web2ldap - Demo
Author: michael@stroeder.com
Description: web2ldap: Demo running on public site
Keywords: LDAP, WWW, SSL gateway, Python, single sign-on, Security, Directory, PKI, LDIF, DSML

# web2ldap - Demo Demo running on public site | General <Download> <News> <Demo> <Related> Support <Commercial> <Feedback> <FAQ> Documentation <Features> <Installing> <Configuration> <Compability> <Security> <Changes> <Files> <Roadmap>

## Stand-alone mode

This demo runs as a multi-threaded stand-alone web server. The demon is not automatically started by my ISP, it might be down if the machine was rebooted. Please drop me a note in this case.

Feel free to try it with different browsers, CSS turned on and off. You're welcome to test your own LDAP hosts with this online-demo of web2ldap if they are accessible via Internet. Just type in the hostname in the input field on the Connect screen. web2ldap will try to determine the base DN/search root afterwards.

Notes about using the on-line demo:

- Please report any problems or errors! This demo reflects current development snapshot not the releases. It might be temporarily buggy.
- Do not enter confidential data! Consider installing your own web2ldap service if you want to maintain your LDAP server. ;-)
- If anything goes wrong the exceptions are internally written to a debug log file. I promise not to reveal any information found therein. However you might see accesses to your LDAP host by me while trying to fix the problem.
- The demo server on this system runs with very limited ressources (only 24 file-handles available). Therefore the session timeouts are set to very short periods. Sometimes you might get no response or a message "host not found" because web2ldap cannot acquire file-handles for sockets. Try again later in this case after unused LDAP connections have been cleaned up. If you want to be really nice use the Disconnect button...
- The LDAP server has to be reachable via Internet and open to the public. Especially IP addresses like 10.*, 192.168.* or 127.0.0.1 won't work. (I did not expect having to mention this explicitly but real life shows...)
- LDAP servers might behave very different because of different LDAP protocol versions, vendor implementations and configuration. E.g. some of the demo servers listed below are browsable some are not, etc.
- Entering the search root is optional. In most cases browsing down the directory will automatically bring up the search roots of the backends of a LDAP host.
  However some LDAP servers are configured to return a referral if asked for empty DN. In this case entering the search root or any DN of an entry on this server helps.
- For security reasons the web session ID is cross-checked against some environment variables which are assumed constant throughout the whole session. Cut&paste of URLs will probably not work. Also URLs containing session IDs are not persistent.
- You are welcome to refer to your own LDAP host through the on-line demo as long as it will not cause a huge amount of traffic. Use the ldapurl command with LDAP URLs as persistent URL. Have a look at the URLs specific examples below.

I would also appreciate if you report success stories. Use the feedback form to ensure that you provide all necessary information.

## Specific examples

This section contains links to specific entries or actions to illustrate some features.

ldap.openldap.org
  Find Kurt@OpenLDAP.org via sub tree search without defining the LDAP host in the LDAP URL. The DNS domain openldap.org has a SRV record in DNS. You can locate other LDAP servers by SRV RR.
www.trustcenter.de
  There's a browseable LDAP repository (Siemens Dir/X) of certificates issued by TC Trustcenter. Sometimes even the URLs in the certificates work. You can even point to and display single certificate or CRL with a LDAP URL.
ldap.gigacorp.nl
  Look here how entries of object class groupOfNames are displayed.
TF-LSD people
  Every web site needs a links-to-friends section (hehe).
  Some of the nice guys participating in the TF-LSD groups maintain own LDAP servers where you can look at the personal entries (in no particular order):
  - Stig (thanks for nice input about web interfaces...)
  - Konstantin (thanks for LDAPv3 contributions to python-ldap module)
master.surfnet.nl (DIRECT project)
  You can see how referrals are handled by clicking on one of the C= entries, e.g. C=DE.
Bibtex database of DFN on os.directory.dfn.de
  This backend for a bibtex database of RFCs is usable via web2ldap by just defining HTML templates.
web2ldap monitor
  New monitor page. Still not much information though...

Page last modified: Friday, 04-Jan-2002 01:21:34 CET, © by Michael Ströder <michael@stroeder.com>