web2ldap - Demo

Stand-alone mode

This demo runs as a multi-threaded stand-alone web server. The demon is not automatically started by my ISP, it might be down if the machine was rebooted. Please drop me a note in this case.

Feel free to try it with different browsers, CSS turned on and off. You're welcome to test your own LDAP hosts with this online-demo of web2ldap if they are accessible via Internet. Just type in the hostname in the input field on the Connect screen. web2ldap will try to determine the base DN/search root afterwards.

Notes about using the on-line demo:

• Please report any problems or errors! This demo reflects current development snapshot not the releases. It might be temporarily buggy.
• Do not enter confidential data! Consider installing your own web2ldap service if you want to maintain your LDAP server. ;-)
• If anything goes wrong the exceptions are internally written to a debug log file. I promise not to reveal any information found therein. However you might see accesses to your LDAP host by me while trying to fix the problem.
• The demo server on this system runs with very limited ressources (only 24 file-handles available). Therefore the session timeouts are set to very short periods. Sometimes you might get no response or a message "host not found" because web2ldap cannot acquire file-handles for sockets. Try again later in this case after unused LDAP connections have been cleaned up. If you want to be really nice use the Disconnect button...
• The LDAP server has to be reachable via Internet and open to the public. Especially IP addresses like 10.*, 192.168.* or 127.0.0.1 won't work. (I did not expect having to mention this explicitly but real life shows...)
• LDAP servers might behave very different because of different LDAP protocol versions, vendor implementations and configuration. E.g. some of the demo servers listed below are browsable some are not, etc.
• Entering the search root is optional. In most cases browsing down the directory will automatically bring up the search roots of the backends of a LDAP host.
  However some LDAP servers are configured to return a referral if asked for empty DN. In this case entering the search root or any DN of an entry on this server helps.
• For security reasons the web session ID is cross-checked against some environment variables which are assumed constant throughout the whole session. Cut&paste of URLs will probably not work. Also URLs containing session IDs are not persistent.
• You are welcome to refer to your own LDAP host through the on-line demo as long as it will not cause a huge amount of traffic. Use the ldapurl command with LDAP URLs as persistent URL. Have a look at the URLs specific examples below.

I would also appreciate if you report success stories. Use the feedback form to ensure that you provide all necessary information.

Specific examples

This section contains links to specific entries or actions to illustrate some features.

ldap.openldap.org

Find Kurt@OpenLDAP.org via sub tree search without defining the LDAP host in the LDAP URL. The DNS domain openldap.org has a SRV record in DNS. You can locate other LDAP servers by SRV RR.

www.trustcenter.de

There's a browseable LDAP repository (Siemens Dir/X) of certificates issued by TC Trustcenter. Sometimes even the URLs in the certificates work. You can even point to and display single certificate or CRL with a LDAP URL.

ldap.gigacorp.nl

Look here how entries of object class groupOfNames are displayed.

TF-LSD people

Every web site needs a links-to-friends section (hehe).
Some of the nice guys participating in the TF-LSD groups maintain own LDAP servers where you can look at the personal entries (in no particular order):

• Stig (thanks for nice input about web interfaces...)
• Konstantin (thanks for LDAPv3 contributions to python-ldap module)

master.surfnet.nl (DIRECT project)

You can see how referrals are handled by clicking on one of the C= entries, e.g. C=DE.

Bibtex database of DFN on os.directory.dfn.de

This backend for a bibtex database of RFCs is usable via web2ldap by just defining HTML templates.

web2ldap monitor

New monitor page. Still not much information though...