获取AD域中的组织单位域用户，并且对用户大于1000个的进行分批读取

package hz;

import java.io.IOException;

import java.util.ArrayList;

import java.util.HashMap;

import java.util.Hashtable;

import java.util.List;

import java.util.Map;

import javax.naming.Context;

import javax.naming.NamingEnumeration;

import javax.naming.NamingException;

import javax.naming.directory.Attribute;

import javax.naming.directory.Attributes;

import javax.naming.directory.SearchControls;

import javax.naming.directory.SearchResult;

import javax.naming.ldap.Control;

import javax.naming.ldap.InitialLdapContext;

import javax.naming.ldap.LdapContext;

import javax.naming.ldap.PagedResultsControl;

import javax.naming.ldap.PagedResultsResponseControl;

import net.devin.db.DbMapUtil;

public class AdUserSys {

public AdUserSys() {

}

/**

*

* 方法描述：获取组织单位的结构

* @param: host AD服务器IP，prot AD服务器端口 adminName 用户名 adminPassword 密码

* @return:

* @version: 1.0

*/

public List<Map<String,String>> getUnit(String host,String port,String adminName,String adminPassword,String ou,String dc,String dc_houzui){

String company = "";

// String host = "192.168.0.14"; // AD服务器

// String port = "389"; // 端口

List<Map<String,String>> li=new ArrayList<Map<String, String>>();

List<Map<String,String>> list=new ArrayList<Map<String, String>>();

Map<String, String> namerow=new HashMap<String, String>();

String url = new String("ldap://" + host + ":" + port);

Hashtable HashEnv = new Hashtable();

// String adminName = "shejiguanli\\administrator"; // 注意用户名的写法：domain\User

// String adminPassword = "abc123!"; // 密码

HashEnv.put(Context.SECURITY_AUTHENTICATION, "simple"); // LDAP访问安全级别

HashEnv.put(Context.SECURITY_PRINCIPAL, adminName); // AD User

HashEnv.put(Context.SECURITY_CREDENTIALS, adminPassword); // AD Password

HashEnv.put(Context.INITIAL_CONTEXT_FACTORY,"com.sun.jndi.ldap.LdapCtxFactory"); // LDAP工厂类

HashEnv.put(Context.PROVIDER_URL, url);

//HashEnv.put(Context.BATCHSIZE, "2500");

try{

LdapContext ctx = new InitialLdapContext(HashEnv, null);

// 域节点

String OU=hz.dtable.util.ParseUtil.convert2Null(ou);

String searchBase = "DC="+dc+",DC="+dc_houzui;

if(OU.length() >0){

searchBase = "OU="+OU+",DC="+dc+",DC="+dc_houzui;

}

// LDAP搜索过滤器类

String searchFilter = "objectClass=organizationalUnit";//获取帐号

// 搜索控制器

SearchControls searchCtls = new SearchControls(); // Create the

// 创建搜索控制器

searchCtls.setSearchScope(SearchControls.SUBTREE_SCOPE);

// 定制返回属性

String[] returnedAtts = { "uSNCreated","name","instanceType","ou"};

searchCtls.setReturningAttributes(returnedAtts); // 设置返回属性集

// 根据设置的域节点、过滤器类和搜索控制器搜索LDAP得到结果

//objectClass=organizationalUnit 获取用户单位

NamingEnumeration answe1=ctx.search(searchBase, searchFilter, searchCtls);

int totalResults = 0;

//有字段（uSNCreated：这个字段是对象创建时系统自动分配的创建序列号，并且是无符整型）可用来做uid或gid ， 这是对这个字段的描述以及别人的应用

while(answe1.hasMoreElements()){

SearchResult sr = (SearchResult) answe1.next();// 得到符合搜索条件的DN

String dn=sr.getName();

Attributes Attrs = sr.getAttributes();// 得到符合条件的属性集

if (Attrs != null) {

Map<String, String> row=new HashMap<String, String>();

for (NamingEnumeration ne = Attrs.getAll(); ne.hasMore();) {

Attribute Attr = (Attribute) ne.next();// 得到下一个属性

///System.out.println(" AttributeID=属性名："+ Attr.getID().toString());

// 读取属性值

for (NamingEnumeration e = Attr.getAll(); e.hasMore(); totalResults++) {

company =e.next().toString();

