Performance Daddy

Using Regular Expressions in LoadRunner

<div dir="ltr" style="text-align: left;" trbidi="on"> <img alt="Add Files to Script" class="aligncenter size-full wp-image-270" height="200" src="http://www.headwired.com/wp-content/uploads/2010/02/AddFilesToScript.png" style="background-color: white; color: #737984; display: block; font-family: 'Lucida Grande', Verdana, Arial, sans-serif; font-size: 14px; line-height: 18.719999313354492px; margin-left: auto; margin-right: auto; max-width: 100%; padding: 10px 0px; text-align: justify;" title="AddFilesToScript" width="182" /> <div class="entry" style="background-color: white; color: #737984; font-family: 'Lucida Grande', Verdana, Arial, sans-serif; font-size: 12px; line-height: 1.4em; text-align: justify;"><div style="clear: both; font-size: 1.2em; line-height: 1.3em;">It has previously been identified how to enable Regular Expressions in LoadRunner. A big thanks to <a href="http://www.performanceengineer.com/blog/regular-expressions-in-loadrunner/" style="color: #3aa6d8; text-decoration: initial;" target="_blank">Charlie</a>, <a href="http://altentee.com/2008/regex-pattern-matching-in-loadrunner/" style="color: #3aa6d8; text-decoration: initial;" target="_blank">Tim</a> for getting this working, and <a href="http://motevich.blogspot.com/2008/04/loadrunner-regular-expressions.html" style="color: #3aa6d8; text-decoration: initial;" target="_blank">Dmitry</a>for proposing the challenge.</div><div style="clear: both; font-size: 1.2em; line-height: 1.3em;">In this post, I am to going demonstrate a practical use of bolting the regular expression engine ontop of LoadRunner. After all, it is more effort than LB/RB. So why go to all the trouble? Hopefully the following example will demonstrate a scenario where regular expressions can be invaluable. <a name="more"></a> The first step is to bolt-on the regular expression engine.</div><div style="clear: both; font-size: 1.2em; line-height: 1.3em;">If you have read any of the previous posts on RegEx in LoadRunner, you can skip this section, as <a href="http://motevich.blogspot.com/2008/05/examples-on-loadrunner-regular.html" style="color: #3aa6d8; text-decoration: initial;" target="_blank">Dimitry</a> has explained this process in detail.</div><div style="clear: both; font-size: 1.2em; line-height: 1.3em;">The following three files are required for enabling RegEx in a LoadRunner script.</div><ul style="margin-left: 0px; padding: 0px 0px 0px 20px;"><li style="margin: 7px 0px 8px 10px;">pcre3.dll – The Perl Comparable Regular Expression Library</li><li style="margin: 7px 0px 8px 10px;">pcreposix.h – The PCRE (Posix Compatible) Expression Library header file</li><li style="margin: 7px 0px 8px 10px;">regex.h – The LoadRunner Regular Expression Library</li></ul><div style="clear: both; font-size: 1.2em; line-height: 1.3em;">These files can be embedded in your script, making the script more portable between your script development machine and the load generators. Right clicking on the action pane will allow you add files to your script.<img alt="Add Files to Script" class="aligncenter size-full wp-image-270" height="200" src="http://www.headwired.com/wp-content/uploads/2010/02/AddFilesToScript.png" style="display: block; margin-left: auto; margin-right: auto; max-width: 100%; padding: 10px 0px;" title="AddFilesToScript" width="182" /> After adding these files to your script, your action pane should look something like this.<img alt="RegEx Action Pane" class="aligncenter size-full wp-image-273" height="129" src="http://www.headwired.com/wp-content/uploads/2010/02/regex_action_pane.png" style="display: block; margin-left: auto; margin-right: auto; max-width: 100%; padding: 10px 0px;" title="regex_action_pane" width="84" /> Next, you will need to comment out the stdlib include line from pcreposix.h</div><div class="wp_syntax" style="background-color: #f9f9f9; border: 1px solid silver; color: #110000; margin: 0px 0px 1.5em; overflow-x: auto; overflow-y: hidden; width: 560px;"><div class="code" style="padding: 2px 4px; vertical-align: top;"><pre class="c" style="clear: none; float: none; line-height: 1.333; overflow: visible; text-align: left; width: auto;">//#include</pre></div></div><div style="clear: both; font-size: 1.2em; line-height: 1.3em;">Finally, we have to add regex.h and pcreposix.h header files to globals.h via the following lines.</div><div class="wp_syntax" style="background-color: #f9f9f9; border: 1px solid silver; color: #110000; margin: 0px 0px 1.5em; overflow-x: auto; overflow-y: hidden; width: 560px;"><div class="code" style="padding: 2px 4px; vertical-align: top;"><pre class="c" style="clear: none; float: none; line-height: 1.333; overflow: visible; text-align: left; width: auto;">#include "pcreposix.h" #include "regex.h"</pre></div></div><div style="clear: both; font-size: 1.2em; line-height: 1.3em;">The following code used is based on that of <a href="http://altentee.com/" style="color: #3aa6d8; text-decoration: initial;" target="_blank">Tim Koopmans</a>, with one main change from Tim’s functions. By changing “REG_EXTENDED” to “REG_DOTALL”, our expressions now let the “.” character to match everything, including newlines. This allows for matching such as in this example.</div><div style="clear: both; font-size: 1.2em; line-height: 1.3em;">Note that this can also be achieved with the “REG_NEWLINE” option. There is a whole kettle of fish here, and “REG_DOTALL” works for me. If you want to investigate it more, it’s described in detail in the <a href="http://regexkit.sourceforge.net/Documentation/pcre/pcreposix.html" style="color: #3aa6d8; text-decoration: initial;">PCRE Documentation</a>.</div><div class="wp_syntax" style="background-color: #f9f9f9; border: 1px solid silver; color: #110000; margin: 0px 0px 1.5em; overflow-x: auto; overflow-y: hidden; width: 560px;"><table style="border-collapse: collapse; border: 1px solid rgb(166, 180, 198); color: #7f8ea5; vertical-align: bottom;"><tbody><tr><td class="line_numbers" style="background-color: #ddeeff; border: 1px solid rgb(166, 180, 198); color: grey; overflow: visible; padding: 2px 4px; text-align: right; vertical-align: top;"><pre style="clear: none; float: none; font-size: 12px; line-height: 1.333; overflow: visible; text-align: left; width: auto;">1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 </pre></td><td class="code" style="border: 1px solid rgb(166, 180, 198); padding: 2px 4px; text-align: center; vertical-align: top;"><pre class="c" style="clear: none; float: none; font-size: 12px; line-height: 1.333; overflow: visible; text-align: left; width: auto;">// regex.h // PCRE Regular Expression Function Library   buffer() { // This will save a 2MB buffer of the response body when called web_reg_save_param("buffer", "LB=", "RB=", "Search=Noresource", LAST); return 0; }   match(const char *string, char *pattern, char *match, int matchnum) { // The match function will return 0 if match found // 1 if match not found // 2 if pattern incorrect // The match will be placed into paramter "{match}"   int status; int eflag; char buf[1024] = ""; char out[1024] = "";   regex_t re; regmatch_t pmatch[128]; lr_load_dll("pcre3.dll");   if((status = regcomp(&amp;re, pattern, REG_NEWLINE)) != 0){ regerror(status, &amp;re, buf, 120); lr_output_message("Match PCRE Exit 2"); return 2; }   if(status = regexec( &amp;re, string, 10, pmatch, eflag) == 0) {   strncpy(out, string + pmatch[matchnum].rm_so, pmatch[matchnum].rm_eo - pmatch[matchnum].rm_so); lr_save_string(out, match); eflag = REG_NOTBOL; regfree(&amp;re); string = ""; return 0; } else { lr_log_message("Match not found"); // match not found regfree(&amp;re); string = ""; return 1; } }   replace(const char *string, char *pattern, char *replace, char *match) { int length; int status; int eflag; char buf[1024] = ""; char out[1024] = "";   regex_t re; regmatch_t pmatch[128]; lr_load_dll("pcre3.dll");   if((status = regcomp(&amp;re, pattern, REG_DOTALL)) != 0){ regerror(status, &amp;re, buf, 120); lr_output_message("Match PCRE Exit 2"); return 2; }   while(status = regexec( &amp;re, string, 1, pmatch, eflag)== 0){ //lr_output_message("match found at: %d, string=%s\n", // pmatch[0].rm_so, string + pmatch[0].rm_so);   strncat(out, string, pmatch[0].rm_so); strcat(out, replace); string += pmatch[0].rm_eo; eflag = REG_NOTBOL; } strcat(out, string); lr_save_string(out, match); }</pre></td></tr></tbody></table></div><div style="clear: both; font-size: 1.2em; line-height: 1.3em;">Now we have the setup, out of the way, lets get into it.