←back to thread

Show HN: Moribito – A TUI for LDAP Viewing/Queries

(github.com)
103 points woumn | 4 comments | 02 Sep 25 13:10 UTC | HN request time: 0.729s | source

Check out my TUI I wrote for viewing and querying an LDAP. I need to do basic queries and validation daily for work, and as I work on a mac, there are really no good options. The major player is the Apache Directory Studio which is... not great. So I decided to create a new one.
1. throw0101a ◴[02 Sep 25 15:44 UTC] No.45104620[source]▶
Is it possible to view/edit the "cn=config" tree of OpenLDAP to make configuration changes with this?

I often do

    ldapvi -h ldapi:/// -Y EXTERNAL -b 'cn=config'
and another tool could be useful.
replies(1): >>45105726 #
2. woumn ◴[02 Sep 25 16:54 UTC] No.45105726[source]▶
It would be possible, but I don't have a good ldap server to test on, especially one I can modify config changes. If you'd like to contribute to the repo, adding a test ldap server that can be used for development would enable a lot more features.
replies(2): >>45107741 #>>45115048 #
3. bravetraveler ◴[02 Sep 25 19:18 UTC] No.45107741[source]▶
May find this worth a whirl, hosted instance: https://www.freeipa.org/page/Demo

Verified the services respond/credentials work [through the UI, my ldapsearch-fu is weak] :)

4. throw0101a ◴[03 Sep 25 12:44 UTC] No.45115048[source]▶
If you have a Debian or Ubuntu system available, installing the `slapd` package (OpenLDAP) would be sufficient to get something on localhost or ldapi:///. RH-based systems have openldap* packages.

You don't really have to do much more than that for the purpose of testing this (no creating of accounts, groups, sub-trees, etc).

Perhaps at most go to the stanza/paragraph that defines "olcDbIndex" values, add a new one, and see if a new index file is created in "olcDbDirectory" (often /var/lib/ldap):

* https://www.zytrax.com/books/ldap/apa/indeces.html

* https://warlord0blog.wordpress.com/2020/10/19/ldap-indexes/