package main import ( "github.com/nmcclain/ldap" "log" "net" ) ///////////// // Sample searches you can try against this simple LDAP server: // // ldapsearch -H ldap://localhost:3389 -x -b 'dn=test,dn=com' // ldapsearch -H ldap://localhost:3389 -x -b 'dn=test,dn=com' 'cn=ned' // ldapsearch -H ldap://localhost:3389 -x -b 'dn=test,dn=com' 'uidnumber=5000' ///////////// ///////////// Run a simple LDAP server func main() { s := ldap.NewServer() // register Bind and Search function handlers handler := ldapHandler{} s.BindFunc("", handler) s.SearchFunc("", handler) // start the server if err := s.ListenAndServe("localhost:3389"); err != nil { log.Fatal("LDAP Server Failed: %s", err.Error()) } } type ldapHandler struct { } ///////////// Allow anonymous binds only func (h ldapHandler) Bind(bindDN, bindSimplePw string, conn net.Conn) (uint64, error) { if bindDN == "" && bindSimplePw == "" { return ldap.LDAPResultSuccess, nil } return ldap.LDAPResultInvalidCredentials, nil } ///////////// Return some hardcoded search results - we'll respond to any baseDN for testing func (h ldapHandler) Search(boundDN string, searchReq ldap.SearchRequest, conn net.Conn) (ldap.ServerSearchResult, error) { entries := []*ldap.Entry{ &ldap.Entry{"cn=ned," + searchReq.BaseDN, []*ldap.EntryAttribute{ &ldap.EntryAttribute{"cn", []string{"ned"}}, &ldap.EntryAttribute{"uidNumber", []string{"5000"}}, &ldap.EntryAttribute{"accountStatus", []string{"active"}}, &ldap.EntryAttribute{"uid", []string{"ned"}}, &ldap.EntryAttribute{"description", []string{"ned"}}, &ldap.EntryAttribute{"objectClass", []string{"posixAccount"}}, }}, &ldap.Entry{"cn=trent," + searchReq.BaseDN, []*ldap.EntryAttribute{ &ldap.EntryAttribute{"cn", []string{"trent"}}, &ldap.EntryAttribute{"uidNumber", []string{"5005"}}, &ldap.EntryAttribute{"accountStatus", []string{"active"}}, &ldap.EntryAttribute{"uid", []string{"trent"}}, &ldap.EntryAttribute{"description", []string{"trent"}}, &ldap.EntryAttribute{"objectClass", []string{"posixAccount"}}, }}, } return ldap.ServerSearchResult{entries, []string{}, []ldap.Control{}, ldap.LDAPResultSuccess}, nil }