Spring Java实现LDAP简单CRUD遇启动报错，求解决方法

一、启动错误原因 #

java.lang.NoClassDefFoundError: org/apache/directory/shared/ldap/exception/LdapNameNotFoundException 是因为项目缺少Apache Directory Shared依赖包，Spring Security配置嵌入式LDAP时会依赖该包，缺失导致类加载失败。

二、分步解决方案 #

1. 补全依赖配置 #

如果使用Maven，在pom.xml中添加以下依赖：

<dependencies>
    <!-- Spring Boot LDAP Starter -->
    <dependency>
        <groupId>org.springframework.boot</groupId>
        <artifactId>spring-boot-starter-data-ldap</artifactId>
    </dependency>
    <!-- 嵌入式LDAP服务器依赖 -->
    <dependency>
        <groupId>org.apache.directory.server</groupId>
        <artifactId>apacheds-server-jndi</artifactId>
        <version>2.0.0.AM26</version>
        <scope>test</scope>
    </dependency>
    <!-- Apache Directory Shared依赖 -->
    <dependency>
        <groupId>org.apache.directory.shared</groupId>
        <artifactId>shared-ldap</artifactId>
        <version>2.0.0.AM26</version>
        <scope>test</scope>
    </dependency>
</dependencies>

2. 配置LDAP连接 #

在application.properties中配置嵌入式LDAP（用于本地测试）：

# 嵌入式LDAP基础配置
spring.ldap.embedded.base-dn=dc=example,dc=com
spring.ldap.embedded.ldif=classpath:test.ldif
spring.ldap.embedded.port=33389
spring.ldap.embedded.validation.enabled=false

# 若使用外部LDAP（如OpenLDAP），替换为以下配置
# spring.ldap.urls=ldap://localhost:389
# spring.ldap.base=dc=example,dc=com
# spring.ldap.username=cn=admin,dc=example,dc=com
# spring.ldap.password=admin

同时在src/main/resources下创建test.ldif文件初始化LDAP结构：

dn: dc=example,dc=com
objectclass: top
objectclass: domain
dc: example

dn: ou=users,dc=example,dc=com
objectclass: top
objectclass: organizationalUnit
ou: users

3. 完善LdapClient类 #

添加@Component注解让Spring管理Bean，补充异常处理和删除方法，优化原有逻辑：

import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.core.env.Environment;
import org.springframework.ldap.core.AttributesMapper;
import org.springframework.ldap.core.DirContextAdapter;
import org.springframework.ldap.core.DirContextOperations;
import org.springframework.ldap.core.LdapTemplate;
import org.springframework.ldap.core.support.LdapNameBuilder;
import org.springframework.stereotype.Component;

import javax.naming.Name;
import javax.naming.NamingException;
import java.security.MessageDigest;
import java.security.NoSuchAlgorithmException;
import java.util.Base64;
import java.util.List;

@Component
public class LdapClient {

    @Autowired
    private Environment env;

    @Autowired
    private LdapTemplate ldapTemplate;

    // 用户认证：成功返回true，失败返回false
    public boolean authenticate(String username, String password) {
        try {
            String userDn = "cn=" + username + ",ou=users," + env.getRequiredProperty("spring.ldap.embedded.base-dn");
            ldapTemplate.getContextSource().getContext(userDn, password);
            return true;
        } catch (NamingException e) {
            return false;
        }
    }

    // 模糊查询用户名
    public List<String> searchUsers(String usernamePattern) {
        return ldapTemplate.search(
                "ou=users",
                "cn=*" + usernamePattern + "*",
                (AttributesMapper<String>) attrs -> (String) attrs.get("cn").get()
        );
    }

    // 创建用户，支持自定义 lastName
    public void createUser(String username, String password, String lastName) {
        Name dn = LdapNameBuilder
                .newInstance()
                .add("ou", "users")
                .add("cn", username)
                .build();
        DirContextAdapter context = new DirContextAdapter(dn);

        context.setAttributeValues("objectclass", new String[]{"top", "person", "organizationalPerson", "inetOrgPerson"});
        context.setAttributeValue("cn", username);
        context.setAttributeValue("sn", lastName != null ? lastName : username);
        context.setAttributeValue("userPassword", digestSHA(password));

        ldapTemplate.bind(context);
    }

    // 修改用户密码
    public void modifyUserPassword(String username, String newPassword) {
        try {
            Name dn = LdapNameBuilder
                    .newInstance()
                    .add("ou", "users")
                    .add("cn", username)
                    .build();
            DirContextOperations context = ldapTemplate.lookupContext(dn);
            context.setAttributeValue("userPassword", digestSHA(newPassword));
            ldapTemplate.modifyAttributes(context);
        } catch (NamingException e) {
            throw new RuntimeException("用户不存在或修改失败", e);
        }
    }

    // 删除用户
    public void deleteUser(String username) {
        Name dn = LdapNameBuilder
                .newInstance()
                .add("ou", "users")
                .add("cn", username)
                .build();
        ldapTemplate.unbind(dn);
    }

    // SHA加密密码
    private String digestSHA(String password) {
        try {
            MessageDigest digest = MessageDigest.getInstance("SHA");
            digest.update(password.getBytes());
            return "{SHA}" + Base64.getEncoder().encodeToString(digest.digest());
        } catch (NoSuchAlgorithmException e) {
            throw new RuntimeException("密码加密失败", e);
        }
    }
}

4. 移除冗余配置 #

如果仅用于学习LDAP CRUD，不需要Spring Security认证功能，可以暂时注释或删除项目中的SecurityConfig类，避免嵌入式LDAP启动冲突。

三、替代实现方案 #

1. Spring Data LDAP Repositories #

通过定义Repository接口简化CRUD操作，无需手动编写LdapTemplate代码：

• 定义User实体类：

import org.springframework.ldap.odm.annotations.Attribute;
import org.springframework.ldap.odm.annotations.Entry;
import org.springframework.ldap.odm.annotations.Id;

import javax.naming.Name;

@Entry(base = "ou=users", objectClasses = {"top", "person", "organizationalPerson", "inetOrgPerson"})
public class User {
    @Id
    private Name dn;

    @Attribute(name = "cn")
    private String username;

    @Attribute(name = "sn")
    private String lastName;

    @Attribute(name = "userPassword")
    private String password;

    // getter、setter方法
}

• 定义Repository接口：

import org.springframework.data.ldap.repository.LdapRepository;

public interface UserRepository extends LdapRepository<User> {
    User findByUsername(String username);
}

使用时直接注入UserRepository，即可调用save()、findById()、delete()等方法完成CRUD。

2. 原生JNDI API #

直接通过JNDI的DirContext操作LDAP，适合需要底层控制的场景，但代码量较大，需手动处理连接、异常等逻辑。

内容的提问来源于stack exchange，提问作者Pl4g