Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

As developers we sometimes need querying LDAP. Do you know useful tools for this task?

edit: I don't mean in code, I mean utility/tool (command-line or gui, mostly gui) for just to look/confirm data, or if possible to alter...

share|improve this question

closed as off-topic by Michael Hampton Jan 1 at 20:49

This question appears to be off-topic. The users who voted to close gave this specific reason:

  • "Questions seeking product, service, or learning material recommendations are off-topic because they tend to become obsolete quickly. Instead, describe your situation and the specific problem you're trying to solve." – Michael Hampton
If this question can be reworded to fit the rules in the help center, please edit the question.

    
Something for Stack Overflow? –  Mark Henderson Jun 22 '09 at 21:20
    
More info please. Do you mean in a program via code (in which case, yeah, SO is better) or just via a utility? Which OS? Command-line or GUI? Just to look/confirm, or do something with the results? –  Jimmy Shelter Jun 22 '09 at 22:05
    
i edited the question, thanks for the request mh. –  spinodal Jun 23 '09 at 6:34

18 Answers 18

up vote 20 down vote accepted

Apache Directory Studio

alt text

It's not exactly lightweight, but it is an excellent tool for doing ad hoc inspection and modifications to an LDAP database

share|improve this answer
    
Note it's a java tool (based on Eclipse), so it's available where java is available, and not on just 1 OS –  chburd Jun 23 '09 at 8:26
2  
As the poster suggests, it is anything but lightweight! Eclipse is a largish framework, just for an LDAP tool. Having said that, it is a very nice LDAP tool. –  geoffc Jun 23 '09 at 11:40

ldapsearch is pretty lightweight... Part of the standard bits that come with openLDAP. What platform, etc?

ldapsearch -h ldapserver -b ou=people,dc=example,dc=com -D uid=root,dc=example,dc=com -x -W "(|(uid=foo)(cn=*bar*))"

I'd suggest setting up an alias or script that prefills in the boring bits that are always the same. My example assumes authentication. read the manpage.

share|improve this answer
1  
You could also add a lot of the boring bits that's the same to your ${HOME}/.ldaprc (man ldap.conf should get you started) –  Kjetil Joergensen Jun 22 '09 at 21:41
    
Can you update with ldap search? Or only Query? –  RobW Jul 8 '10 at 19:52
    
@RobW: ldapsearch doesn't have any way of updating an LDAP directory, but other tools from the same standard OpenLDAP toolset can. ldapadd, ldapdelete and ldapmodify. –  freiheit Jul 9 '10 at 20:18

For Windows there's LDP. I use it all the time. It's part of the Windows Support Tools.

share|improve this answer

ldapvi - it returns the results of the search into $EDITOR, where you can change all of them at once, then just save and it handles the details. Much better than faffing around with LDIF. As for a more heavyweight LDAP browser, I second Apache Directory Studio.

share|improve this answer
    
+1 for ldapvi application –  chmeee Jun 23 '09 at 4:28

I've used Softerra LDAP Browser (http://www.ldapadministrator.com/) before in the past. It's reasonably lightweight (GUI based, but pretty nice for perusing LDAP - made my life easier on multiple occasions!). Windows only though unfortunately.

They also offer a commercial version called LDAP Administrator, but I've no experience with that product. I certainly recommend the freeware version though!

share|improve this answer
    
i specially like the SQL LDAP Query option available in Softerra LDAP Browser. –  th1rdey3 Jan 22 '13 at 5:24

Would something like phpLDAPadmin be like what you're looking for?

share|improve this answer

If you are looking for tools which give you deep insight of ldap directory the two good ones are JXplorer or LDAP Admin Tool.

share|improve this answer
    
Yeah JXplorer is good –  codeulike Apr 7 '10 at 10:46

On *nix I've used luma a bit for poking around with a gui-tool and then there's, well, ldapsearch (from OpenLDAP). ldapsearch, while perhaps taking some getting used to, works very well once you get your head around the manual-page and options.

share|improve this answer

If you're only concerned about Windows and Active Directory, adsiedit.msc is hard to beat. It lets you get right in under the bonnet with absolutely everything. Better hope you don't have admin rights when you're using it though! Can be very dangerous...

share|improve this answer

Forgive me, I'm a newbie here. I wanted to "reply" to geoffc's post but couldn't figure out how.

I also use LDAP Browser/Editor and it's currently available for download at http://www.novell.com/communities/node/8652/gawors-excellent-ldap-browsereditor-v282

share|improve this answer
    
I use this one to hit an instance of Tivoli Directory. Works fine, no problems. –  mfinni Sep 30 '10 at 16:36

As has already been suggested, Apache Directory Studio is a great desktop application, I really do love it a lot. Usually though I just want something, as you said, lightweight and preferably command line. Just recently I stumbled across Shelldap.

When you launch shelldap it operates like a pseudo shell where your working directories are actually the branches of your LDAP tree. It responds to operations like:

  • cd ou=People
  • cat uid=tbielawa
  • edit cn=www001

I really like it. Like with the ldapsearch and ldapmodify tools included in the standard client packages it supports config files to remember your server, ou, bind dn, passwords, etc.

Shelldap is...

...available via the FreeBSD  ports system, OS X via  macports, Debian/Ubuntu
via  apt, and NetBSD's  pkgsrc.

Check out their website: http://projects.martini.nu/shelldap

share|improve this answer
    
It also supports things like grep gecos="Timothy*" for searching. Etc.... –  Tim Bielawa Mar 10 '11 at 0:51

LBE, LDAP Browser/Editor would fit your bill. Less than a meg or so, and fast! Very useful.

Alas, the author, Gowar seems to have disappeared and all references to download it seem to be dead. I still have and use a copy, and would love to find a 'live' source to tell others to get it from.

Found a location to get a copy.

share|improve this answer

I use ldapsearch (man page) for that.

share|improve this answer

If you are a developer you could feel confortable using some ldap libraries for scripting languages.

I use ruby. You can use irb from the command line for fast queries like this:

$ irb
>> require 'ldap'
=> true
>> ldap.search(BASE_DN, LDAP::LDAP_SCOPE_SUBTREE, filter) do |result|
?>     ... do something with result array ...
?> end

The advantage over ldapsearch is that you can do better post-processing of the ldap results while still being a fast, lightweight solution.

share|improve this answer

/n software has a get-ldap cmdlet for powershell use or as a developer you might be familiar with System.DirectoryServices in the .net framework, which you could also call right from powershell.

share|improve this answer

There's ud. Should be part of the OpenLDAP distribution when I last looked at it a decade ago.

http://www.at.php.net/linuxcommand.org/man_pages/ud1.html

share|improve this answer

Ldap Admin is free Win32 administration tool for LDAP directory management. Is pretty lightweight and useful for simple query operations. For more complex scenearios I prefer Apache Directory Studio.

share|improve this answer
    
unfortunately it's not actively maintained –  Hubert Kario Nov 6 '10 at 12:13

gq is what I use when ldapvi and ldapsearch don't cut it.

share|improve this answer

Not the answer you're looking for? Browse other questions tagged or ask your own question.