<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html>
<head profile="http://internetalchemy.org/2003/02/profile">
<link rel="foaf" type="application/rdf+xml" title="FOAF" href="http://www.openlinksw.com/dataspace/uda/about.rdf" />
<link rel="schema.dc" href="http://purl.org/dc/elements/1.1/" />
<meta name="dc.title" content="17. Internet Services" />
<meta name="dc.subject" content="17. Internet Services" />
<meta name="dc.creator" content="OpenLink Software Documentation Team ; " />
<meta name="dc.copyright" content="OpenLink Software, 1999 - 2009" />
<link rel="top" href="index.html" title="OpenLink Virtuoso Universal Server: Documentation" />
<link rel="search" href="/doc/adv_search.vspx" title="Search OpenLink Virtuoso Universal Server: Documentation" />
<link rel="parent" href="internetservices.html" title="Chapter Contents" />
<link rel="prev" href="vspguide.html" title="VSP Guide" />
<link rel="next" href="contents.html" title="Contents" />
<link rel="shortcut icon" href="../images/misc/favicon.ico" type="image/x-icon" />
<link rel="stylesheet" type="text/css" href="doc.css" />
<link rel="stylesheet" type="text/css" href="/doc/translation.css" />
<title>17. Internet Services</title>
<meta http-equiv="Content-Type" content="text/xhtml; charset=UTF-8" />
<meta name="author" content="OpenLink Software Documentation Team ; " />
<meta name="copyright" content="OpenLink Software, 1999 - 2009" />
<meta name="keywords" content="" />
<meta name="GENERATOR" content="OpenLink XSLT Team" />
</head>
<body>
<div id="header">
<a name="ldap" />
<img src="../images/misc/logo.jpg" alt="" />
<h1>17. Internet Services</h1>
</div>
<div id="navbartop">
<div>
<a class="link" href="internetservices.html">Chapter Contents</a> | <a class="link" href="vspguide.html" title="VSP Guide">Prev</a> | <a class="link" href="freetext.html" title="Free Text Search">Next</a>
</div>
</div>
<div id="currenttoc">
<form method="post" action="/doc/adv_search.vspx">
<div class="search">Keyword Search: <br />
<input type="text" name="q" /> <input type="submit" name="go" value="Go" />
</div>
</form>
<div>
<a href="http://www.openlinksw.com/">www.openlinksw.com</a>
</div>
<div>
<a href="http://docs.openlinksw.com/">docs.openlinksw.com</a>
</div>
<br />
<div>
<a href="index.html">Book Home</a>
</div>
<br />
<div>
<a href="contents.html">Contents</a>
</div>
<div>
<a href="preface.html">Preface</a>
</div>
<br />
<div class="selected">
<a href="internetservices.html">Internet Services</a>
</div>
<br />
<div>
<a href="webdavserver.html">WebDAV Server</a>
</div>
<div>
<a href="uriqa.html">URIQA Semantic Web Enabler</a>
</div>
<div>
<a href="maildelivstore.html">Mail Delivery & Storage</a>
</div>
<div>
<a href="nntpnewsgroups.html">NNTP Newsgroups</a>
</div>
<div>
<a href="mime.html">MIME & Internet Messages</a>
</div>
<div>
<a href="ftpservices.html">FTP Services</a>
</div>
<div>
<a href="vspguide.html">VSP Guide</a>
</div>
<div class="selected">
<a href="ldap.html">LDAP</a>
<div>
<a href="#vldapclient" title="LDAP Client">LDAP Client</a>
<a href="#openldapinstall" title="LDAP Server">LDAP Server</a>
</div>
</div>
<br />
</div>
<div id="text">
<a name="ldap" />
<h2>17.8. LDAP</h2>
<p>The Lightweight Directory Access Protocol (LDAP) is a protocol for
accessing online directory services. It runs directly over TCP and can be
used to access a standalone LDAP directory service or a directory service
maintained by X.500. A directory is type of database that stores information
that is read more often that written to and so services are typically
geared for high volume read access and offer simpler transaction
support than general purpose databases. The LDAP directory service model is based
on entries. An entry is a collection of attributes that has a "distinguished
name" (DN). The DN is used to refer to the entry unambiguously. Each of the
entry's attributes has a type and one or more values. The types are typically
mnemonic strings, like "cn" for common name, or "mail" for email address.