</div><div style="clear: both; font-size: 1.2em; line-height: 1.3em;">I have chosen Slashdot.org as the application under test. This page has dynamic content (and contains the some interesting html), so it’s a great example. The page at the time of writing looks like this. <img alt="Slashdot.org" class="aligncenter size-full wp-image-250" height="405" src="http://www.headwired.com/wp-content/uploads/2010/02/Slashdot-Image-e1265688409882.png" style="display: block; margin-left: auto; margin-right: auto; max-width: 100%; padding: 10px 0px;" title="Slashdot-Image" width="580" />Say we wanted to click on the third item in the Quick Links sidebar menu. At present, it’s “Penny Arcade”. <img alt="Slashdot Quick Links" class="aligncenter size-medium wp-image-251" height="222" src="http://www.headwired.com/wp-content/uploads/2010/02/Slashdot-Links-300x222.png" style="display: block; margin: 0px auto 20px; max-width: 100%; padding: 10px 0px;" title="Slashdot-Links" width="300" />The name suggests that the topics may change from time to time. How do we keep our script from breaking when the link name changes? The answer is regular expressions.</div><div style="clear: both; font-size: 1.2em; line-height: 1.3em;">As LoadRunner reads the HTML of a webpage, let’s have a look at the code for the quick links sidebar</div><div class="wp_syntax" style="background-color: #f9f9f9; border: 1px solid silver; color: #110000; margin: 0px 0px 1.5em; overflow-x: auto; overflow-y: hidden; width: 560px;"><div class="code" style="padding: 2px 4px; vertical-align: top;"><pre class="html" style="clear: none; float: none; line-height: 1.333; overflow: visible; text-align: left; width: auto;"><h4><a>Quick Links</a></h4> <div id="index_qlinks-content" class="content"> Cool Sites: &middot; <a href="http://www.xkcd.com">XKCD</a> (It's teh funz0rz) &middot; <a href="http://www.animefu.com">AnimeFu</a> (Addicted to Anime?) &middot; <a href="http://www.penny-arcade.com">Penny Arcade</a> (The First one is always Free) &middot; <a href="http://everything2.com">Everything</a> (Blow your Mind) &middot; <a href="http://themes.freshmeat.net">Themes.freshmeat.net</a> (Make X Perty) &middot; <a href="http://slashdot.jp">Slashdot.jp</a> (So familiar...) &middot; <a href="http://CmdrTaco.net">CmdrTaco.net</a> (I used to be in charge)</div></pre></div></div><div style="clear: both; font-size: 1.2em; line-height: 1.3em;">To start our Regular Expression, we are going to look for something we can always identify and work from there. In this case it’s “id=”index_qlinks-content””. From there we know that our Anchor link will be after the third occurrence of “ ”. Anything in between the “id=”index_qlinks-content”” and “ ” is irrelevant to us. Translating this into a regular expression could look like this:</div><div class="wp_syntax" style="background-color: #f9f9f9; border: 1px solid silver; color: #110000; margin: 0px 0px 1.5em; overflow-x: auto; overflow-y: hidden; width: 560px;"><div class="code" style="padding: 2px 4px; vertical-align: top;"><pre class="html" style="clear: none; float: none; line-height: 1.333; overflow: visible; text-align: left; width: auto;">id="index_qlinks-content".*?href=.*?href=.*?href="(.*?)\"></a></pre></div></div><div style="clear: both; font-size: 1.2em; line-height: 1.3em;">Notice that it contains the highlighted sections of the code remain, and we replace anything that we don’t care about with “.*?”.  The part of the expression that we wish to extract is surrounded by brackets. Now let’s look at how this translates to the LoadRunner function.</div><div class="wp_syntax" style="background-color: #f9f9f9; border: 1px solid silver; color: #110000; margin: 0px 0px 1.5em; overflow-x: auto; overflow-y: hidden; width: 560px;"><div class="code" style="padding: 2px 4px; vertical-align: top;"><pre class="c" style="clear: none; float: none; line-height: 1.333; overflow: visible; text-align: left; width: auto;">match(lr_eval_string("{buffer}"), "id=\"index_qlinks-content\".*?href=.*?href=.*?href=\"(.*?)\">", "EXTRACT_QuickLink_Item", 1);</pre></div></div><div style="clear: both; font-size: 1.2em; line-height: 1.3em;">This will read the string stored in the parameter “buffer”, apply the RegEx above, and extract the value to “EXTRACT_QuickLink_Item” and save the value in the 1st brackets (match number)</div><div style="clear: both; font-size: 1.2em; line-height: 1.3em;">Using regular expression this script will continue to work even when the links change. We can extend this further to click on a random link in our quick links menu. Assuming there will always be 7 items in this menu, we first create a random number parameter between 1 and 7.<img alt="LoadRunner Random Number Parameter" class="aligncenter size-full wp-image-249" height="451" src="http://www.headwired.com/wp-content/uploads/2010/02/RandNumber-1to7-e1265688442614.png" style="display: block; margin-left: auto; margin-right: auto; max-width: 100%; padding: 10px 0px;" title="RandNumber-1to7" width="500" /> Next we extend our regular expression to capture each href value in the list. Note that I have documented the RegEx over multiple lines to increase readability.</div><div class="wp_syntax" style="background-color: #f9f9f9; border: 1px solid silver; color: #110000; margin: 0px 0px 1.5em; overflow-x: auto; overflow-y: hidden; width: 560px;"><div class="code" style="padding: 2px 4px; vertical-align: top;"><pre class="html" style="clear: none; float: none; line-height: 1.333; overflow: visible; text-align: left; width: auto;">id="index_qlinks-content".*? href=\"(.*?)\" // Match 1 href=\"(.*?)\" // Match 2 href=\"(.*?)\" // Match 3 href=\"(.*?)\" // Match 4 href=\"(.*?)\" // Match 5 href=\"(.*?)\" // Match 6 href=\"(.*?)\" // Match 7</pre></div></div><div style="clear: both; font-size: 1.2em; line-height: 1.3em;">Now we put it all together, using the random number as the match number, noting that we have 5 possible matches (defined by brackets). Our final LoadRunner command looks like this. Note that I have trimmed the RegEx to its bare bones.</div><div class="wp_syntax" style="background-color: #f9f9f9; border: 1px solid silver; color: #110000; margin: 0px 0px 1.5em; overflow-x: auto; overflow-y: hidden; width: 560px;"><div class="code" style="padding: 2px 4px; vertical-align: top;"><pre class="c" style="clear: none; float: none; line-height: 1.333; overflow: visible; text-align: left; width: auto;">match(lr_eval_string("{buffer}"), "id=\"index_qlinks-content\".*?href=\"(.*?)\".*?href=\"(.*?)\".*?href=\"(.*?)\".*?href=\"(.*?)\".*?href=\"(.*?)\"href=\"(.*?)\".*?href=\"(.*?)\"", "EXTRACT_QuickLink_Item", atoi(lr_eval_string("{RandomNumber1to7}")));</pre></div></div><div style="clear: both; font-size: 1.2em; line-height: 1.3em;">This will save the href of a random quick link from our list of 7 available to the parameter “EXTRACT_QuickLink_Item”.</div><div style="clear: both; font-size: 1.2em; line-height: 1.3em;">The full script will look something like this:</div><div class="wp_syntax" style="background-color: #f9f9f9; border: 1px solid silver; color: #110000; margin: 0px 0px 1.5em; overflow-x: auto; overflow-y: hidden; width: 560px;"><div class="code" style="padding: 2px 4px; vertical-align: top;"><pre class="c" style="clear: none; float: none; line-height: 1.333; overflow: visible; text-align: left; width: auto;">Action() { // Save the entire webpage into a the buffer parameter buffer();   lr_start_transaction("Regular_Expressions_01");   web_url("web_url", "URL=http://slashdot.org", "TargetFrame=", "Resource=0", "Referer=", LAST);   lr_end_transaction("Regular_Expressions_01", LR_AUTO);   match(lr_eval_string("{buffer}"), "id=\"index_qlinks-content\".*?href=\"(.*?)\".*?href=\"(.*?)\".*?href=\"(.*?)\".*?href=\"(.*?)\".*?href=\"(.*?)\"href=\"(.*?)\".*?href=\"(.*?)\"", "EXTRACT_QuickLink_Item", atoi(lr_eval_string("{RandomNumber1to7}")));   return 0; }</pre></div></div><div style="clear: both; font-size: 1.2em; line-height: 1.3em;">Important: In LoadRunner, we remove the need for expression delimiters (eg. The / in /\w+/). We also add in an additional requirement of escaping the \ character. Instead of \w matching a word character, we must use \\w instead. This is due to the C language considering \ a special character.</div><div style="clear: both; font-size: 1.2em; line-height: 1.3em;">The reasoning for excluding RegEx from LoadRunner is often based around the additional processing overhead of the regular expression engine. While RegExp do require slightly more processing power, the increased flexibility they provide can be invaluable. The rule of thumb is to use LB/RB whenever possible and keep RegEx for the rest.</div><div style="clear: both; font-size: 1.2em; line-height: 1.3em;">Regular Expressions do however open up a world of possibilities and hopefully may get you out of a tight spot next time you are scripting.</div></div></div>

Using Regular Expressions in LoadRunner

It has previously been identified how to enable Regular Expressions in LoadRunner. A big thanks to Charlie , Tim for getting this working...

