使用 UnboundId api 在 LDAP 中查看修改的条目 [英] View modified entries in LDAPusing UnboundId api

问题描述

这里的要求是我想查看 LDAP 中已在 LDAP 服务器端修改的修改条目?Unboundid api 中是否有任何 api 或代码，以便我可以看到 LDAP 中修改的条目?

Here is the requirement that I want to see modified entries in LDAP which have been modificated at the LDAP servere side?Is there any api or code in Unboundid api so that I can see modified entries in LDAP ?

推荐答案

虽然您的问题不是很清楚，但我假设您问的是是否有一种方法可以检测目录服务器中的数据更改，或者作为它们发生或发生在事实之后的某个时间.有多种方法可以实现这一点，但最适合您的解决方案将取决于您使用的服务器提供的功能、服务器中的更改量以及您的具体要求.

Although your question isn't exactly clear, I assume that you're asking if there is a way to detect changes to data in the directory server, either as they occur or sometime after the fact. There are a number of ways to accomplish this, although the solution that is best for you will depend on what capabilities are offered by the server you're using, the volume of changes in the server, and your specific requirements.

• 如果您使用的服务器支持内容同步控制(com.unboundid.ldap.sdk.controls.ContentSyncRequestControl)，那么这可能是一种非常有用的方式来获取有关条目的信息，因为发生变化和变化可能在您的搜索未激活时已处理.

• If the server you are using supports the content synchronization control (com.unboundid.ldap.sdk.controls.ContentSyncRequestControl), then this may be a very useful way to obtain information about entries as changes occur and also changes that may have been processed while your search was not active.

如果您想实时收到更新条目的通知，您可以使用持久搜索 (com.unboundid.ldap.sdk.controls.PersistentSearchRequestControl).如果您的服务器支持这一点，那么您可以使用它让服务器在处理更改时发送添加、删除、修改和/或修改 DN 操作所针对的客户端条目.但是，对于您可能有大量更改的情况，或者检测在持久搜索未激活时可能已处理的更改，此选项并不是那么好.

If you want to be notified of updated entries in real time, you could use a persistent search (com.unboundid.ldap.sdk.controls.PersistentSearchRequestControl). If your server supports this, then you can use this to have the server send your client entries targeted by add, delete, modify, and/or modify DN operations as the changes are processed. However, this option isn't all that great for cases in which you may have a high volume of changes, or for detecting changes that might have been processed while the persistent search was not active.

如果您使用的是 Active Directory，则 DirSync 控件 (com.unboundid.ldap.sdk.experimental.ActiveDirectoryDirSyncControl) 可能有助于检测更改.

If you're using Active Directory, then the DirSync control (com.unboundid.ldap.sdk.experimental.ActiveDirectoryDirSyncControl) may be useful for detecting changes.

如果您使用的服务器提供 LDAP 更改日志，则您可以定期轮询它以检索新的更改日志条目 (com.unboundid.ldap.sdk.ChangeLogEntry)，这些条目提供有关服务器中处理的更改的信息.您可以将其与更改日志上的持久搜索结合使用，以在处理更改时检索更改通知，同时还可以在搜索中断时从中断处继续.

If the server you are using provides an LDAP changelog, then you can periodically poll it to retrieve new changelog entries (com.unboundid.ldap.sdk.ChangeLogEntry) that provide information about changes processed in the server. You could potentially use this in conjunction with a persistent search on the changelog to retrieve notification of changes as they are processed while also having the ability to pick up where you left off if the search is interrupted.

如果所有其他方法都失败了，您可以使用针对 createTimestamp 和/或 modifyTimestamp 属性的范围搜索来识别在指定时间后创建和/或更新的条目.

If all else fails, you may be able to use range searches targeting the createTimestamp and/or modifyTimestamp attributes to identify entries created and/or updated after a specified time.

您可能需要与您的目录服务器供应商核实，以确定他们是否提供任何替代机制来检测更改，或者他们是否对哪些方法最适合您的需求有任何建议.

You will probably want to check with your directory server vendor to determine whether they provide any alternate mechanisms for detecting changes, or if they have any recommendations about which of these approaches is best suited to your needs.

这篇关于使用 UnboundId api 在 LDAP 中查看修改的条目的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！