import org.ldaptive.ResultCode; //导入依赖的package包/类
/**
 * Downloads a CRL from given LDAP url.
 *
 * @param r the resource that is the ldap url.
 * @return the x 509 cRL
 * @throws Exception if connection to ldap fails, or attribute to get the revocation list is unavailable
 */
protected X509CRL fetchCRLFromLdap(final Object r) throws Exception {
    try {
        final String ldapURL = r.toString();
        logger.debug("Fetching CRL from ldap {}", ldapURL);

        final Response<SearchResult> result = performLdapSearch(ldapURL);
        if (result.getResultCode() == ResultCode.SUCCESS) {
            final LdapEntry entry = result.getResult().getEntry();
            final LdapAttribute attribute = entry.getAttribute();

            logger.debug("Located entry [{}]. Retrieving first attribute [{}]",
                    entry, attribute);
            return fetchX509CRLFromAttribute(attribute);
        } else {
            logger.debug("Failed to execute the search [{}]", result);
        }

        throw new CertificateException("Failed to establish a connection ldap and search.");

    } catch (final LdapException e) {
        logger.error(e.getMessage(), e);
        throw new CertificateException(e);
    }
}
 

import org.ldaptive.ResultCode; //导入依赖的package包/类
/**
 * Downloads a CRL from given LDAP url.
 *
 * @param r the resource that is the ldap url.
 * @return the x 509 cRL
 * @throws IOException          the exception thrown if resources cant be fetched
 * @throws CRLException         the exception thrown if resources cant be fetched
 * @throws CertificateException if connection to ldap fails, or attribute to get the revocation list is unavailable
 */
protected X509CRL fetchCRLFromLdap(final Object r) throws CertificateException, IOException, CRLException {
    try {
        final String ldapURL = r.toString();
        LOGGER.debug("Fetching CRL from ldap [{}]", ldapURL);

        final Response<SearchResult> result = performLdapSearch(ldapURL);
        if (result.getResultCode() == ResultCode.SUCCESS) {
            final LdapEntry entry = result.getResult().getEntry();
            final LdapAttribute attribute = entry.getAttribute(this.certificateAttribute);

            if (attribute.isBinary()) {
                LOGGER.debug("Located entry [{}]. Retrieving first attribute [{}]", entry, attribute);
                return fetchX509CRLFromAttribute(attribute);
            }
            LOGGER.warn("Found certificate attribute [{}] but it is not marked as a binary attribute", this.certificateAttribute);
        }

        LOGGER.debug("Failed to execute the search [{}]", result);
        throw new CertificateException("Failed to establish a connection ldap and search.");

    } catch (final LdapException e) {
        LOGGER.error(e.getMessage(), e);
        throw new CertificateException(e.getMessage());
    }
}
 

import org.ldaptive.ResultCode; //导入依赖的package包/类
/**
 * Execute delete operation boolean.
 *
 * @param connectionFactory the connection factory
 * @param entry             the entry
 * @return the boolean
 * @throws LdapException the ldap exception
 */
public static boolean executeDeleteOperation(final ConnectionFactory connectionFactory,
                                             final LdapEntry entry) throws LdapException {

    try (Connection connection = createConnection(connectionFactory)) {
        final DeleteOperation delete = new DeleteOperation(connection);
        final DeleteRequest request = new DeleteRequest(entry.getDn());
        request.setReferralHandler(new DeleteReferralHandler());
        final Response<Void> res = delete.execute(request);
        return res.getResultCode() == ResultCode.SUCCESS;
    } catch (final LdapException e) {
        LOGGER.error(e.getMessage(), e);
    }
    return false;
}
 

import org.ldaptive.ResultCode; //导入依赖的package包/类
/**
 * Searches the ldap instance for the attribute value.
 *
 * @param remoteIp the remote ip
 * @return the boolean
 */
protected boolean executeSearchForSpnegoAttribute(final String remoteIp) {
    Connection connection = null;
    final String remoteHostName = getRemoteHostName(remoteIp);
    logger.debug("Resolved remote hostname {} based on ip {}",
            remoteHostName, remoteIp);

    try {
        connection = createConnection();
        final Operation searchOperation = new SearchOperation(connection);
        this.searchRequest.getSearchFilter().setParameter(0, remoteHostName);

        logger.debug("Using search filter {} on baseDn {}",
                this.searchRequest.getSearchFilter().format(),
                this.searchRequest.getBaseDn());

        final Response<SearchResult> searchResult = searchOperation.execute(this.searchRequest);
        if (searchResult.getResultCode() == ResultCode.SUCCESS) {
            return processSpnegoAttribute(searchResult);
        }
        throw new RuntimeException("Failed to establish a connection ldap. "
                + searchResult.getMessage());

    } catch (final LdapException e) {
        logger.error(e.getMessage(), e);
        throw new RuntimeException(e);
    } finally {
        if (connection != null) {
            connection.close();
        }
    }
}
 

import org.ldaptive.ResultCode; //导入依赖的package包/类
/**
 * Execute delete operation boolean.
 *
 * @param connectionFactory the connection factory
 * @param entry             the entry
 * @return true/false
 * @throws LdapException the ldap exception
 */
public static boolean executeDeleteOperation(final ConnectionFactory connectionFactory, final LdapEntry entry) throws LdapException {
    try (Connection connection = createConnection(connectionFactory)) {
        final DeleteOperation delete = new DeleteOperation(connection);
        final DeleteRequest request = new DeleteRequest(entry.getDn());
        request.setReferralHandler(new DeleteReferralHandler());
        final Response<Void> res = delete.execute(request);
        return res.getResultCode() == ResultCode.SUCCESS;
    } catch (final LdapException e) {
        LOGGER.error(e.getMessage(), e);
    }
    return false;
}
 

import org.ldaptive.ResultCode; //导入依赖的package包/类
/**
 * Searches the ldap instance for the attribute value.
 *
 * @param remoteIp the remote ip
 * @return true/false
 */
protected boolean executeSearchForSpnegoAttribute(final String remoteIp) {
    Connection connection = null;
    final String remoteHostName = getRemoteHostName(remoteIp);
    LOGGER.debug("Resolved remote hostname [{}] based on ip [{}]", remoteHostName, remoteIp);

    try {
        connection = createConnection();
        final Operation searchOperation = new SearchOperation(connection);
        this.searchRequest.getSearchFilter().setParameter(0, remoteHostName);

        LOGGER.debug("Using search filter [{}] on baseDn [{}]",
                this.searchRequest.getSearchFilter().format(),
                this.searchRequest.getBaseDn());

        final Response<SearchResult> searchResult = searchOperation.execute(this.searchRequest);
        if (searchResult.getResultCode() == ResultCode.SUCCESS) {
            return processSpnegoAttribute(searchResult);
        }
        throw new RuntimeException("Failed to establish a connection ldap. " + searchResult.getMessage());
    } catch (final LdapException e) {
        LOGGER.error(e.getMessage(), e);
        throw Throwables.propagate(e);
    } finally {
        if (connection != null) {
            connection.close();
        }
    }
}