Invoke search against AD, returning DSML

Question

Hi.
I am trying to send a simple search to Active Directory which would return result of the search in DSML format. I am using the following code:
Properties props = new Properties();
props.setProperty("java.naming.ldap.version", "3");
props.setProperty(Context.SECURITY_PRINCIPAL, "[email protected]");
props.setProperty(Context.SECURITY_CREDENTIALS, "*********");
props.setProperty(Context.INITIAL_CONTEXT_FACTORY, "com.sun.jndi.dsmlv2.soap.DsmlSoapCtxFactory");
props.setProperty(Context.PROVIDER_URL, "ldap://ad-server:389/");
DirContext ctx = null;
NamingEnumeration results = null;
try {
    ctx = new InitialDirContext(props);
    SearchControls constraints = new SearchControls();
    constraints.setSearchScope(SearchControls.SUBTREE_SCOPE);
    results = ctx.search("DC=podjetje,DC=local", "(objectclass=*)", constraints);
    while (results.hasMore()) {
        System.out.println(results.next());
} catch (NamingException e) {
    e.printStackTrace();
finally {
    try {
        if (results != null)
            results.close();
        if (ctx != null)
            ctx.close();
    } catch (NamingException e) {
        e.printStackTrace();
}This example code works while using "com.sun.jndi.ldap.LdapCtxFactory" provider as INITIAL_CONTEXT_FACTORY.
But in case of "com.sun.jndi.dsmlv2.soap.DsmlSoapCtxFactory" provider I am getting exception 23:36:39,640 ERROR [STDERR] 8.3.2007 23:36:39 com.sun.xml.internal.messaging.saaj.client.p2p.HttpSOAPConnection call
SEVERE: SAAJ0006: Bad URL (endPoint instance of String)
java.net.MalformedURLException: unknown protocol: ldap in line results = ctx.search("DC=podjetje,DC=local", "(objectclass=*)", constraints);How would I invoke searching against Active Directory and get back results in DSML?

Answer 1

I haven't played around with DSML, so I can't say for certain exactly what's wrong. After a quick perusal of the DSMLv2 stuff it appears there may be two "things" you may be trying to do.
The first would be just displaying the results using DSML. The sample named AuthSearch in the dsmlv2 zip file seems to be close what you are trying to achieve, and will return the results something like:<?xml version="1.0" encoding="UTF-8"?>
<dsml:batchResponse>
<dsml:searchResponse>
<dsml:searchResultEntry.....dn="cn=AlbertEinstein,ou=research,dc=Antipodes,dc=com">
<dsml:attr name="displayName">
<dsml:value>Albert Einstein</dsml:value>
</dsml:attr>
</dsml:searchResultEntry>
<dsml:searchResponse>
</dsml:batchResponse>Your code snippet differs somewhat from the AuthSearch sample.
The second thing you could be trying to do is submit a DSML request using SOAP over HTTP.
In this case you will need to install a DSML server, such as Microsoft's DSML Services for Windows (DSFW) which can be dowloaded from http://www.microsoft.com/downloads/details.aspx?FamilyID=37df79b8-6f2b-4c04-9744-49816baee8ae&DisplayLang=en
In that case your code will be substantially different, more like the UseWithSoap sample. If you were using Microsoft's DsFW then the URI that you would use would be something like:http://myDsFWServer:80/dsml/adssoap.dsmlxHowever I've just had a quick play with this, and I can't get it to work. Seems like DSFW doesn't like the DSML syntax that the Sun DSMLv2 provider spits out.
(DSFW barfs when parsing the request and complains that the derefAliases definition is not in the DTD). There are certainly some diffeences between the DSML included in the Microsoft samples and what the Sun DSML provider produces. If someone understands the nuances of the different DSML providers, then perhaps they can help our poor friend out.
Good luck.