急急急~~~LDAP操作AD域问题

[chengp...]

直接上代码请大神指点哈！！！！！！

public static void main(String[] args) {
			String adminName = "cn=Administrator,cn=Users,dc=MCIPT,dc=COM";
			String adminpassword = "Cp1322716";
			
			String keystore = "E:\\openProject\\JDK6\\bin\\sec.keystore";
			String keypassword = "123456";
			System.setProperty("javax.net.ssl.trustStore",keystore);
			System.setProperty("javax.net.ssl.trustStorePassword", keypassword);
			
			String userName = "CN=jack,OU=IT,DC=MCIPT,DC=COM";
			String newpassword = "test";
			
			Hashtable env = new Hashtable();
			env.put(Context.INITIAL_CONTEXT_FACTORY,"com.sun.jndi.ldap.LdapCtxFactory");
			env.put(Context.SECURITY_AUTHENTICATION,"simple");
			env.put(Context.SECURITY_PRINCIPAL,adminName);
			env.put(Context.SECURITY_CREDENTIALS,adminpassword);
			env.put(Context.SECURITY_PROTOCOL,"ssl");
			String ldapURL = "LDAP://192.168.139.131:636";
			env.put(Context.PROVIDER_URL,ldapURL);
			
			try{
				LdapContext ctx = new InitialLdapContext(env,null);
				ModificationItem[] mods = new ModificationItem[1];
				String newQuotedPassword = "\"" + newpassword + "\"";
				byte[] newUnicodePassword = newQuotedPassword.getBytes("UTF-16LE");
				mods[0] = new ModificationItem(DirContext.REPLACE_ATTRIBUTE,new BasicAttribute("unicodePwd",newUnicodePassword));
				ctx.modifyAttributes(userName, mods); 
				System.out.println(" sss" + userName);
				ctx.close();
				System.out.println("Problem encoding password222: ");
			} catch (Exception e) { 
				e.printStackTrace(); 
			}
		}

报错信息：
javax.naming.CommunicationException: simple bind failed: 192.168.139.131:636 [Root exception is javax.net.ssl.SSLException: Connection has been shutdown: javax.net.ssl.SSLException: java.net.SocketException: Connection reset]
at com.sun.jndi.ldap.LdapClient.authenticate(Unknown Source)
at com.sun.jndi.ldap.LdapCtx.connect(Unknown Source)
at com.sun.jndi.ldap.LdapCtx.<init>(Unknown Source)
at com.sun.jndi.ldap.LdapCtxFactory.getUsingURL(Unknown Source)
at com.sun.jndi.ldap.LdapCtxFactory.getUsingURLs(Unknown Source)
at com.sun.jndi.ldap.LdapCtxFactory.getLdapCtxInstance(Unknown Source)
at com.sun.jndi.ldap.LdapCtxFactory.getInitialContext(Unknown Source)
at javax.naming.spi.NamingManager.getInitialContext(Unknown Source)
at javax.naming.InitialContext.getDefaultInitCtx(Unknown Source)
at javax.naming.InitialContext.init(Unknown Source)
at javax.naming.ldap.InitialLdapContext.<init>(Unknown Source)
at ldap.Test.main(Test.java:35)
Caused by: javax.net.ssl.SSLException: Connection has been shutdown: javax.net.ssl.SSLException: java.net.SocketException: Connection reset
at com.sun.net.ssl.internal.ssl.SSLSocketImpl.checkEOF(Unknown Source)
at com.sun.net.ssl.internal.ssl.SSLSocketImpl.checkWrite(Unknown Source)
at com.sun.net.ssl.internal.ssl.AppOutputStream.write(Unknown Source)
at java.io.BufferedOutputStream.flushBuffer(Unknown Source)
at java.io.BufferedOutputStream.flush(Unknown Source)
at com.sun.jndi.ldap.Connection.writeRequest(Unknown Source)
at com.sun.jndi.ldap.Connection.writeRequest(Unknown Source)
at com.sun.jndi.ldap.LdapClient.ldapBind(Unknown Source)
... 12 more
Caused by: javax.net.ssl.SSLException: java.net.SocketException: Connection reset
at com.sun.net.ssl.internal.ssl.Alerts.getSSLException(Unknown Source)
at com.sun.net.ssl.internal.ssl.SSLSocketImpl.fatal(Unknown Source)
at com.sun.net.ssl.internal.ssl.SSLSocketImpl.fatal(Unknown Source)
at com.sun.net.ssl.internal.ssl.SSLSocketImpl.handleException(Unknown Source)
at com.sun.net.ssl.internal.ssl.SSLSocketImpl.handleException(Unknown Source)
at com.sun.net.ssl.internal.ssl.AppInputStream.read(Unknown Source)
at java.io.BufferedInputStream.fill(Unknown Source)
at java.io.BufferedInputStream.read1(Unknown Source)
at java.io.BufferedInputStream.read(Unknown Source)
at com.sun.jndi.ldap.Connection.run(Unknown Source)
at java.lang.Thread.run(Unknown Source)
Caused by: java.net.SocketException: Connection reset
at java.net.SocketInputStream.read(Unknown Source)
at com.sun.net.ssl.internal.ssl.InputRecord.readFully(Unknown Source)
at com.sun.net.ssl.internal.ssl.InputRecord.read(Unknown Source)
at com.sun.net.ssl.internal.ssl.SSLSocketImpl.readRecord(Unknown Source)
at com.sun.net.ssl.internal.ssl.SSLSocketImpl.waitForClose(Unknown Source)
at com.sun.net.ssl.internal.ssl.HandshakeOutStream.flush(Unknown Source)
at com.sun.net.ssl.internal.ssl.Handshaker.kickstart(Unknown Source)
at com.sun.net.ssl.internal.ssl.SSLSocketImpl.kickstartHandshake(Unknown Source)
at com.sun.net.ssl.internal.ssl.SSLSocketImpl.performInitialHandshake(Unknown Source)
at com.sun.net.ssl.internal.ssl.SSLSocketImpl.readDataRecord(Unknown Source)
... 6 more

说明：
env.put(Context.SECURITY_PROTOCOL,"ssl");注释掉 端口改成389可正常链接但报错LDAP: error code 53 - 0000001F: SvcErr: DSID-031A12D2//需要SSL安全连接修改密码！！！

[tianfang]

http://blog.csdn.net/penngrove/article/details/5937705

[u014595786]

Hashtable<String, String> HashEnv = new Hashtable<String, String>(); HashEnv.put(Context.SECURITY_AUTHENTICATION, "simple"); // LDAP访问安全级别(none,simple,strong) HashEnv.put(Context.SECURITY_PRINCIPAL, username); // AD的用户名 HashEnv.put(Context.SECURITY_CREDENTIALS, password ); // AD的密码 HashEnv.put(Context.INITIAL_CONTEXT_FACTORY, "com.sun.jndi.ldap.LdapCtxFactory"); // LDAP工厂类 HashEnv.put("com.sun.jndi.ldap.connect.timeout", "3000");// 连接超时设置为3秒 HashEnv.put(Context.PROVIDER_URL, " ldap://" + host + ":" + post);// 默认端口389 你就设置这几个就可以了