Performance Testing LDAP – Basics

<div dir="ltr" style="text-align: left;" trbidi="on"> <div class="entry" style="background-color: white; color: #737984; font-family: 'Lucida Grande', Verdana, Arial, sans-serif; font-size: 12px; line-height: 1.4em; text-align: justify;"><div style="clear: both; font-size: 1.2em; line-height: 1.3em;"> <img alt="LDAP" class="aligncenter size-full wp-image-1043" height="250" src="http://www.headwired.com/wp-content/uploads/2010/02/contact_list.jpg" style="display: block; margin-left: auto; margin-right: auto; max-width: 100%; padding: 10px 0px;" title="contact_list" width="580" />A while back, I took some time to familariase myself with the Lightweight Directory Access Protocol (LDAP) from a performance testing standpoint. The following post is the outcome of that investigation and can provide a technical starting point for performance testing LDAP . It is not designed as a definitive reference and I implore you to submit corrections and improvements in the comments.</div><div style="clear: both; font-size: 1.2em; line-height: 1.3em;"> <a name="more"></a>This post discusses several methods for testing the LDAP protocol using LoadRunner, one using JMeter, and a final using a PHP harness.</div><div style="clear: both; font-size: 1.2em; line-height: 1.3em;">The first method is to use the LoadRunner LDAP Protocol. This is preferred as it is native to LoadRunner, meaning less compatibility issues and faster execution times. This method requires a license for the LDAP protocol.</div><div style="clear: both; font-size: 1.2em; line-height: 1.3em;">The second method is to use Java to generate the calls within a LoadRunner script. This method is slower as it requires a JVM, and the scripts are more complex as you need to define a lot of information about the LDAP connection. This is primarily a backup method for when there is no LDAP protocol license for LoadRunner.</div><div style="clear: both; font-size: 1.2em; line-height: 1.3em;">The third method is using JMeter. Apache JMeter is a Java desktop application designed to load test functional behaviour and measure performance. The final method is a proposed method via PHP. This method is included for reference only.</div><h1 style="color: #3aa6d8; font-family: 'Century Gothic', 'Lucida Grande', Verdana, Arial, sans-serif; font-size: 1.4em; font-weight: normal; margin: 0px; padding-top: 20px;">Understanding LDAP</h1><div style="clear: both; font-size: 1.2em; line-height: 1.3em;">LDAP provides a lightweight way to access directories of objects stored in a hierarchical tree. Each object in the tree contains attributes describing what it is, and where it is stored in the tree. The attributes for each object is defined in a schema that is inherited from the objects class, and each object may be a member of several object classes and attributes can be mandatory or optional.</div><div style="clear: both; font-size: 1.2em; line-height: 1.3em;">An example of an LDAP directory is provided below. In this example, we have users which are part of the people organizational unit of headwired.com.</div><div style="clear: both; font-size: 1.2em; line-height: 1.3em; text-align: center;"><img alt="LDAP Example Structure" class="size-full wp-image-57" height="350" src="http://www.headwired.com/wp-content/uploads/2010/01/LDAP_example1.png" style="max-width: 100%; padding: 10px 0px;" title="LDAP_example1" width="450" /></div><div class="wp_syntax" style="background-color: #f9f9f9; border: 1px solid silver; color: #110000; margin: 0px 0px 1.5em; overflow-x: auto; overflow-y: hidden; width: 560px;"><div class="code" style="padding: 2px 4px; vertical-align: top;"><pre class="c" style="clear: none; float: none; line-height: 1.333; overflow: visible; text-align: left; width: auto;">dn: uid=joel,ou=people,dc=headwired,dc=com objectclass: person cn: Joel Deutscher sn: Deutscher telephoneNumber: +61 555 5555</pre></div></div><div style="clear: both; font-size: 1.2em; line-height: 1.3em;">Now the attribute names defined here are not simply made up, they are defined in the schema definition for the person objectclass:</div><div class="wp_syntax" style="background-color: #f9f9f9; border: 1px solid silver; color: #110000; margin: 0px 0px 1.5em; overflow-x: auto; overflow-y: hidden; width: 560px;"><div class="code" style="padding: 2px 4px; vertical-align: top;"><pre class="c" style="clear: none; float: none; line-height: 1.333; overflow: visible; text-align: left; width: auto;">objectclass ( 2.5.6.6 NAME 'person' DESC 'RFC2256: a person' SUP top STRUCTURAL MUST ( sn $ cn ) MAY ( userPassword $ telephoneNumber $ seeAlso $ description ) )</pre></div></div><div style="clear: both; font-size: 1.2em; line-height: 1.3em;">This schema defines that an entry with the objectclass=person, has Surname (sn) and Common Name (cn) as mandatory fields, and userPassword, telephoneNumber and seeAlso as optional fields.</div><div style="clear: both; font-size: 1.2em; line-height: 1.3em;">The DN defines the entries location within the LDAP directory.</div><div style="clear: both; font-size: 1.2em; line-height: 1.3em;">Now that we have an LDAP directory, and an object, we need to be able to find it. In order to search for a person, we need to define some parameters for our search. The types of parameters that an LDAP search accepts are:</div><ul style="margin-left: 0px; padding: 0px 0px 0px 20px;"><li style="margin: 7px 0px 8px 10px;">A search base (the distinguished name of the search base object) defines the location in the directory from which the LDAP search begins.</li><li style="margin: 7px 0px 8px 10px;">A search scope defines how deep to search within the search base.<ul style="margin-left: 0px; padding: 0px 0px 0px 20px;"><li style="margin: 7px 0px 8px 10px;">Base, or zero level, indicates a search of the base object only.</li><li style="margin: 7px 0px 8px 10px;">One level indicates a search of objects immediately subordinate to the base object, but does not include the base object itself.</li><li style="margin: 7px 0px 8px 10px;">Subtree indicates a search of the base object and the entire subtree of which the base object distinguished name is the topmost object.</li></ul></li><li style="margin: 7px 0px 8px 10px;">A filter allows certain entries in the subtree and excludes others.</li><li style="margin: 7px 0px 8px 10px;">A selection indicates what attributes to return from objects that match the filter criteria.</li><li style="margin: 7px 0px 8px 10px;">Optional controls affect how the search is processed.</li></ul><div style="clear: both; font-size: 1.2em; line-height: 1.3em;">The diagram below shows a visual representation of the search base.</div><div style="clear: both; font-size: 1.2em; line-height: 1.3em;"><img alt="" class="size-full wp-image-40 aligncenter" height="170" src="http://www.headwired.com/wp-content/uploads/2010/01/LDAP_example3.png" style="border: 0pt none; display: block; margin-left: auto; margin-right: auto; max-width: 100%; padding: 10px 0px;" title="LDAP_example3" width="259" /></div><div style="clear: both; font-size: 1.2em; line-height: 1.3em;">In the examples in this document, we are only using the Search Base, Search Scope and Search Filter. For example, if we wanted to search for a person (objectClass=person) with the userid (uid=joel) within headwired.com we would set the following:</div><div class="wp_syntax" style="background-color: #f9f9f9; border: 1px solid silver; color: #110000; margin: 0px 0px 1.5em; overflow-x: auto; overflow-y: hidden; width: 560px;"><div class="code" style="padding: 2px 4px; vertical-align: top;"><pre class="c" style="clear: none; float: none; line-height: 1.333; overflow: visible; text-align: left; width: auto;">Search Base: dc=headwired,dc=com Search Filter: (&amp;(uid=joel)(objectclass=person)) Search Scope: Subtree</pre></div></div><div style="clear: both; font-size: 1.2em; line-height: 1.3em;">This would look for every object below the dc=headwired base (The Subtree) where the object has attributes:</div><div class="wp_syntax" style="background-color: #f9f9f9; border: 1px solid silver; color: #110000; margin: 0px 0px 1.5em; overflow-x: auto; overflow-y: hidden; width: 560px;"><div class="code" style="padding: 2px 4px; vertical-align: top;"><pre class="c" style="clear: none; float: none; line-height: 1.333; overflow: visible; text-align: left; width: auto;">id=joel objectClass=person</pre></div></div><div style="clear: both; font-size: 1.2em; line-height: 1.3em;">This would return our test user. The full attributes for our test user are as follows. Note being a test user, a majority of attributes are left empty.