不羁岁月 提交于 2020-01-22 12:51:49
问题 my firm is looking at using git and gitolite but does not want to use SSH keys and work like to use LDAP.. Can this be done?? I never seen this done.. everyplace I have this setup with always used SSH keys 回答1: Yes, you can do it without any issue. You simply need your Apache to do the authentication part (since gitolite is only an authorization layer), and call gitolite-shell instead of git-http-backend , with REMOTE_USER set by Apache (and used by gitolite-shell). See a detailed example in
订阅 ldap