The values depend on what type of attribute it is: an email attribute might
contain the string value "foo@bar.org". A jpegPhoto attribute would contain
a photograph in binary JPEG format.</p>
<p>LDAP directory entries are arranged in a hierarchical tree-like
structure that may reflect political, geographic and/or organizational
boundaries. Hence, entries representing countries appear at the top of
the tree, below them are entries representing states or national
organizations, then, entries representing people, printers, documents,
anything else...</p>
<p>LDAP provides methods for authentication. Directories can be made
accessible to the general public or protected however the case may be.</p>
<p>LDAP is made for finding people and resources on a network. It provides
a completely different functionality from web searches such as yahoo or
webcrawler, which work simply by text matching and often return many thousand's
of entries. Using an LDAP directory to locate something however, if you know
the approximate location of where it is, such as what organization and country
it is in, then you can do a search and return much fewer entries. LDAP is
a vendor independent open protocol. The fact that organizations can alter it
to their own needs is key. Also, large companies can use it as the basis for
their own more complex directory servers.</p>
<p>There are common misconceptions about the role of LDAP.
LDAP is not intended as a replacement for local databases. They are not
built to be added and modified too easily and thus would not work in a
situation such as an airline reservation system. Also, LDAP is not meant
to be a replacement for DNS. DNS is a specialized well used service on the
Internet for matching IP addresses to real names. However databases and DNS
and LDAP like most Internet services work very well in collaboration.</p>
<p>Virtuoso has the ability to act as an LDAP client, using built-in
functions, and has been tested as a back end for the OpenLDAP server.</p>
<a name="vldapclient" />
<h3>17.8.1. LDAP Client</h3>
<p>Virtuoso provides four functions for accessing an LDAP Directory
Service:</p>
<ul>
<li>
<a href="fn_ldap_search.html">ldap_search()</a>
</li>
<li>
<a href="fn_ldap_delete.html">ldap_delete()</a>
</li>
<li>
<a href="fn_ldap_add.html">ldap_add()</a>
</li>
<li>
<a href="fn_ldap_modify.html">ldap_modify()</a>
</li>
</ul>
<p>You can call each function independently. Each
invocation of a function creates a separate LDAP session which is closed at
the end of the operation.</p>
<p>URLs beginning with <span class="computeroutput">ldaps://</span> invoke a
non-conditional SSL operation. Such URLs cannot be used with the
<span class="computeroutput">try_tls</span> flag set. If the URL does not contain a
port number then Virtuoso will use the default port number 389 for <ldap://>
and port number 636 for <ldaps://>.</p>
<p>The <span class="computeroutput">username</span> and <span class="computeroutput">password</span>
optional parameters are used to bind LDAP connections using basic authentication.
If the operation is permitted to all users then you can leave these parameters
out.</p>
<br />
<a name="openldapinstall" />
<h3>17.8.2. LDAP Server</h3>
<p>Virtuoso is not an LDAP server but can easily provide a data
back-end to one, such as OpenLDAP. This section explains how to incorporate
OpenLDAP with Virtuoso on the Linux platform. For other platforms the
installation of OpenLDAP and configuration of the ODBC data source may differ.</p>
<ol>
<li>
<p>download the OpenLDAP distribution from <a href="www.openldap.org">OpenLDAP.org</a>.</p>
</li>
<li>
<p>Build OpenLDAP with the --enable-sql option.</p>
</li>
<li>
<p>You may need the iODBC library installed, which can be obtained from <a href="www.iodbc.org">iODBC.org</a>.</p>
</li>
<li>
<p>install the LDAP server using: make install</p>
</li>
<li>
<p>copy the following text into the slapd.conf</p>
<div>
<pre class="programlisting">
>>>>
include /usr/local/etc/openldap/schema/core.schema
pidfile /usr/local/var/slapd.pid
argsfile /usr/local/var/slapd.args
database sql
suffix "c=BG"
rootdn "cn=root,o=opl,c=US"
rootpw secret
dbname 1111
dbuser dba
dbpasswd dba
subtree_cond "UPPER(ldap_entries.dn) LIKE CONCAT('%',UPPER(?))"