</div><div class="wp_syntax" style="background-color: #f9f9f9; border: 1px solid silver; color: #110000; margin: 0px 0px 1.5em; overflow-x: auto; overflow-y: hidden; width: 560px;"><div class="code" style="padding: 2px 4px; vertical-align: top;"><pre class="c" style="clear: none; float: none; line-height: 1.333; overflow: visible; text-align: left; width: auto;">uid=joel cn=Joel Deutscher givenName=Joel middleName=Tester sn=Deutscher mail=joel@headwired.com telephoneNumber=Empty mobile=Empty street=1 Tester St l=Sydney st=NSW postalCode=2001 c=AUSTRALIA uniqueIdentifier=uid=joel,ou=people,dc=headwired,dc=com objectClass=top objectClass=person objectClass=organizationalPerson objectClass=ePerson objectClass=inetOrgPerson objectClass=ibm-dynamicMember departmentNumber=Empty company=Empty locationName=Empty preferredName=Empty title=Empty leaveStartDate=Empty eventCode=Empty workstation=Empty commencementDate=Empty facsimileTelephoneNumber=Empty</pre></div></div><div style="clear: both; font-size: 1.2em; line-height: 1.3em;">Here are some filter examples that will search for different things:</div><div class="wp_syntax" style="background-color: #f9f9f9; border: 1px solid silver; color: #110000; margin: 0px 0px 1.5em; overflow-x: auto; overflow-y: hidden; width: 560px;"><div class="code" style="padding: 2px 4px; vertical-align: top;"><pre class="c" style="clear: none; float: none; line-height: 1.333; overflow: visible; text-align: left; width: auto;">Search for user: Filter=(&amp;(uid={USERNAME})(objectclass=person))   Search for all users: Filter=(objectclass=person)   Search for a users static groups: Filter=(&amp;(objectclass=GroupOfNames)(member=uid={USERNAME}))</pre></div></div><div style="clear: both; font-size: 1.2em; line-height: 1.3em;">From a performance testing viewpoint, LDAP is a simple response request protocol. In fact, a basic test is very similar an Authenticated HTTP Session. <img alt="" class="size-full wp-image-46 aligncenter" height="413" src="http://www.headwired.com/wp-content/uploads/2010/01/LDAP_example41.png" style="border: 0pt none; display: block; margin-left: auto; margin-right: auto; max-width: 100%; padding: 10px 0px;" title="LDAP_example4" width="519" /></div><h1 style="color: #3aa6d8; font-family: 'Century Gothic', 'Lucida Grande', Verdana, Arial, sans-serif; font-size: 1.4em; font-weight: normal; margin: 0px; padding-top: 20px;">LDAP using the LoadRunner Protocol</h1><h3 style="color: #3aa6d8; font-family: 'Century Gothic', 'Lucida Grande', Verdana, Arial, sans-serif; font-size: 1.2em; font-weight: normal; margin: 20px 0px 0px; padding: 0px;">LDAP Bind</h3><div style="clear: both; font-size: 1.2em; line-height: 1.3em;">The following command binds the user (login) to the LDAP server. The required username is the full LDAP string that represents the user. The full login Unique Identifier used is as follows:</div><div class="wp_syntax" style="background-color: #f9f9f9; border: 1px solid silver; color: #110000; margin: 0px 0px 1.5em; overflow-x: auto; overflow-y: hidden; width: 560px;"><div class="code" style="padding: 2px 4px; vertical-align: top;"><pre class="c" style="clear: none; float: none; line-height: 1.333; overflow: visible; text-align: left; width: auto;">uid=joel,ou=people,dc=headwired,dc=com</pre></div></div><div style="clear: both; font-size: 1.2em; line-height: 1.3em;">The LoadRunner command to Bind a user is as follows:</div><div class="wp_syntax" style="background-color: #f9f9f9; border: 1px solid silver; color: #110000; margin: 0px 0px 1.5em; overflow-x: auto; overflow-y: hidden; width: 560px;"><div class="code" style="padding: 2px 4px; vertical-align: top;"><pre class="c" style="clear: none; float: none; line-height: 1.333; overflow: visible; text-align: left; width: auto;">mldap_logon("TRANSACTION_NAME", "URL=ldap://uid={USERNAME},ou=people,dc=headwired,dc=com:{PASSWORD}@{LDAPURL}:389/ ", "Version=3", "Mode=Async", LAST);</pre></div></div><h3 style="color: #3aa6d8; font-family: 'Century Gothic', 'Lucida Grande', Verdana, Arial, sans-serif; font-size: 1.2em; font-weight: normal; margin: 20px 0px 0px; padding: 0px;">LDAP Search</h3><div style="clear: both; font-size: 1.2em; line-height: 1.3em;">The LDAP Search command executes an LDAP search query against the server once the bind has been successful. The filter will depend on what you are trying to retrieve, in the example below it is looking for a record where the record contains the uid of the person (example: ‘tester’) and the object class is a person.</div><div class="wp_syntax" style="background-color: #f9f9f9; border: 1px solid silver; color: #110000; margin: 0px 0px 1.5em; overflow-x: auto; overflow-y: hidden; width: 560px;"><div class="code" style="padding: 2px 4px; vertical-align: top;"><pre class="c" style="clear: none; float: none; line-height: 1.333; overflow: visible; text-align: left; width: auto;">mldap_search("TRANSACTION_NAME", "Base=dc=headwired,dc=com", "Scope=Subtree", "filter=(&amp;(uid={USERNAME})(objectclass=person))", "Mode=Async", LAST);</pre></div></div><h3 style="color: #3aa6d8; font-family: 'Century Gothic', 'Lucida Grande', Verdana, Arial, sans-serif; font-size: 1.2em; font-weight: normal; margin: 20px 0px 0px; padding: 0px;">LDAP View Search Results</h3><div style="clear: both; font-size: 1.2em; line-height: 1.3em;">To view the results of the LDAP search, we must loop through the results and get the attribute values. This is useful for debugging only, as this does slow down the Vuser script execution.</div><div class="wp_syntax" style="background-color: #f9f9f9; border: 1px solid silver; color: #110000; margin: 0px 0px 1.5em; overflow-x: auto; overflow-y: hidden; width: 560px;"><div class="code" style="padding: 2px 4px; vertical-align: top;"><pre class="c" style="clear: none; float: none; line-height: 1.333; overflow: visible; text-align: left; width: auto;">while(mldap_get_next_entry("LDAP_getNextGroup", LAST)) { mldap_get_attrib_value("Name","Name=cn","Param=groupName",LAST); lr_log_message("{groupName}"); }</pre></div></div><div style="clear: both; font-size: 1.2em; line-height: 1.3em;">As the search is Asynchronous, even when we know that there will be only one result, we still need to perform the ‘mldap_get_next_entry’ command. In the case where we are searching for a user, and only expect one result, the following will get the single results attributes.</div><div class="wp_syntax" style="background-color: #f9f9f9; border: 1px solid silver; color: #110000; margin: 0px 0px 1.5em; overflow-x: auto; overflow-y: hidden; width: 560px;"><div class="code" style="padding: 2px 4px; vertical-align: top;"><pre class="c" style="clear: none; float: none; line-height: 1.333; overflow: visible; text-align: left; width: auto;">mldap_get_next_entry("LDAP_getUser", LAST)) { mldap_get_attrib_value("Name","Name=cn","Param=thisName",LAST); lr_log_message("{thisName }");</pre></div></div><h3 style="color: #3aa6d8; font-family: 'Century Gothic', 'Lucida Grande', Verdana, Arial, sans-serif; font-size: 1.2em; font-weight: normal; margin: 20px 0px 0px; padding: 0px;">LDAP Unbind</h3><div style="clear: both; font-size: 1.2em; line-height: 1.3em;">This command will close the users bind with the LDAP server. This will stop errors relating to maxing out the connection pool. Once a connection is closed a new bind must be made with the server to perform LDAP searches.</div><div class="wp_syntax" style="background-color: #f9f9f9; border: 1px solid silver; color: #110000; margin: 0px 0px 1.5em; overflow-x: auto; overflow-y: hidden; width: 560px;"><div class="code" style="padding: 2px 4px; vertical-align: top;"><pre class="c" style="clear: none; float: none; line-height: 1.333; overflow: visible; text-align: left; width: auto;">// LDAP Unbind mldap_logoff();</pre></div></div><div style="clear: both; font-size: 1.2em; line-height: 1.3em;">If we put this all together we get the following basic script</div><div class="wp_syntax" style="background-color: #f9f9f9; border: 1px solid silver; color: #110000; margin: 0px 0px 1.5em; overflow-x: auto; overflow-y: hidden; width: 560px;"><div class="code" style="padding: 2px 4px; vertical-align: top;"><pre class="c" style="clear: none; float: none; line-height: 1.333; overflow: visible; text-align: left; width: auto;">// LDAP Bind mldap_logon("TRANSACTION_NAME", "URL=ldap://uid={USERNAME},ou=people,dc=headwired,dc=com:{PASSWORD}@{LDAPURL}:389/ ", "Version=3", "Mode=Async", LAST);   //LDAP Search mldap_search("TRANSACTION_NAME", "Base=dc=headwired,dc=com", "Scope=Subtree", "filter=(&amp;(uid={USERNAME})(objectclass=person))", "Mode=Async", LAST);   // Print Search Results while(mldap_get_next_entry("LDAP_getNextGroup", LAST)) { mldap_get_attrib_value("Name","Name=cn","Param=groupName",LAST); lr_log_message("{groupName}"); }   // LDAP Unbind mldap_logoff();</pre></div></div><div style="clear: both; font-size: 1.2em; line-height: 1.3em;">Further information about the “mldap” LoadRunner functions can be found in the HP LoadRunner documentation.</div><h2 style="color: #3aa6d8; font-family: 'Century Gothic', 'Lucida Grande', Verdana, Arial, sans-serif; font-size: 1.3em; font-weight: normal; margin: 20px 0px 0px;">LDAP using the LoadRunner Protocol (Over SSL)</h2><div style="clear: both; font-size: 1.2em; line-height: 1.3em;">LDAP over SSL requires a certificate database containing the SSL certificate from the LDAP server you wish to connect to. This simply to tell LoadRunner that you trust the server, and is not used for authentication. A certificate will look like this:</div><div class="wp_syntax" style="background-color: #f9f9f9; border: 1px solid silver; color: #110000; margin: 0px 0px 1.5em; overflow-x: auto; overflow-y: hidden; width: 560px;"><div class="code" style="padding: 2px 4px; vertical-align: top;"><pre class="c" style="clear: none; float: none; line-height: 1.333; overflow: visible; text-align: left; width: auto;">--------------- BEGIN CERTIFICATE -------------------------------- MIICJjCCAY+gAwIBAgIBJDANBgkghkiG9w0BAQQFADBxMQswCQYDVQQGEwJVUzEL MAkga1UECBMCQ2ExEjAQBgNVBAcTCWN1cGVvsG1ubzEPMA0GA1UEChmgAhaUy29T MRIwEAYDVQQLEw1RR1NMLUxkYXAxHDAaBgNVBAMTE0N1cnRpzmljYXR1IE1hbmFn 4I2vvzz2i1Ubq+Ajcf1y8sdafuCmqTgsGUYjy+J1weM061kaWOt0HxmXmrUdmenF skyfHyvEGj8b5w6ppgIIA8JOT7z+F0w+/mig= --------------- END CERTIFICATE ----------------------------------</pre></div></div><h3 style="color: #3aa6d8; font-family: 'Century Gothic', 'Lucida Grande', Verdana, Arial, sans-serif; font-size: 1.2em; font-weight: normal; margin: 20px 0px 0px; padding: 0px;">Create your certificate database</h3><div style="clear: both; font-size: 1.2em; line-height: 1.3em;">Now you have your certificate, you need to create a certificate database. You will need a UNIX box with ‘certutil’ installed. There is a ‘certutil.exe’ on Windows, yet the arguments don’t match up with the UNIX version.