//System.out.println("AttributeValues=属性值：" + company);

}

row.put(Attr.getID().toString(), company+"".trim());

row.put("dn", dn);

}

namerow.put(dn+"".trim(), row.get("uSNCreated"));

li.add(row);

}

}

namerow.put("huizhisys","-1000");

ctx.close();

//System.out.println(namerow.toString());

for(int i=0;i<li.size();i++){

Map rows=li.get(i);

String uSNCreated=DbMapUtil.getValue(rows, "uSNCreated", "0");

String distinguishedName=DbMapUtil.getValue(rows, "distinguishedName", "");

String dn=DbMapUtil.getValue(rows, "dn", ""); //如果DN等于空那么默认为顶节点

String name=DbMapUtil.getValue(rows, "name", ""); //如果DN等于空那么默认为顶节点

if(dn.length() ==0){

rows.put("parentid", "0");

}else{

if(("OU="+name).equalsIgnoreCase(dn)){

//System.out.println(namerow.get("huizhisys"));

rows.put("parentid",namerow.get("huizhisys"));

}else{

dn=dn.replace("OU="+name+",", "");

rows.put("parentid",namerow.get(dn));

}

}

System.out.println(rows.toString());

list.add(rows);

}

return list;

}catch(Exception e){

e.printStackTrace();

return null;

}

}

/**

*

* 方法描述:获取AD域所有的用户 并进行分页。如果用户不大于1000个那么可以不用部分，如果大于1000 不分页 只能读取1000个

* @param:

* @return:

* @version: 1.0

*/

public List<Map<String,String>> getADInfo(String host,String port,String adminName,

String adminPassword,String ou,String dc,String dc_houzui,Map<String,String> usermap) {

String company = "";

List<Map<String,String>> li=new ArrayList<Map<String, String>>();

List<Map<String,String>> list=new ArrayList<Map<String, String>>();

Map<String, String> namerow=new HashMap<String, String>();

String url = new String("ldap://" + host + ":" + port);

Hashtable HashEnv = new Hashtable();

HashEnv.put(Context.SECURITY_AUTHENTICATION, "simple"); // LDAP访问安全级别

HashEnv.put(Context.SECURITY_PRINCIPAL, adminName); // AD User

HashEnv.put(Context.SECURITY_CREDENTIALS, adminPassword); // AD Password

HashEnv.put(Context.INITIAL_CONTEXT_FACTORY,"com.sun.jndi.ldap.LdapCtxFactory"); // LDAP工厂类

HashEnv.put(Context.PROVIDER_URL, url);

// HashEnv.put(Context.BATCHSIZE, 2500+"");

int pageSize=980; //每次获取多少条

int total; //总共获取的条数

byte[] cookie = null;

try {

LdapContext ctx = new InitialLdapContext(HashEnv, null);

ctx.setRequestControls(new Control[] { new PagedResultsControl(pageSize, Control.CRITICAL) });//分页读取控制---因为LDAP 默认情况只能读取1000条数据

// 域节点

do{

String OU=hz.dtable.util.ParseUtil.convert2Null(ou);

String searchBase = "DC="+dc+",DC="+dc_houzui;

if(OU.length() >0){

searchBase = "OU="+OU+",DC="+dc+",DC="+dc_houzui;

}

// LDAP搜索过滤器类

//(&(|(objectclass=user)(objectclass=person)(objectclass=inetOrgPerson)(objectclass=organizationalPerson)))

String searchFilter = "(&(objectclass=user)(sAMAccountName=*))";//获取帐号

// 搜索控制器

SearchControls searchCtls = new SearchControls(); // Create the

// 创建搜索控制器

searchCtls.setSearchScope(SearchControls.SUBTREE_SCOPE);

