如何使用Java中的UnboundID LDAP SDK从Active Directory中解析objectGUID？

Question

场景1：我可以从活动目录中获取objectGUID，但它不是可读的字符串格式。我们还需要以解码格式将其存储在db中。通过提供的链接“http://www.developerscrappad.com/1109/windows/active-directory/java-ldap-jndi-2-ways-of-decoding-and-using-the-objectguid-from-windows-active-directory/”中给出的示例，它演示了如何解码objectGUID，但他们认为objectGUID长度为16个字节（128位）。在我们的例子中，当我尝试获取objectGUID时，我得到了超过128位的值，并且有时候我得到的值小于128位，即我们没有得到特定的位长度。 我实施了参考代码：

public class GetLDAPUsers { 

public static void main(String args[]) { 
    new GetLDAPUsers().getUserFromAD(); 
} 

void getUserFromAD() { 
    try { 
     LDAPConnection connection = new LDAPConnection("192.xxx.xx.xxx", 389); 
     System.out.println(connection); 
     String baseDN = "DC=wcomp1,DC=com"; 
     String[] attributes = { "entryUUID", "sn", "mail", "givenName", 
       "objectGUID", "userAccountControl", "isDeleted", "modifyTimestamp", "WhenChanged", "WhenCreated"}; 
     // Set Ldap Connection Options for server timeout 
     LDAPConnectionOptions connOption = new LDAPConnectionOptions(); 
     connOption.setAutoReconnect(true); 
     connOption.setConnectTimeoutMillis(55000); 
     connection.setConnectionOptions(connOption); 
     //connection bind 
     connection.bind("CN=abc,CN=ab,DC=users,DC=com", "password"); 
     System.out.println("connection successfully"); 

     //search filter query for search specific user,for all users use (&(objectclass=User)) filter. 
     Filter filter = Filter.create("(&(objectclass=User)(givenName=testUserName))"); 
     SearchRequest searchRequest = new SearchRequest(baseDN, SearchScope.SUB, filter, 
       attributes); 
     SearchResult searchResult = connection.search(searchRequest); 
     //get user detail 
     for (SearchResultEntry searchResultEntry : searchResult.getSearchEntries()) { 


      System.out.println("user name " + searchResultEntry.getAttribute("givenName").getValue() + 
        searchResultEntry.getAttribute("objectGUID").getValue()); //We get here objectGUID string which unreadable format 

      //We convert here objectGUID in dashed string 
      System.out.println("decoded objectGUID = " + convertToDashedString(searchResultEntry.getAttribute("objectGUID").getValue().getBytes())); 
     } 

    } catch (Exception e) { 
     e.printStackTrace(); 
    } 
} 

public static String convertToDashedString(byte[] objectGUID) { 
    StringBuilder displayStr = new StringBuilder(); 
    displayStr.append(prefixZeros((int) objectGUID[3] & 0xFF)); 
    displayStr.append(prefixZeros((int) objectGUID[2] & 0xFF)); 
    displayStr.append(prefixZeros((int) objectGUID[1] & 0xFF)); 
    displayStr.append(prefixZeros((int) objectGUID[0] & 0xFF)); 
    displayStr.append("-"); 
    displayStr.append(prefixZeros((int) objectGUID[5] & 0xFF)); 
    displayStr.append(prefixZeros((int) objectGUID[4] & 0xFF)); 
    displayStr.append("-"); 
    displayStr.append(prefixZeros((int) objectGUID[7] & 0xFF)); 
    displayStr.append(prefixZeros((int) objectGUID[6] & 0xFF)); 
    displayStr.append("-"); 
    displayStr.append(prefixZeros((int) objectGUID[8] & 0xFF)); 
    displayStr.append(prefixZeros((int) objectGUID[9] & 0xFF)); 
    displayStr.append("-"); 
    displayStr.append(prefixZeros((int) objectGUID[10] & 0xFF)); 
    displayStr.append(prefixZeros((int) objectGUID[11] & 0xFF)); 
    displayStr.append(prefixZeros((int) objectGUID[12] & 0xFF)); 
    displayStr.append(prefixZeros((int) objectGUID[13] & 0xFF)); 
    displayStr.append(prefixZeros((int) objectGUID[14] & 0xFF)); 
    displayStr.append(prefixZeros((int) objectGUID[15] & 0xFF)); 
    return displayStr.toString(); 
} 


private static String prefixZeros(int value) { 
    if (value <= 0xF) { 
     StringBuilder sb = new StringBuilder("0"); 
     sb.append(Integer.toHexString(value)); 

     return sb.toString(); 

    } else { 
     return Integer.toHexString(value); 
    } 
} 

}

方案2：另外当我尝试获取的objectGUID使用例如在windows环境和Linux环境上面我得到不同的objectGUID为相同的用户。

Answer 1

您不能将ObjectGUID解释为字符串。通常情况下，我会设置目录上下文环境返回ObjectGUID作为byte[]，然后使用转换方法

env.put("java.naming.ldap.attributes.binary", "ObjectGUID"); 

String newGuid = convertToDashedString(guid);