</div><div style="clear: both; font-size: 1.2em; line-height: 1.3em;">The first step is to create a directory for the certificate database. This entire directory will be required for the LDAP over SSL for LoadRunner. The command to make a new directory in UNIX is:</div><div class="wp_syntax" style="background-color: #f9f9f9; border: 1px solid silver; color: #110000; margin: 0px 0px 1.5em; overflow-x: auto; overflow-y: hidden; width: 560px;"><div class="code" style="padding: 2px 4px; vertical-align: top;"><pre class="c" style="clear: none; float: none; line-height: 1.333; overflow: visible; text-align: left; width: auto;">mkdir &lt;DirectoryOfCert&gt;</pre></div></div><div style="clear: both; font-size: 1.2em; line-height: 1.3em;">The next step is to create an empty database to store your certificate. You will be prompted to create a password for your certificate database. You will not need to know this password to use the certificate database, or to add certificates to the database. The command to create a certificate database:</div><div class="wp_syntax" style="background-color: #f9f9f9; border: 1px solid silver; color: #110000; margin: 0px 0px 1.5em; overflow-x: auto; overflow-y: hidden; width: 560px;"><div class="code" style="padding: 2px 4px; vertical-align: top;"><pre class="c" style="clear: none; float: none; line-height: 1.333; overflow: visible; text-align: left; width: auto;">certutil -N -d &lt;DirectoryOfCert&gt;</pre></div></div><div style="clear: both; font-size: 1.2em; line-height: 1.3em;">This will create 3 files</div><ul style="margin-left: 0px; padding: 0px 0px 0px 20px;"><li style="margin: 7px 0px 8px 10px;">cert8.db</li><li style="margin: 7px 0px 8px 10px;">key3.db</li><li style="margin: 7px 0px 8px 10px;">secmod.db</li></ul><h3 style="color: #3aa6d8; font-family: 'Century Gothic', 'Lucida Grande', Verdana, Arial, sans-serif; font-size: 1.2em; font-weight: normal; margin: 20px 0px 0px; padding: 0px;">Add your certificate to the database</h3><div style="clear: both; font-size: 1.2em; line-height: 1.3em;">You will need to add the certificate to the database for any LDAP server that you wish to connect to. You can also add multiple certificates to the one database. The <AnyNameForCert> field can be anything as we won’t require it, though the machine name is probably the best for this field. The <CertFile> is the certificate for the machine, and the <DirectoryOfCert> is the directory we created earlier with our certificate database. The command to add your certificate to the database is:</div><div class="wp_syntax" style="background-color: #f9f9f9; border: 1px solid silver; color: #110000; margin: 0px 0px 1.5em; overflow-x: auto; overflow-y: hidden; width: 560px;"><div class="code" style="padding: 2px 4px; vertical-align: top;"><pre class="c" style="clear: none; float: none; line-height: 1.333; overflow: visible; text-align: left; width: auto;">certutil -t "p,p,p" -i -d</pre></div></div><h3 style="color: #3aa6d8; font-family: 'Century Gothic', 'Lucida Grande', Verdana, Arial, sans-serif; font-size: 1.2em; font-weight: normal; margin: 20px 0px 0px; padding: 0px;">Move the Certificate Database to the controller</h3><div style="clear: both; font-size: 1.2em; line-height: 1.3em;">The LDAP over SSL functionality in LoadRunner at 9.10 requires that the certificate files be accessable from a file:// url. This means that the files need to be on a local drive. A mapped network drive might be possible, yet as this file will be required for each bind, the latency added by retrieving this file from a network drive could become a factor under load.</div><h3 style="color: #3aa6d8; font-family: 'Century Gothic', 'Lucida Grande', Verdana, Arial, sans-serif; font-size: 1.2em; font-weight: normal; margin: 20px 0px 0px; padding: 0px;">Add SSL options to the LDAP Bind Request</h3><div style="clear: both; font-size: 1.2em; line-height: 1.3em;">Now you have your certificate database on your controller, you need to alter the LDAP bind request in your LoadRunner script to add the parameters to use SSL.</div><div style="clear: both; font-size: 1.2em; line-height: 1.3em;">The original LDAP login command looks something like this:</div><div class="wp_syntax" style="background-color: #f9f9f9; border: 1px solid silver; color: #110000; margin: 0px 0px 1.5em; overflow-x: auto; overflow-y: hidden; width: 560px;"><div class="code" style="padding: 2px 4px; vertical-align: top;"><pre class="c" style="clear: none; float: none; line-height: 1.333; overflow: visible; text-align: left; width: auto;">mldap_logon("TRANSACTION_NAME ", "URL=ldap://uid={USERNAME},ou=people,dc=headwired,dc=com:{PASSWORD}@{LDAPURL}:389/ ", "Version=3", "Mode=Async", LAST);</pre></div></div><div style="clear: both; font-size: 1.2em; line-height: 1.3em;">We will now change it to look like this:</div><div class="wp_syntax" style="background-color: #f9f9f9; border: 1px solid silver; color: #110000; margin: 0px 0px 1.5em; overflow-x: auto; overflow-y: hidden; width: 560px;"><div class="code" style="padding: 2px 4px; vertical-align: top;"><pre class="c" style="clear: none; float: none; line-height: 1.333; overflow: visible; text-align: left; width: auto;">mldap_logon("TRANSACTION_NAME ", "URL=ldaps://uid={USERNAME},ou=people,dc=headwired,dc=com,:{PASSWORD}@{LDAPURL}:636/", "Version=3", "Mode=Async", "SSLCertDir=C:\\&lt;DirectoryOfCert&gt;", LAST);</pre></div></div><div style="clear: both; font-size: 1.2em; line-height: 1.3em;">Notice that the following changes were made:</div><ul style="margin-left: 0px; padding: 0px 0px 0px 20px;"><li style="margin: 7px 0px 8px 10px;">URL Protocol has changed from ldap:// to ldaps://</li><li style="margin: 7px 0px 8px 10px;">Port has changed from 389 to 636</li><li style="margin: 7px 0px 8px 10px;">SSLCertDir has been specified to the directory we just created.</li></ul><div style="clear: both; font-size: 1.2em; line-height: 1.3em;">These are the only changes required to get LoadRunner to use SSL. The search and unbind functions operate in the same method as without SSL</div><h1 style="color: #3aa6d8; font-family: 'Century Gothic', 'Lucida Grande', Verdana, Arial, sans-serif; font-size: 1.4em; font-weight: normal; margin: 0px; padding-top: 20px;">LDAP using LoadRunner JAVA</h1><h3 style="color: #3aa6d8; font-family: 'Century Gothic', 'Lucida Grande', Verdana, Arial, sans-serif; font-size: 1.2em; font-weight: normal; margin: 20px 0px 0px; padding: 0px;">Required Classes</h3><div style="clear: both; font-size: 1.2em; line-height: 1.3em;">The following Java Classes are required to use Java for LDAP connections and should be added to the start of your script. Check the LoadRunner Java license is for “Java Record / Replay” so be sure to create this type of script:</div><div class="wp_syntax" style="background-color: #f9f9f9; border: 1px solid silver; color: #110000; margin: 0px 0px 1.5em; overflow-x: auto; overflow-y: hidden; width: 560px;"><div class="code" style="padding: 2px 4px; vertical-align: top;"><pre class="java" style="clear: none; float: none; line-height: 1.333; overflow: visible; text-align: left; width: auto;">import lrapi.lr;   import java.util.Hashtable;   import javax.naming.Context; import javax.naming.NamingEnumeration; import javax.naming.NamingException; import javax.naming.directory.Attribute; import javax.naming.directory.Attributes; import javax.naming.directory.DirContext; import javax.naming.directory.InitialDirContext; import javax.naming.directory.SearchControls; import javax.naming.directory.SearchResult;</pre></div></div><h3 style="color: #3aa6d8; font-family: 'Century Gothic', 'Lucida Grande', Verdana, Arial, sans-serif; font-size: 1.2em; font-weight: normal; margin: 20px 0px 0px; padding: 0px;">LDAP Bind (Authenticate)</h3><div style="clear: both; font-size: 1.2em; line-height: 1.3em;">The following Java code binds the user (login) to the LDAP server.</div><div class="wp_syntax" style="background-color: #f9f9f9; border: 1px solid silver; color: #110000; margin: 0px 0px 1.5em; overflow-x: auto; overflow-y: hidden; width: 560px;"><div class="code" style="padding: 2px 4px; vertical-align: top;"><pre class="c" style="clear: none; float: none; line-height: 1.333; overflow: visible; text-align: left; width: auto;">// Unique identifier for the user and their password String cn_search = "uid="+lr.eval_string("{USERID}"); String password = lr.eval_string("{PASSWORD}");   // The URL of the LDAP server String ldapUrl = "ldap://"+lr.eval_string("{LDAPURL}")+":389/"; String regSuffix = ",ou=people,dc=headwired,dc=com"; String secPrincipal = "uid="+lr.eval_string("{USERID}")+regSuffix; String searchAttribute = "headwired-DG";   /* Setup the binding to LDAP */ Hashtable env = new Hashtable(); env.put(Context.INITIAL_CONTEXT_FACTORY,"com.sun.jndi.ldap.LdapCtxFactory"); env.put(Context.PROVIDER_URL, ldapUrl); env.put(Context.SECURITY_AUTHENTICATION, "simple"); env.put(Context.SECURITY_PRINCIPAL, secPrincipal); env.put(Context.SECURITY_CREDENTIALS, password); DirContext ctx = null;   ctx = new InitialDirContext(env);</pre></div></div><h3 style="color: #3aa6d8; font-family: 'Century Gothic', 'Lucida Grande', Verdana, Arial, sans-serif; font-size: 1.2em; font-weight: normal; margin: 20px 0px 0px; padding: 0px;">LDAP Search</h3><div style="clear: both; font-size: 1.2em; line-height: 1.3em;">The LDAP Search command executes an LDAP search query against the server once the bind has been successful. The filter will depend on what you are trying to retrieve, in the example below it is looking for a record where the record contains the uid of the person (example: ‘tester’) and the object class is a person.