upper_func UPPER
access to attr=userPassword
by self write
by anonymous auth
by dn="cn=root,o=opl,c=BG" write
by * none
access to *
by self write
by anonymous auth
by * read
<<<<
</pre>
</div>
</li>
<li>
<p>Configure the ODBC data source named '1111' for your running Virtuoso server.</p>
</li>
<li>
<p>Apply the virt_back.sql script against a running virtuoso server, for example with isql. </p>
</li>
<li>
<p>If you can also apply the virt_testdb.sql to insert some demo schema and entries into the DB.</p>
</li>
<li>
<p>Export ODBCINI variable: export ODBCINI=<location of your odbc.ini>.</p>
</li>
<li>
<p>Start the slapd executable with debug option: 'slapd -d5' to ensure that all settings are correct.</p>
</li>
</ol>
<a name="virtbacksql" />
<h4>17.8.2.1. The virt_back.sql Script</h4>
<div>
<pre class="programlisting">
create table ldap_oc_mappings (
id integer identity primary key,
name varchar (64) not null,
keytbl varchar (64) not null,
keycol varchar (64) not null,
create_proc varchar (255),
delete_proc varchar (255),
expect_return integer not null
);
create unique index ldap_oc_mappings_name on ldap_oc_mappings (name);
create table ldap_attr_mappings (
id integer identity primary key,
oc_map_id integer not null references ldap_oc_mappings(id),
name varchar (255) not null,
sel_expr varchar (255) not null,
from_tbls varchar (255) not null,
join_where varchar (255),
add_proc varchar (255),
modify_proc varchar (255),
delete_proc varchar (255),
param_order integer not null,
expect_return integer not null
);
create table ldap_entries (
id integer identity primary key,
dn varchar (255) not null ,
oc_map_id integer not null references ldap_oc_mappings(id),
parent integer not null ,
keyval integer not null
);
create unique index ldap_entries_oc_map_id_keyval on ldap_entries (oc_map_id, keyval);
create unique index ldap_entries_dn on ldap_entries (dn);
create table ldap_referrals
(
entry_id integer not null references ldap_entries(id),
url varchar not null
);
create index entry_idx on ldap_referrals(entry_id);
create table ldap_entry_objclasses
(
entry_id integer not null references ldap_entries(id),
oc_name varchar(64)
);
create index entry_idx_entry_id on ldap_entry_objclasses(entry_id);
</pre>
</div>
<br />
<a name="virttestdbsql" />
<h4>17.8.2.2. The virt_testdb.sql Script</h4>
<div>
<pre class="programlisting">
create table authors_docs (
pers_id integer not null ,
doc_id integer not null,
primary key (pers_id, doc_id)
);
create table documents (
id integer identity not null ,
abstract varchar (255) null ,
title varchar (255) null ,
body binary (255) null,
primary key (id)
);
create table institutes (
id integer identity not null ,
name varchar (255) not null,
primary key (id)
);
create table persons (
id integer identity not null ,
name varchar (255) null,
sname varchar (255) null,
email varchar (255) null,
passw varchar (255) null,
primary key (id)
);
create table phones (
id integer identity not null ,
phone varchar (255) not null ,
pers_id integer not null,
primary key (id)
);
insert into institutes (id,name) values (1,'');
