Show HN: Moribito – A TUI for LDAP Viewing/Queries
github.com/ericschmarCheck out my TUI I wrote for viewing and querying an LDAP. I need to do basic queries and validation daily for work, and as I work on a mac, there are really no good options. The major player is the Apache Directory Studio which is... not great. So I decided to create a new one.
Comments
As someone that spends an inordinate amount of time in LDAP for work, it warms my heart to see this project. Will definitely try it out!
Apache Directory Studio is extremely cumbersome / heavy so this is much appreciated.
That was what I immediately was thinking about. I wish I had had a tool like this when admining an LDAP server for a compute cluster. This would have made my life much easier, as opposed to using Apache Directory Studio through SSH tunnels.
I’m glad this tool exists.
I hate it so much. And it barely works with newer macs.
This is epic, especially as it is repository friendly. Thank you.
You're very welcome!
Tested it now somewhat. Some points so far:
1. Installation script doesn't work on Windows. Exit 1 is particularly problematic as it kills the current shell
2. No search on current page vim style (/) or full page up/down J/K
3. On Query page j works but k somewhat scrambless the page in Windows terminal
Not sure how seriously you want to support Windows, I could rise tickets on Github
I don't have a way to debug windows, so atm it's kind wysiwyg.
#2 is a great idea. open a ticket if you'd like.
Is it possible to view/edit the "cn=config" tree of OpenLDAP to make configuration changes with this?
I often do
and another tool could be useful.It would be possible, but I don't have a good ldap server to test on, especially one I can modify config changes. If you'd like to contribute to the repo, adding a test ldap server that can be used for development would enable a lot more features.
If you have a Debian or Ubuntu system available, installing the `slapd` package (OpenLDAP) would be sufficient to get something on localhost or ldapi:///. RH-based systems have openldap* packages.
You don't really have to do much more than that for the purpose of testing this (no creating of accounts, groups, sub-trees, etc).
Perhaps at most go to the stanza/paragraph that defines "olcDbIndex" values, add a new one, and see if a new index file is created in "olcDbDirectory" (often /var/lib/ldap):
* https://www.zytrax.com/books/ldap/apa/indeces.html
* https://warlord0blog.wordpress.com/2020/10/19/ldap-indexes/
May find this worth a whirl, hosted instance: https://www.freeipa.org/page/Demo
Verified the services respond/credentials work [through the UI, my ldapsearch-fu is weak] :)
As someone else who has to do a lot of work with LDAP, thank you!
You might want to consider adding a LICENSE file to the repo. That's the first place I looked before noticing it at the bottom of the readme.
I am thinking you opened an issue. Thank you! I added one.
We need more TUIs! Love it!
The OP should post this on terminal trove [0]
There are lots of TUIs there.
[0] https://terminaltrove.com/
Nice, thanks for the link. Right up my alley
Will do!
Thank you!
Does this work with AD?
Haven't tested, but i think it should. it's using Go's LDAP library in the background
Miss my days tinkering with LDAP. This looks great, thanks!
Me too. I also believe that LDAP and directory services are overlooked today
176 276 123