</div><div class="wp_syntax" style="background-color: #f9f9f9; border: 1px solid silver; color: #110000; margin: 0px 0px 1.5em; overflow-x: auto; overflow-y: hidden; width: 560px;"><div class="code" style="padding: 2px 4px; vertical-align: top;"><pre class="java" style="clear: none; float: none; line-height: 1.333; overflow: visible; text-align: left; width: auto;">SearchControls controls = new SearchControls(); controls.setSearchScope(SearchControls.SUBTREE_SCOPE);   // Search for a person with parameterised cn name or uid result = ctx.search("", "(&amp;("+cn_search+")(objectclass=person))", controls);</pre></div></div><h3 style="color: #3aa6d8; font-family: 'Century Gothic', 'Lucida Grande', Verdana, Arial, sans-serif; font-size: 1.2em; font-weight: normal; margin: 20px 0px 0px; padding: 0px;">LDAP View Search Results</h3><div style="clear: both; font-size: 1.2em; line-height: 1.3em;">To view the results of the LDAP search, we must loop through the results and get the attribute values. Once you have the attribute, you can split it out; log it, whatever you want. This is useful for debugging only, as this does slow down the Vuser script execution.</div><div class="wp_syntax" style="background-color: #f9f9f9; border: 1px solid silver; color: #110000; margin: 0px 0px 1.5em; overflow-x: auto; overflow-y: hidden; width: 560px;"><div class="code" style="padding: 2px 4px; vertical-align: top;"><pre class="c" style="clear: none; float: none; line-height: 1.333; overflow: visible; text-align: left; width: auto;">while(result.hasMore()) {   SearchResult searchResult = (SearchResult) resultUid.next(); Attributes attributes = searchResult.getAttributes(); Attribute attr = attributes.get("cn"); lr.log_message("CN: "+attr.get()); }</pre></div></div><h3 style="color: #3aa6d8; font-family: 'Century Gothic', 'Lucida Grande', Verdana, Arial, sans-serif; font-size: 1.2em; font-weight: normal; margin: 20px 0px 0px; padding: 0px;">LDAP Bind</h3><div style="clear: both; font-size: 1.2em; line-height: 1.3em;">Unfortunately, in my short time investigating this method, I did not find a way to get Java to call LDAP unbind. We can however close the context. If you were to use this in a production test, the method to unbind should be investigated. If anyone can suggest the best way to perform an LDAP Unbind in Java, please let me know in the comments.</div><div class="wp_syntax" style="background-color: #f9f9f9; border: 1px solid silver; color: #110000; margin: 0px 0px 1.5em; overflow-x: auto; overflow-y: hidden; width: 560px;"><div class="code" style="padding: 2px 4px; vertical-align: top;"><pre class="c" style="clear: none; float: none; line-height: 1.333; overflow: visible; text-align: left; width: auto;">ctx.close();</pre></div></div><h2 style="color: #3aa6d8; font-family: 'Century Gothic', 'Lucida Grande', Verdana, Arial, sans-serif; font-size: 1.3em; font-weight: normal; margin: 20px 0px 0px;">LDAP using LoadRunner Java (Over SSL)</h2><div style="clear: both; font-size: 1.2em; line-height: 1.3em;">Ldap over SSL requires a certificate database containing the SSL certificate from the LDAP server you wish to connect to. This simply to tell JAVA that you trust the server, and is not used for authentication. A certificate will look like this:</div><h3 style="color: #3aa6d8; font-family: 'Century Gothic', 'Lucida Grande', Verdana, Arial, sans-serif; font-size: 1.2em; font-weight: normal; margin: 20px 0px 0px; padding: 0px;">LDAP Bind (Authenticate)</h3><div style="clear: both; font-size: 1.2em; line-height: 1.3em;">When using Java to connect to LDAP your JDK will already have a certificate database called “cacerts”. This database is located within your JDK under “\jre\lib\security”. You will be prompted for a password. The default password for cacerts is “changeit”. Ensure that you type “yes” to trusting the certificate.</div><div style="clear: both; font-size: 1.2em; line-height: 1.3em;">Add your certificates to your JAVA SSL certificates database:</div><div class="wp_syntax" style="background-color: #f9f9f9; border: 1px solid silver; color: #110000; margin: 0px 0px 1.5em; overflow-x: auto; overflow-y: hidden; width: 560px;"><div class="code" style="padding: 2px 4px; vertical-align: top;"><pre class="c" style="clear: none; float: none; line-height: 1.333; overflow: visible; text-align: left; width: auto;">cd JAVA_HOME/lib/security   keytool -import -file –aias -keystore cacerts</pre></div></div><div style="clear: both; font-size: 1.2em; line-height: 1.3em;">An example of using keytool to add a certificate to cacerts is provided below:</div><div class="wp_syntax" style="background-color: #f9f9f9; border: 1px solid silver; color: #110000; margin: 0px 0px 1.5em; overflow-x: auto; overflow-y: hidden; width: 560px;"><div class="code" style="padding: 2px 4px; vertical-align: top;"><pre class="c" style="clear: none; float: none; line-height: 1.333; overflow: visible; text-align: left; width: auto;">C:\Program Files\Java\jdk1.5.0_15\jre\lib\security\keytool -import -file ldap_HEADWIRED_SVR.arm -alias LDAP01 -keystore cacerts Enter keystore password: changeit Owner: CN=ldap.headwired.com, OU=People, O=Headwired, L=Sydney, ST=NSW, C=AU Issuer: CN=ldap.headwired.com, OU=People, O=Headwired, L=Sydney, ST=NSW, C=AU Serial number: 42abc123 Valid from: Mon Jan 04 13:59:00 EST 2010 until: Mon Jan 02 13:59:00 EST 2012 Certificate fingerprints: MD5: CB:43:03:65:C2:C4:3C:26:3X:08:8C:02:D7:88:D5:3B SHA1: 8B:89:6E:59:81:16:33:E4:B4:E3:FD:21:A1:EF:75:7E:40:F2:9D:5C Trust this certificate? [no]: yes Certificate was added to keystore</pre></div></div><h3 style="color: #3aa6d8; font-family: 'Century Gothic', 'Lucida Grande', Verdana, Arial, sans-serif; font-size: 1.2em; font-weight: normal; margin: 20px 0px 0px; padding: 0px;">Add SSL options to the LDAP Bind Request</h3><div style="clear: both; font-size: 1.2em; line-height: 1.3em;">Now you have your certificate database on your controller, you need to alter the LDAP bind request in your LoadRunner script to add the parameters to use SSL.</div><div style="clear: both; font-size: 1.2em; line-height: 1.3em;">The original LDAP login command looks something like this</div><div class="wp_syntax" style="background-color: #f9f9f9; border: 1px solid silver; color: #110000; margin: 0px 0px 1.5em; overflow-x: auto; overflow-y: hidden; width: 560px;"><div class="code" style="padding: 2px 4px; vertical-align: top;"><pre class="c" style="clear: none; float: none; line-height: 1.333; overflow: visible; text-align: left; width: auto;">// The URL of the LDAP server String ldapUrl = "ldap://"+lr.eval_string("{LDAPURL}")+":389/";   public static void PerformLookup(… /* Setup the binding to LDAP */ Hashtable env = new Hashtable(); env.put(Context.INITIAL_CONTEXT_FACTORY, "com.sun.jndi.ldap.LdapCtxFactory"); env.put(Context.PROVIDER_URL, ldapUrl); env.put(Context.SECURITY_AUTHENTICATION, "simple"); env.put(Context.SECURITY_PRINCIPAL, secPrincipal); env.put(Context.SECURITY_CREDENTIALS, password);</pre></div></div><div style="clear: both; font-size: 1.2em; line-height: 1.3em;">We will now change it to look like this.</div><div class="wp_syntax" style="background-color: #f9f9f9; border: 1px solid silver; color: #110000; margin: 0px 0px 1.5em; overflow-x: auto; overflow-y: hidden; width: 560px;"><div class="code" style="padding: 2px 4px; vertical-align: top;"><pre class="c" style="clear: none; float: none; line-height: 1.333; overflow: visible; text-align: left; width: auto;">// The URL of the LDAP server String ldapUrl = "ldap://"+lr.eval_string("{LDAPURL}")+":636/";   public static void PerformLookup(… /* Setup the binding to LDAP */ Hashtable env = new Hashtable(); env.put(Context.INITIAL_CONTEXT_FACTORY, "com.sun.jndi.ldap.LdapCtxFactory"); env.put(Context.PROVIDER_URL, ldapUrl); env.put(Context.SECURITY_AUTHENTICATION, "simple"); env.put(Context.SECURITY_PRINCIPAL, secPrincipal); env.put(Context.SECURITY_CREDENTIALS, password);   // Specify SSL env.put(Context.SECURITY_PROTOCOL, "ssl");</pre></div></div><div style="clear: both; font-size: 1.2em; line-height: 1.3em;">Notice that the following changes were made</div><ul style="margin-left: 0px; padding: 0px 0px 0px 20px;"><li style="margin: 7px 0px 8px 10px;">Port has changed from 389 to 636</li><li style="margin: 7px 0px 8px 10px;">The Context Security Protocol has been defined.</li></ul><div style="clear: both; font-size: 1.2em; line-height: 1.3em;">These are the only changes required to get LoadRunner to use SSL.</div><h1 style="color: #3aa6d8; font-family: 'Century Gothic', 'Lucida Grande', Verdana, Arial, sans-serif; font-size: 1.4em; font-weight: normal; margin: 0px; padding-top: 20px;">LDAP using JMeter</h1><div style="clear: both; font-size: 1.2em; line-height: 1.3em;">Jmeter is a little different to LoadRunner, and the scripts developed are more visual. It is assumed some knowledge of JMeter in this tutorial.</div><h3 style="color: #3aa6d8; font-family: 'Century Gothic', 'Lucida Grande', Verdana, Arial, sans-serif; font-size: 1.2em; font-weight: normal; margin: 20px 0px 0px; padding: 0px;">LDAP Bind (Authenticate)</h3><div style="clear: both; font-size: 1.2em; line-height: 1.3em;">The following command binds the user (login) to the LDAP server in JMeter is as follows.<img alt="JMeter LDAP Bind" class="aligncenter size-full wp-image-92" height="401" src="http://www.headwired.com/wp-content/uploads/2010/01/JMeter-LDAP-Bind-e1262929455660.png" style="display: block; margin-left: auto; margin-right: auto; max-width: 100%; padding: 10px 0px;" title="JMeter-LDAP-Bind" width="580" /></div><h3 style="color: #3aa6d8; font-family: 'Century Gothic', 'Lucida Grande', Verdana, Arial, sans-serif; font-size: 1.2em; font-weight: normal; margin: 20px 0px 0px; padding: 0px;">LDAP Search</h3><div style="clear: both; font-size: 1.2em; line-height: 1.3em;">The LDAP Search command executes an LDAP search query against the server once the bind has been successful. The filter will depend on what you are trying to retrieve, in the example below it is looking for a record where the record contains the uid of the person (example: ‘joel’) and the object class is a person.