• www.blackdown.org, 1.4.1
• Java LDAP Klassen vom Java Novell Developer Kit -> ldap.jar

• www.python.org, 2.1.3
• python-ldap 2.0.0pre06 (sourceforge)

• Server: eDirectory auf Netware 5.1
• Klient: Debian Woody (GNU) Linux 2.4.19 i686

#!/usr/bin/python

import ldap
l = ldap.initialize("ldap://www.nldap.com:389")
res = l.search_s("ou=200201, ou=courses, ou=zoology, " 
    + "ou=subldap, ou=user, o=novell", 
    ldap.SCOPE_ONELEVEL, "objectclass=*")

for r in res:
    print r[0]
l.unbind_s()

$ python ListCourses.py
cn=Ant,ou=200201,ou=courses,ou=zoology,ou=subldap,ou=user,o=NOVELL
cn=Bee,ou=200201,ou=courses,ou=zoology,ou=subldap,ou=user,o=NOVELL
cn=Cow,ou=200201,ou=courses,ou=zoology,ou=subldap,ou=user,o=NOVELL

import java.io.*;
import com.novell.ldap.*;

public class ListCourses {

    public static void main (String [] args) throws LDAPException {

        LDAPConnection c = new LDAPConnection ();
        c.connect ("www.nldap.com", 389);
        LDAPSearchResults res =c.search("ou=200201,"
            + "ou=courses, ou=zoology,ou=subldap, ou=user, "+
            + "o=novell", LDAPConnection.SCOPE_ONE,  
            null, null,false);
        while (res.hasMore()) {
            System.out.println(res.next().getDN());
        c.disconnect();
        }
    }
}

from com.novell.ldap import *

c = LDAPConnection ()
c.connect ("www.nldap.com", 389)
res = c.search("ou=200201, ou=courses, ou=zoology, ou=subldap, 
     ou=user, o=novell", LDAPConnection.SCOPE_ONE, None, None, 0)

while res.hasMore():
     print res.next().getDN()

$ cat /proc/cpuinfo
cpu MHz         : 399.327
model name      : Pentium II (Deschutes)
bogomips        : 796.26

$ time java ListCourses
real    0m2.415s
user    0m1.150s
sys     0m0.030s

$ time python ListCourses.py
real    0m1.067s
user    0m0.100s
sys     0m0.020s

$ time jython ListCourses.jy
real    0m7.408s
user    0m4.540s
sys     0m0.140s

#!/usr/bin/python

import ldap
import sys

if len (sys.argv) != 3:
    print "Usage: Register.py course student"
    print "Eg: Register.py ant student1"
    sys.exit(1)

ldap.set_option (ldap.OPT_PROTOCOL_VERSION, ldap.VERSION3)
c = ldap.initialize ("ldap://www.nldap.com:389")
c.simple_bind_s("cn=admin, ou=subldap, ou=user, o=novell","secret")
c.modify_s ("cn=" + sys.argv[1] + ", " + "ou=200201, ou=courses, " 
   + "ou=zoology, ou=subldap, ou=user, o=novell", 
   [(ldap.MOD_ADD, "member", "cn=" + sys.argv[2] + "," + 
   "ou=students, ou=zoology, ou=subldap, ou=user, o=novell")])
c.unbind_s()

$  ssldump -A -N > ssldumpraw.txt
New TCP connection #1: www.vetmed.uni-muenchen.de(2916) 
   <-> devsup-news3.Novell.COM(636)
1 1  0.2432 (0.2432)  C>S SSLv2 compatible client hello
  Version 3.1 
  cipher suites
  TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA  
  TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA  
  TLS_RSA_WITH_3DES_EDE_CBC_SHA  
  [ 35 more lines ] 
  SSL2_CK_RC4_EXPORT40  
1 2  0.4228 (0.1795)  S>CV3.1(74)  Handshake
      ServerHello
        Version 3.1 
        random[32]=
          3e 63 b7 f7 98 02 54 54 55 49 ba 45 c0 db fd d2 
        session_id[32]=
          a1 18 8e 06 5d 0e 42 9c 01 37 3c 8d 4a c0 01 d8 
        cipherSuite         TLS_RSA_WITH_3DES_EDE_CBC_SHA
        compressionMethod                   NULL
        certificate[1377]=
          30 82 05 5d 30 82 04 45 a0 03 02 01 02 02 1b 02 
		  [...]

1 5  0.6462 (0.0450)  C>SV3.1(262)  Handshake
      ClientKeyExchange
        EncryptedPreMasterSecret[256]=
          02 ba 95 91 0e c4 f0 3f 79 5c b9 e1 ef 8a b6 24 
		  [...]
1 6  0.6462 (0.0000)  C>SV3.1(1)  ChangeCipherSpec
1 7  0.6462 (0.0000)  C>SV3.1(40)  Handshake
1 8  0.8985 (0.2523)  S>CV3.1(1)  ChangeCipherSpec
1 9  0.8985 (0.0000)  S>CV3.1(40)  Handshake
1 10 0.8995 (0.0009)  C>SV3.1(24)  application_data
[...]
1    1.2949 (0.0000)  C>S  TCP FIN
1    1.4711 (0.1762)  S>C  TCP FIN

$ openssl x509 -noout -text -in ldapservercert.pem
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:14:11:e9:81:65:28:a6:1f:50:10:cf:02:c7:62[...]
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: OU=Organizational CA, O=VETMED
        Validity
            Not Before: Sep 25 07:08:00 2000 GMT
            Not After : Sep 25 09:08:00 2010 GMT
        Subject: CN=cippie.vetmed.uni-muenchen.de,OU=vetmed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
            RSA Public Key: (2048 bit)
                Modulus (2048 bit):
                    00:bc:04:67:e4:35:83:c8:ac:ac:04:b2:ce:39:2f:
					[...]
		        Exponent: 65537 (0x10001)
  		Signature Algorithm: sha1WithRSAEncryption
        	81:6f:dc:32:8d:58:9e:e0:65:04:22:f9:43:ae:97:9f:5d:66:
			[...]

#!/usr/bin/python
import ldap
import sys

if len (sys.argv) != 3:
    print "Usage: RegisterSSL.py course student"
    print "Eg: RegisterSSL.py ant student1"
    sys.exit(1)
ldap.set_option (ldap.OPT_PROTOCOL_VERSION, ldap.VERSION3)
ldap.set_option (ldap.OPT_X_TLS_CACERTFILE, "nldapcacert.pem")
#alternative: TLS_CACERT /etc/certs/nldapcacert.pem 
#in /etc/openldap/ldap.conf 
c = ldap.initialize ("ldaps://www.nldap.com:636")
c.simple_bind_s("cn=admin, ou=subldap, ou=user, o=novell",
  "secret")
c.modify_s ("cn=" + sys.argv[1] + ", " + "ou=200201," +   
   "ou=courses, ou=zoology, ou=subldap, ou=user, o=novell",
   [(ldap.MOD_ADD, "member", "cn=" + sys.argv[2] + "," +
   "ou=students, ou=zoology, ou=subldap, ou=user, o=novell")])
c.unbind_s()

• Besonderheit: userPassword
• Gruppen: (8.6.1) member -> (8.6.2) uniqueMember
• keine Transaktionen (Nachteil gegenüber DirXML, NJCL)