insert into institutes (id,name) values (2,'opl');
insert into persons (id,name,sname,email,passw)
values (1,'Mitko Iliev', 'Iliev', 'imitko@openlinksw.com', 'abc');
insert into persons (id,name,sname,email,passw)
values (2,'George Kodinov', 'Kodinov', 'gkodinov@openlinksw.com', 'cde');
insert into persons (id,name,sname,email,passw)
values (3,'Zdravko Tashev', 'Tashev', 'ztashev@openlinksw.com', 'efg');
insert into phones (id,phone,pers_id) values (1,'032-947020',1);
insert into phones (id,phone,pers_id) values (2,'032-633710',1);
insert into phones (id,phone,pers_id) values (3,'032-947020',2);
insert into documents (id,abstract,title) values (1,'abstract1','book1');
insert into documents (id,abstract,title) values (2,'abstract2','book2');
insert into authors_docs (pers_id,doc_id) values (1,1);
insert into authors_docs (pers_id,doc_id) values (1,2);
insert into authors_docs (pers_id,doc_id) values (2,1);
-- LDAP mappings
insert into ldap_oc_mappings (id,name,keytbl,keycol,create_proc,delete_proc,expect_return)
values (1,'inetorgperson','persons','id','{call create_person(?)}','{call delete_person(?)}',0);
insert into ldap_oc_mappings (id,name,keytbl,keycol,create_proc,delete_proc,expect_return)
values (2,'document','documents','id','{call create_document(?)}','{call delete_document(?)}',0);
insert into ldap_oc_mappings (id,name,keytbl,keycol,create_proc,delete_proc,expect_return)
values (3,'organization','institutes','id','{call create_org(?)}','{call delete_org(?)}',0);
insert into ldap_attr_mappings
(id, oc_map_id, name, sel_expr, from_tbls, join_where, add_proc,
modify_proc, delete_proc, param_order, expect_return)
values (1,1,'cn','persons.name','persons',NULL,'{call set_person_name(?,?)}', NULL,NULL,0,0);
insert into ldap_attr_mappings
(id, oc_map_id, name, sel_expr, from_tbls, join_where, add_proc,
modify_proc, delete_proc, param_order, expect_return)
values (2,1,'telephoneNumber','phones.phone','persons,phones', 'phones.pers_id=persons.id',
'{call add_phone(?,?)}', NULL,'{call delete_phone(?,?)}',0,0);
insert into ldap_attr_mappings
(id,oc_map_id,name,sel_expr,from_tbls,join_where,add_proc,modify_proc,
delete_proc,param_order,expect_return)
values (3,1,'sn','persons.sname','persons',NULL,
'{call set_person_sname(?,?)}', NULL,NULL,0,0);
insert into ldap_attr_mappings
(id,oc_map_id,name,sel_expr,from_tbls,join_where,add_proc,modify_proc,
delete_proc,param_order,expect_return)
values (10,1,'mail','persons.email','persons',NULL,
'{call set_email(?,?)}', NULL,NULL,0,0);
insert into ldap_attr_mappings
(id,oc_map_id,name,sel_expr,from_tbls,join_where,add_proc,modify_proc,
delete_proc,param_order,expect_return)
values (10,1,'userPassword','persons.passw','persons',NULL,
'{call set_pwd (?,?)}', NULL,NULL,0,0);
insert into ldap_attr_mappings
(id,oc_map_id,name,sel_expr,from_tbls,join_where,add_proc,modify_proc,
delete_proc,param_order,expect_return)
values (4,2,'description','documents.abstract','documents',NULL,
'{call set_doc_abstract(?,?)}', NULL,NULL,0,0);
insert into ldap_attr_mappings
(id,oc_map_id,name,sel_expr,from_tbls,join_where,add_proc,modify_proc,