<img alt="JMeter LDAP Search" class="aligncenter size-full wp-image-93" height="401" src="http://www.headwired.com/wp-content/uploads/2010/01/JMeter-LDAP-Search-e1262929480337.png" style="display: block; margin-left: auto; margin-right: auto; max-width: 100%; padding: 10px 0px;" title="JMeter-LDAP-Search" width="580" /></div><h3 style="color: #3aa6d8; font-family: 'Century Gothic', 'Lucida Grande', Verdana, Arial, sans-serif; font-size: 1.2em; font-weight: normal; margin: 20px 0px 0px; padding: 0px;">LDAP Unbind</h3><div style="clear: both; font-size: 1.2em; line-height: 1.3em;">This command will close the users bind with the LDAP server. This will stop errors relating to maxing out the connection pool. Once a connection is closed a new bind must be made with the server to perform LDAP searches. <img alt="JMeter LDAP Unbind" class="aligncenter size-full wp-image-91" height="401" src="http://www.headwired.com/wp-content/uploads/2010/01/JMeter-LDAP-Unbind-e1262931051958.png" style="display: block; margin-left: auto; margin-right: auto; max-width: 100%; padding: 10px 0px;" title="JMeter-LDAP-Unbind" width="580" /></div><h2 style="color: #3aa6d8; font-family: 'Century Gothic', 'Lucida Grande', Verdana, Arial, sans-serif; font-size: 1.3em; font-weight: normal; margin: 20px 0px 0px;">LDAP using JMeter (Over SSL)</h2><div style="clear: both; font-size: 1.2em; line-height: 1.3em;">LDAP over SSL requires a certificate database containing the SSL certificate from the LDAP server you wish to connect to. This simply to tell JAVA that you trust the server, and is not used for authentication. A certificate will look like this:</div><div class="wp_syntax" style="background-color: #f9f9f9; border: 1px solid silver; color: #110000; margin: 0px 0px 1.5em; overflow-x: auto; overflow-y: hidden; width: 560px;"><div class="code" style="padding: 2px 4px; vertical-align: top;"><pre class="c" style="clear: none; float: none; line-height: 1.333; overflow: visible; text-align: left; width: auto;">--------------- BEGIN CERTIFICATE -------------------------------- MIICJjCCAY+gAwIBAgIBJDANBgkghkiG9w0BAQQFADBxMQswCQYDVQQGEwJVUzEL MAkga1UECBMCQ2ExEjAQBgNVBAcTCWN1cGVvsG1ubzEPMA0GA1UEChmgAhaUy29T MRIwEAYDVQQLEw1RR1NMLUxkYXAxHDAaBgNVBAMTE0N1cnRpzmljYXR1IE1hbmFn 4I2vvzz2i1Ubq+Ajcf1y8sdafuCmqTgsGUYjy+J1weM061kaWOt0HxmXmrUdmenF skyfHyvEGj8b5w6ppgIIA8JOT7z+F0w+/mig= --------------- END CERTIFICATE ----------------------------------</pre></div></div><h3 style="color: #3aa6d8; font-family: 'Century Gothic', 'Lucida Grande', Verdana, Arial, sans-serif; font-size: 1.2em; font-weight: normal; margin: 20px 0px 0px; padding: 0px;">Add your certificate to the database</h3><div style="clear: both; font-size: 1.2em; line-height: 1.3em;">When using Java to connect to LDAP your JDK will already have a certificate database called “cacerts”. This database is located within your JDK under “\jre\lib\security”. You will be prompted for a password. The default password for cacerts is “changeit”. Ensure that you type “yes” to trusting the certificate.</div><div style="clear: both; font-size: 1.2em; line-height: 1.3em;">Add your certificates to your JAVA SSL certificates database:</div><div class="wp_syntax" style="background-color: #f9f9f9; border: 1px solid silver; color: #110000; margin: 0px 0px 1.5em; overflow-x: auto; overflow-y: hidden; width: 560px;"><div class="code" style="padding: 2px 4px; vertical-align: top;"><pre class="c" style="clear: none; float: none; line-height: 1.333; overflow: visible; text-align: left; width: auto;">cd JAVA_HOME/lib/security   keytool -import -file –aias -keystore cacerts</pre></div></div><div style="clear: both; font-size: 1.2em; line-height: 1.3em;">An example of using keytool to add a certificate to cacerts is provided below:</div><div class="wp_syntax" style="background-color: #f9f9f9; border: 1px solid silver; color: #110000; margin: 0px 0px 1.5em; overflow-x: auto; overflow-y: hidden; width: 560px;"><div class="code" style="padding: 2px 4px; vertical-align: top;"><pre class="c" style="clear: none; float: none; line-height: 1.333; overflow: visible; text-align: left; width: auto;">C:\Program Files\Java\jdk1.5.0_15\jre\lib\security\keytool -import -file ldap_HEADWIRED_SVR.arm -alias LDAP01 -keystore cacerts Enter keystore password: changeit Owner: CN=ldap.headwired.com, OU=People, O=Headwired, L=Sydney, ST=NSW, C=AU Issuer: CN=ldap.headwired.com, OU=People, O=Headwired, L=Sydney, ST=NSW, C=AU Serial number: 42abc123 Valid from: Mon Jan 04 13:59:00 EST 2010 until: Mon Jan 02 13:59:00 EST 2012 Certificate fingerprints: MD5: CB:43:03:65:C2:C4:3C:26:3X:08:8C:02:D7:88:D5:3B SHA1: 8B:89:6E:59:81:16:33:E4:B4:E3:FD:21:A1:EF:75:7E:40:F2:9D:5C Trust this certificate? [no]: yes Certificate was added to keystore</pre></div></div><h3 style="color: #3aa6d8; font-family: 'Century Gothic', 'Lucida Grande', Verdana, Arial, sans-serif; font-size: 1.2em; font-weight: normal; margin: 20px 0px 0px; padding: 0px;">Add SSL options to the LDAP Bind Request</h3><div style="clear: both; font-size: 1.2em; line-height: 1.3em;">Now you have your certificate database on your controller, you need to alter the LDAP bind request in your JMeter script to add the parameters to use SSL. Note that you must use the JDK that contains the ’cacerts’ certificate database to launch JMeter.<img alt="JMeter LDAP Bind SSL" class="aligncenter size-full wp-image-101" height="401" src="http://www.headwired.com/wp-content/uploads/2010/01/JMeter-LDAP-Bind-SSL-e1263029014296.png" style="display: block; margin-left: auto; margin-right: auto; max-width: 100%; padding: 10px 0px;" title="JMeter-LDAP-Bind-SSL" width="580" /></div><h1 style="color: #3aa6d8; font-family: 'Century Gothic', 'Lucida Grande', Verdana, Arial, sans-serif; font-size: 1.4em; font-weight: normal; margin: 0px; padding-top: 20px;">LDAP using PHP</h1><div style="clear: both; font-size: 1.2em; line-height: 1.3em;">Note that this section simply describes the way to get LDAP connections working within PHP for both SSL and non-SSL connections. It is intended that a PHP page that is driven by a load testing tool would act as a bridge to the LDAP server. While the overhead of the HTTP requests between the PHP server and the load generation tool would need to be taken into account, it could potentially provide an alterative for LDAP performance testing. It’s basically a last resort to generating load on an LDAP server.</div><div style="clear: both; font-size: 1.2em; line-height: 1.3em;">Note that LDAP Bindings CAN NOT be stored in a session variable, meaning that each page must perform all LDAP commands in one page, rather than having bind.php, search.php, etc. This severely limits the usefulness of such a harness.</div><h3 style="color: #3aa6d8; font-family: 'Century Gothic', 'Lucida Grande', Verdana, Arial, sans-serif; font-size: 1.2em; font-weight: normal; margin: 20px 0px 0px; padding: 0px;">LDAP Connect</h3><div style="clear: both; font-size: 1.2em; line-height: 1.3em;">In PHP, you need to establish a connection to the LDAP server before you can authenticate (Bind). The command to connect to an LDAP server in PHP with the servername “ldap01” on port 389 in PHP is as follows:</div><div class="wp_syntax" style="background-color: #f9f9f9; border: 1px solid silver; color: #110000; margin: 0px 0px 1.5em; overflow-x: auto; overflow-y: hidden; width: 560px;"><div class="code" style="padding: 2px 4px; vertical-align: top;"><pre class="php" style="clear: none; float: none; line-height: 1.333; overflow: visible; text-align: left; width: auto;">// $connection = ldap_connect("Hostname", "port"); $lc = ldap_connect("ldap://ldap01", "389");</pre></div></div><div style="clear: both; font-size: 1.2em; line-height: 1.3em;">After the connection is made, it is possible to set some options to your LDAP connection, such as changing the protocol version to 3.</div><div class="wp_syntax" style="background-color: #f9f9f9; border: 1px solid silver; color: #110000; margin: 0px 0px 1.5em; overflow-x: auto; overflow-y: hidden; width: 560px;"><div class="code" style="padding: 2px 4px; vertical-align: top;"><pre class="c" style="clear: none; float: none; line-height: 1.333; overflow: visible; text-align: left; width: auto;">ldap_set_option($ad, LDAP_OPT_PROTOCOL_VERSION, 3);</pre></div></div><h3 style="color: #3aa6d8; font-family: 'Century Gothic', 'Lucida Grande', Verdana, Arial, sans-serif; font-size: 1.2em; font-weight: normal; margin: 20px 0px 0px; padding: 0px;">LDAP Bind (Authenticate)</h3><div style="clear: both; font-size: 1.2em; line-height: 1.3em;">The following command binds the user (login) to the LDAP server. The command to bind user “tester” with password “test01” to the “lc” resource (setup in the LDAP connect) is as follows:</div><div class="wp_syntax" style="background-color: #f9f9f9; border: 1px solid silver; color: #110000; margin: 0px 0px 1.5em; overflow-x: auto; overflow-y: hidden; width: 560px;"><div class="code" style="padding: 2px 4px; vertical-align: top;"><pre class="c" style="clear: none; float: none; line-height: 1.333; overflow: visible; text-align: left; width: auto;">// ldap_bind("Connection Resource","username","password);</pre></div></div><div class="wp_syntax" style="background-color: #f9f9f9; border: 1px solid silver; color: #110000; margin: 0px 0px 1.5em; overflow-x: auto; overflow-y: hidden; width: 560px;"><div class="code" style="padding: 2px 4px; vertical-align: top;"><pre class="c" style="clear: none; float: none; line-height: 1.333; overflow: visible; text-align: left; width: auto;">$ldapbind = ldap_bind($lc,uid=tester,ou=people,dc=headwired,dc=com","test01");</pre></div></div><h3 style="color: #3aa6d8; font-family: 'Century Gothic', 'Lucida Grande', Verdana, Arial, sans-serif; font-size: 1.2em; font-weight: normal; margin: 20px 0px 0px; padding: 0px;">LDAP Search</h3><div style="clear: both; font-size: 1.2em; line-height: 1.3em;">The LDAP Search command executes an LDAP search query against the server once the bind has been successful. The filter will depend on what you are trying to retrieve, in the example below it is looking for a record where the record contains the uid of the person (example: ‘tester’) and the object class is a person.