scala-ldap-server

An ldap server developed in Scala. It uses akka

##Install

I'd like to use sbt-native-packager to deliver this at least into deb and rpm systems, but probably msi and dmg as well.

##Changelog

See changelog

##Features

##Usage

Contributing

Use Github issues for feature requests and bug reports.

We actively welcome pull requests.

For setting up & starting the project locally: You will need an instance of mongo running, and you'll have to tweak application.conf to suit your environment

Once you have all that, use:

$ git clone https://github.com/rleibman/scala-ldap-server
$ cd scala-ldap-server
$ sbt run
cd -

License

GPL

Developers

So, this project is mostly a way for me to vent, practice and try some new stuff and technologies as it comes. Upon looking at it, it's much more complicated than I first thought. So unless someone else is interested in it and wants to help along I'll likely never get it to the point of actually working. Please let me know if you're interested in helping. I'm using the following documents to implement the server

Lightweight Directory Access Protocol (LDAP)

Basic documents

rfc4510 Technical Specification Road Map
rfc4511 The Protocol
rfc4512 Directory Information Models
rfc4513 Authentication Methods and Security Mechanisms
rfc4514 String Representation of Distinguished Names
rfc4515 String Representation of Search Filters
rfc4516 Uniform Resource Locator
rfc4517 Syntaxes and Matching Rules
rfc4518 Internationalized String Preparation
rfc4519 Schema for User Applications

Some Extras

rfc4520 Internet Assigned Numbers Authority (IANA) Considerations for the Lightweight Directory Access Protocol (LDAP)
rfc4521 Considerations for Lightweight Directory Access Protocol (LDAP) Extensions
rfc4522 The Binary Encoding Option
rfc4523 Schema Definitions for X.509 Certificates
rfc4524 COSINE LDAP/X.500 Schema
rfc4525 Modify-Increment Extension
rfc4526 Absolute True and False Filters
rfc4527 Read Entry Controls
rfc4528 Assertion Control
rfc4529 Requesting Attributes by Object Class in the Lightweight Directory Access Protocol (LDAP)
rfc4530 entryUUID Operational Attribute
rfc4531 Turn Operation
rfc4532 "Who am I?" Operation
rfc4533 Content Synchronization Operation

Oids

Oid reference oid's that may be returned from the base in supportedControl, supportedExtension, supportedFeatures
Another oid reference

OpenLDAP supports the following on a bare bones system

SupportedControl

2.16.840.1.113730.3.4.18 Proxied Authorization v2 Request Control (RFC 4370)
2.16.840.1.113730.3.4.2 ManageDsaIT Request Control (RFC 3296)
1.3.6.1.4.1.4203.1.10.1 Subentries (RFC 3672)
1.2.840.113556.1.4.319 Simple Paged Results Control (RFC 2696)
1.2.826.0.1.3344810.2.3 Matched Values Request Control (RFC 3876)
1.3.6.1.1.13.2 Post-Read Request and Response Controls (RFC 4527)
1.3.6.1.1.13.1 Pre-Read Request and Response Controls (RFC 4527)
1.3.6.1.1.12 Assertion Request Control (RFC 4528)
1.3.6.1.4.1.1466.20037 StartTLS Request (RFC 4511)

supportedExtension

1.3.6.1.4.1.4203.1.11.1 Password ModifY Request (RFC 3062)
1.3.6.1.4.1.4203.1.11.3 "Who Am I?" Request (RFC 4532)
1.3.6.1.1.8 Cancel Request (RFC 3909)

supportedFeatures

1.3.6.1.1.14 Modify-Increment. (RFC 4525)
1.3.6.1.4.1.4203.1.5.1 All Operational Attributes. (RFC 3673)
1.3.6.1.4.1.4203.1.5.2 OC AD Lists (RFC 4529)
1.3.6.1.4.1.4203.1.5.3 True/False Filters (RFC 4526)
1.3.6.1.4.1.4203.1.5.4 Language tags options (RFC 3866)
1.3.6.1.4.1.4203.1.5.5 Language range options (RFC 3866)

Anonymous Simple Authentication and Security Layer (SASL) Mechanism

rfc4505 Technical Specification Road Map

https://www.ldap.com/ldap-specifications-defined-in-rfcs

I'm also making heavy use of the Apache Directory Studio to test the server, as well as of the openldap tools (ldapsearch, etc)

Contribution policy

Contributions via GitHub pull requests are gladly accepted from their original author. Along with any pull requests, please state that the contribution is your original work and that you license the work to the project under the project's open source license. Whether or not you state this explicitly, by submitting any copyrighted material via pull request, email, or other means you agree to license the material under the project's open source license and warrant that you have the legal authority to do so.

rleibman / scala-ldap-server