delete_proc,param_order,expect_return)
values (5,2,'documentTitle','documents.title','documents',NULL,
'{call set_doc_title(?,?)}', NULL,NULL,0,0);
insert into ldap_attr_mappings
(id,oc_map_id,name,sel_expr,from_tbls,join_where,add_proc,modify_proc,
delete_proc,param_order,expect_return)
values (7,3,'o','institutes.name','institutes',NULL,
'{call set_org_name(?,?)}', NULL,NULL,0,0);
insert into ldap_attr_mappings
(id,oc_map_id,name,sel_expr,from_tbls,join_where,add_proc,modify_proc,
delete_proc,param_order,expect_return)
values (8,1,'documentDN','ldap_entries.dn','ldap_entries,documents,authors_docs,persons',
'ldap_entries.keyval=documents.id AND ldap_entries.oc_map_id=2 AND
authors_docs.doc_id=documents.id AND authors_docs.pers_id=persons.id',
'{call make_doc_link(?,?)}',NULL,'{call del_doc_link(?,?)}',0,0);
insert into ldap_attr_mappings
(id,oc_map_id,name,sel_expr,from_tbls,join_where,add_proc,modify_proc,
delete_proc,param_order,expect_return)
values (9,2,'documentAuthor','ldap_entries.dn','ldap_entries,documents,
authors_docs,persons','ldap_entries.keyval=persons.id AND ldap_entries.oc_map_id=1
AND authors_docs.doc_id=documents.id AND authors_docs.pers_id=persons.id',
'{call make_author_link(?,?)}',NULL,'{call del_author_link(?,?)}',0,0);
-- entries
insert into ldap_entries (id,dn,oc_map_id,parent,keyval)
values (1,'c=US',3,0,1);
insert into ldap_entries (id,dn,oc_map_id,parent,keyval)
values (2,'o=opl,c=US',3,1,2);
insert into ldap_entries (id,dn,oc_map_id,parent,keyval)
values (3,'cn=Mitko Iliev,o=opl,c=US',1,2,1);
insert into ldap_entries (id,dn,oc_map_id,parent,keyval)
values (4,'cn=George Kodinov,o=opl,c=US',1,2,2);
insert into ldap_entries (id,dn,oc_map_id,parent,keyval)
values (5,'cn=Zdravko Tashev,o=opl,c=US',1,2,3);
insert into ldap_entries (id,dn,oc_map_id,parent,keyval)
values (6,'documentTitle=book1,o=opl,c=US',2,2,1);
insert into ldap_entries (id,dn,oc_map_id,parent,keyval)
values (7,'documentTitle=book2,o=opl,c=US',2,2,2);
-- testDB support procedures
CREATE PROCEDURE add_phone (in _pers_id int, in _phone varchar(255))
{
INSERT INTO phones (pers_id,phone) VALUES (_pers_id,_phone);
};
CREATE PROCEDURE create_person (inout _keyval integer)
{
INSERT INTO persons (name) VALUES ('');
_keyval := (SELECT MAX(id) FROM persons);
};
CREATE PROCEDURE delete_person (in _keyval integer)
{
DELETE FROM phones WHERE pers_id=_keyval;
DELETE FROM authors_docs WHERE pers_id=_keyval;
DELETE FROM persons WHERE id=_keyval;
};
CREATE PROCEDURE create_org (out _keyval integer)
{
INSERT INTO institutes (name) VALUES ('');
_keyval:=(SELECT MAX(id) FROM institutes);
};
CREATE PROCEDURE create_document (out _keyval integer)
{
INSERT INTO documents (title) VALUES ('');
_keyval:=(SELECT MAX(id) FROM documents);
};
CREATE PROCEDURE delete_org (in _keyval integer)
{
DELETE FROM institutes WHERE id=_keyval;
};
CREATE PROCEDURE delete_document (in _keyval integer)
{
DELETE FROM authors_docs WHERE doc_id=_keyval;
DELETE FROM documents WHERE id=_keyval;
};
CREATE PROCEDURE delete_phone (in _keyval integer, in _phone varchar(64) )
{
DELETE FROM phones WHERE pers_id=_keyval AND phone=_phone;