/*1 姓(L) sn

2 名(F) givenName

3 显示名称(S) displayName

4 描述(D) description

5 办公室(C) physicalDeliveryOfficeName

6 英文缩写(I) initials

7 电话号码(T) telephoneNumber

8 电子邮件(M) mail

9 网页(W) wWWHomePage

10 电话号码-其它(O)... otherTelephone

11 网页-其它(R)... url

-----

1 国家/地区(O) co

2 省/自治区(V) st

3 市/县(C) l

4街道(S) streetAddress

5 邮政信箱(B) postOfficeBox

6 邮政编码(Z) postalCode

---------

1 用户登录名(U) userPrincipalName

2 用户登录名(Windows 2000 以前版本)(W) sAMAccountName

------------

1 家庭电话(M) homePhone

2 寻呼机(P) pager

3 移动电话(B) mobile

4 传真(F) facsimileTelephoneNumber

5 IP电话(I) ipPhone

6 注释 info

7 家庭电话-其它(O) otherHomePhone

8 寻呼机-其它(T) otherPager

9 移动电话-其它(B) otherMobile

10 传真-其它(E) otherFacsimileTelephoneNumber

11 IP电话-其它(R) otherIpPhone

----------

1 公司(C) company

2 部门(D) department

3 职务(J) title

4 经理-姓名(N) manager

5 直接下属(E) directReports

---------

*/

String[] returnedAtts = { "uSNCreated","name","userPrincipalName" };// 定制返回属性

searchCtls.setReturningAttributes(returnedAtts); // 设置返回属性集

// System.out.println(searchCtls.);

// 根据设置的域节点、过滤器类和搜索控制器搜索LDAP得到结果

int totalResults = 0;

int rows = 0;

NamingEnumeration answer =ctx.search(searchBase, searchFilter, searchCtls);

// 初始化搜索结果数为0

while (null !=answer &&answer.hasMoreElements()) {// 遍历结果集

SearchResult sr = (SearchResult) answer.next();// 得到符合搜索条件的DN

String dn = sr.getName();

Attributes Attrs = sr.getAttributes();// 得到符合条件的属性集

if (Attrs != null) {

Map<String, String> row=new HashMap<String, String>();

for (NamingEnumeration ne = Attrs.getAll(); ne.hasMore();) {

Attribute Attr = (Attribute) ne.next();// 得到下一个属性

// 读取属性值

for (NamingEnumeration e = Attr.getAll(); e.hasMore(); totalResults++) {

company = e.next().toString();

}

row.put(Attr.getID().toString(), company);

}

row.put("userdn", dn);

//System.out.println(row.toString());

li.add(row);

}

}

Control[] controls = ctx.getResponseControls();

if (controls != null) {

for (int i = 0; i < controls.length; i++) {

if (controls[i] instanceof PagedResultsResponseControl) {

PagedResultsResponseControl prrc = (PagedResultsResponseControl) controls[i];

total = prrc.getResultSize();

cookie = prrc.getCookie();

} else {

}

}

}

ctx.setRequestControls(new Control[] { new PagedResultsControl(pageSize, cookie, Control.CRITICAL) });

}while(cookie !=null);

ctx.close();

//System.out.println("总共:" + li.size() + "条信息.");

for(int i=0;i<li.size();i++){

Map userrow=li.get(i);

String userdn=DbMapUtil.getValue(userrow, "userdn", ""); //如果DN等于空那么默认为顶节点

String name=DbMapUtil.getValue(userrow, "name", ""); //如果DN等于空那么默认为顶节点

if(userdn.length() >0){

String userdns=userdn.replace("CN="+name, "");

if(userdns.trim().length() ==0){

userrow.put("orgid","-1000");

}else{

userdns=userdn.replace("CN="+name+",", "");

if(usermap !=null){

userrow.put("orgid",usermap.get(userdns));

}

}

// System.out.println(userrow.toString());

list.add(userrow);

}

}

} catch (Exception e) {

e.printStackTrace();

return null;

}

return list;

}

public static void main(String args[]) {

// 实例化

AdUserSys ad = new AdUserSys();

Map<String,String> usermap=new HashMap<String, String>();

usermap.put("OU=Domain Controllers", "5828");

usermap.put("OU=行政部", "12844");

usermap.put("OU=人力部,OU=行政部", "53324");

usermap.put("OU=管理部,OU=行政部", "12847");

usermap.put("OU=杭州慧智电子科技", "53308");

ad.getADInfo("192.168.0.14","389","shejiguanli\\administrator","abc123!","","shejiguanli","com",usermap);

//ad.getUnit("192.168.0.14","389","shejiguanli\\administrator","abc123!","","shejiguanli","com");

}

}