};
CREATE PROCEDURE set_person_name (in _keyval integer, in _new_name varchar(255))
{
UPDATE persons SET name=_new_name WHERE id=_keyval;
};
CREATE PROCEDURE set_person_sname (in _keyval integer, in _new_name varchar(255))
{
UPDATE persons SET sname=_new_name WHERE id=_keyval;
};
CREATE PROCEDURE set_email (in _keyval integer, in _mail varchar(255))
{
UPDATE persons SET email=_mail WHERE id=_keyval;
};
CREATE PROCEDURE set_pwd (in _keyval integer, in _mail varchar(255))
{
UPDATE persons SET passw=_mail WHERE id=_keyval;
};
CREATE PROCEDURE set_org_name (in _keyval integer, in _new_name varchar(255))
{
UPDATE institutes SET name=_new_name WHERE id=_keyval;
};
CREATE PROCEDURE set_doc_title ( in _keyval integer, in _new_title varchar(255) )
{
UPDATE documents SET title=_new_title WHERE id=_keyval;
};
CREATE PROCEDURE set_doc_abstract (in _keyval integer, in _new_abstract varchar(255) )
{
UPDATE documents SET abstract=_new_abstract WHERE id=_keyval;
};
CREATE PROCEDURE make_author_link (in _keyval integer, in _author_dn varchar(255) )
{
DECLARE _per_id integer;
_per_id := (SELECT keyval FROM ldap_entries
WHERE oc_map_id=1 AND dn=_author_dn);
IF (_per_id IS NOT NULL)
INSERT INTO authors_docs (doc_id,pers_id) VALUES (_keyval,_per_id);
};
CREATE PROCEDURE make_doc_link (in _keyval integer, in _doc_dn varchar(255) )
{
DECLARE _doc_id integer;
_doc_id := (SELECT keyval FROM ldap_entries
WHERE oc_map_id=2 AND dn=_doc_dn);
IF (_doc_id IS NOT NULL)
INSERT INTO authors_docs (pers_id,doc_id) VALUES (_keyval,_doc_id);
};
CREATE PROCEDURE del_doc_link (in _keyval integer, in _doc_dn varchar(255) )
{
DECLARE _doc_id integer;
_doc_id := (SELECT keyval FROM ldap_entries
WHERE oc_map_id=2 AND dn=_doc_dn);
IF (_doc_id IS NOT NULL)
DELETE FROM authors_docs WHERE pers_id=_keyval AND doc_id=_doc_id;
};
CREATE PROCEDURE del_author_link (in _keyval integer, in _author_dn varchar(255) )
{
DECLARE _per_id integer;
_per_id := (SELECT keyval FROM ldap_entries
WHERE oc_map_id=1 AND dn=_author_dn);
IF (_per_id IS NOT NULL)
DELETE FROM authors_docs WHERE doc_id=_keyval AND pers_id=_per_id;
};
</pre>
</div>
<br />
<br />
<table border="0" width="90%" id="navbarbottom">
<tr>
<td align="left" width="33%">
<a href="vspguide.html" title="VSP Guide">Previous</a>
<br />VSP Guide</td>
<td align="center" width="34%">
<a href="internetservices.html">Chapter Contents</a>
</td>
<td align="right" width="33%">
<a href="freetext.html" title="Free Text Search">Next</a>
<br />Contents of Free Text Search</td>
</tr>
</table>
</div>
<div id="footer">
<div>Copyright© 1999 - 2009 OpenLink Software All rights reserved.</div>
<div id="validation">
<a href="http://validator.w3.org/check/referer">
<img src="http://www.w3.org/Icons/valid-xhtml10" alt="Valid XHTML 1.0!" height="31" width="88" />
</a>
<a href="http://jigsaw.w3.org/css-validator/">
<img src="http://jigsaw.w3.org/css-validator/images/vcss" alt="Valid CSS!" height="31" width="88" />
</a>
</div>
</div>
</body>
</html>
distrib
>
Fedora
>
14
>
x86_64
>
media
>
updates
>
by-pkgid
>
71d40963b505df4524269198e237b3e3
>
files
>
792