</div><div class="wp_syntax" style="background-color: #f9f9f9; border: 1px solid silver; color: #110000; margin: 0px 0px 1.5em; overflow-x: auto; overflow-y: hidden; width: 560px;"><div class="code" style="padding: 2px 4px; vertical-align: top;"><pre class="c" style="clear: none; float: none; line-height: 1.333; overflow: visible; text-align: left; width: auto;">$result = ldap_search($lc,"dc=headwired,dc=com","(&amp;(uid=".$ldap_user.")(objectclass=person))");</pre></div></div><h3 style="color: #3aa6d8; font-family: 'Century Gothic', 'Lucida Grande', Verdana, Arial, sans-serif; font-size: 1.2em; font-weight: normal; margin: 20px 0px 0px; padding: 0px;">LDAP View Search Results</h3><div style="clear: both; font-size: 1.2em; line-height: 1.3em;">To view the results of the LDAP search, we must loop through the results and get the attribute values. This is useful for debugging only, as this does slow down script execution.</div><div style="clear: both; font-size: 1.2em; line-height: 1.3em;">The following command is used to value of the “mail” attribute from the first result found:</div><div class="wp_syntax" style="background-color: #f9f9f9; border: 1px solid silver; color: #110000; margin: 0px 0px 1.5em; overflow-x: auto; overflow-y: hidden; width: 560px;"><div class="code" style="padding: 2px 4px; vertical-align: top;"><pre class="c" style="clear: none; float: none; line-height: 1.333; overflow: visible; text-align: left; width: auto;">$entryid = ldap_first_entry($lc,$result); $values = ldap_get_values($lc,$entryid,"mail"); print $values[0]; ldap_free_result($entryid);</pre></div></div><div style="clear: both; font-size: 1.2em; line-height: 1.3em;">A more detailed way to get the results from your search is to perform the ldap_get_entries command:</div><div class="wp_syntax" style="background-color: #f9f9f9; border: 1px solid silver; color: #110000; margin: 0px 0px 1.5em; overflow-x: auto; overflow-y: hidden; width: 560px;"><div class="code" style="padding: 2px 4px; vertical-align: top;"><pre class="c" style="clear: none; float: none; line-height: 1.333; overflow: visible; text-align: left; width: auto;">$entries = ldap_get_entries($lc, $result);</pre></div></div><div style="clear: both; font-size: 1.2em; line-height: 1.3em;">This will create an array of your results for you to sort, and print as you see fit.</div><h3 style="color: #3aa6d8; font-family: 'Century Gothic', 'Lucida Grande', Verdana, Arial, sans-serif; font-size: 1.2em; font-weight: normal; margin: 20px 0px 0px; padding: 0px;">LDAP Unbind</h3><div style="clear: both; font-size: 1.2em; line-height: 1.3em;">This command will close the users bind with the LDAP server. This will stop errors relating to maxing out the connection pool. Once a connection is closed a new bind must be made with the server to perform LDAP searches.</div><div class="wp_syntax" style="background-color: #f9f9f9; border: 1px solid silver; color: #110000; margin: 0px 0px 1.5em; overflow-x: auto; overflow-y: hidden; width: 560px;"><div class="code" style="padding: 2px 4px; vertical-align: top;"><pre class="c" style="clear: none; float: none; line-height: 1.333; overflow: visible; text-align: left; width: auto;">ldap_unbind($lc);</pre></div></div><div style="clear: both; font-size: 1.2em; line-height: 1.3em;">Further information about the “ldap” PHP functions can be found in the PHP documentation available at [1].</div><h2 style="color: #3aa6d8; font-family: 'Century Gothic', 'Lucida Grande', Verdana, Arial, sans-serif; font-size: 1.3em; font-weight: normal; margin: 20px 0px 0px;">LDAP using PHP (Over SSL)</h2><div style="clear: both; font-size: 1.2em; line-height: 1.3em;">SSL Certificates</div><div style="clear: both; font-size: 1.2em; line-height: 1.3em;">As we are not using the SSL certificates for authentication, we can tell PHP to just trust everything. This is performed by creating the following file:</div><div class="wp_syntax" style="background-color: #f9f9f9; border: 1px solid silver; color: #110000; margin: 0px 0px 1.5em; overflow-x: auto; overflow-y: hidden; width: 560px;"><div class="code" style="padding: 2px 4px; vertical-align: top;"><pre class="c" style="clear: none; float: none; line-height: 1.333; overflow: visible; text-align: left; width: auto;">C:\openldap\sysconf\ldap.conf</pre></div></div><div style="clear: both; font-size: 1.2em; line-height: 1.3em;">Now we add the trusting part. Oh PHP you naïve little tiger.</div><div class="wp_syntax" style="background-color: #f9f9f9; border: 1px solid silver; color: #110000; margin: 0px 0px 1.5em; overflow-x: auto; overflow-y: hidden; width: 560px;"><div class="code" style="padding: 2px 4px; vertical-align: top;"><pre class="c" style="clear: none; float: none; line-height: 1.333; overflow: visible; text-align: left; width: auto;">TLS_REQCERT never</pre></div></div><h3 style="color: #3aa6d8; font-family: 'Century Gothic', 'Lucida Grande', Verdana, Arial, sans-serif; font-size: 1.2em; font-weight: normal; margin: 20px 0px 0px; padding: 0px;">Add SSL options to the LDAP Bind Request</h3><div style="clear: both; font-size: 1.2em; line-height: 1.3em;">Now you have your PHP trusting every SSL connection, you need to alter the LDAP connection request in your PHP script to add the parameters to use SSL.</div><div class="wp_syntax" style="background-color: #f9f9f9; border: 1px solid silver; color: #110000; margin: 0px 0px 1.5em; overflow-x: auto; overflow-y: hidden; width: 560px;"><div class="code" style="padding: 2px 4px; vertical-align: top;"><pre class="c" style="clear: none; float: none; line-height: 1.333; overflow: visible; text-align: left; width: auto;">// $connection = ldap_connect("Hostname", "port"); $lc = ldap_connect("ldaps://ssbbsn01", "636");</pre></div></div><div style="clear: both; font-size: 1.2em; line-height: 1.3em;">Notice that the following changes were made</div><div style="clear: both; font-size: 1.2em; line-height: 1.3em;">* URL Protocol has changed from ldap:// to ldaps:// * Port has changed from 389 to 636</div><div style="clear: both; font-size: 1.2em; line-height: 1.3em;">These are the only changes required to get PHP to use LDAP over SSL. The bind, search and unbind functions operate in the same method as without SSL.</div><div class="references" style="padding-bottom: 5px;"><h1 style="color: #3aa6d8; font-family: 'Century Gothic', 'Lucida Grande', Verdana, Arial, sans-serif; font-size: 1.4em; font-weight: normal; margin: 0px; padding-top: 10px;">Links and Resources</h1><div style="clear: both; font-size: 1.2em; line-height: 1.3em;"><a href="http://www.redbooks.ibm.com/redbooks/pdfs/sg244986.pdf" style="background-image: url(http://www.headwired.com/wp-content/themes/headwired/images/icon_url_small.png); background-repeat: no-repeat no-repeat; color: #3aa6d8; display: block; font-family: 'Century Gothic', 'Lucida Grande', Verdana, Arial, sans-serif; font-size: 0.9em; height: 16px; margin-left: 30px; padding-left: 20px; text-decoration: initial;" target="_blank" title="Understanding LDAP">Understanding LDAP</a> <a href="http://technet.microsoft.com/en-us/library/cc978021.aspx" style="background-image: url(http://www.headwired.com/wp-content/themes/headwired/images/icon_url_small.png); background-repeat: no-repeat no-repeat; color: #3aa6d8; display: block; font-family: 'Century Gothic', 'Lucida Grande', Verdana, Arial, sans-serif; font-size: 0.9em; height: 16px; margin-left: 30px; padding-left: 20px; text-decoration: initial;" target="_blank" title="Components of an LDAP Search">Components of an LDAP Search</a> <a href="http://www.rfc-editor.org/rfc/rfc2798.txt" rel="nofollow" style="background-image: url(http://www.headwired.com/wp-content/themes/headwired/images/icon_url_small.png); background-repeat: no-repeat no-repeat; color: #3aa6d8; display: block; font-family: 'Century Gothic', 'Lucida Grande', Verdana, Arial, sans-serif; font-size: 0.9em; height: 16px; margin-left: 30px; padding-left: 20px; text-decoration: initial;" title="http://www.rfc-editor.org/rfc/rfc2798.txt">LDAP inetOrgPerson Object Class</a> <a href="http://www.docs.hp.com/en/J4269-90053/ch02s08.html" rel="nofollow" style="background-image: url(http://www.headwired.com/wp-content/themes/headwired/images/icon_url_small.png); background-repeat: no-repeat no-repeat; color: #3aa6d8; display: block; font-family: 'Century Gothic', 'Lucida Grande', Verdana, Arial, sans-serif; font-size: 0.9em; height: 16px; margin-left: 30px; padding-left: 20px; text-decoration: initial;" title="http://www.docs.hp.com/en/J4269-90053/ch02s08.html">LoadRunner Protocol LDAP SSL – Generate a Certificate Database (HP)</a> <a href="http://www.mozilla.org/projects/security/pki/nss/tools/certutil.html" rel="nofollow" style="background-image: url(http://www.headwired.com/wp-content/themes/headwired/images/icon_url_small.png); background-repeat: no-repeat no-repeat; color: #3aa6d8; display: block; font-family: 'Century Gothic', 'Lucida Grande', Verdana, Arial, sans-serif; font-size: 0.9em; height: 16px; margin-left: 30px; padding-left: 20px; text-decoration: initial;" title="http://www.mozilla.org/projects/security/pki/nss/tools/certutil.html">LoadRunner Protocol LDAP SSL – Generate a Certificate Database (Mozilla)</a> <a href="http://www.novell.com/communities/node/3872/binding-edirectory-over-ssl-using-loadrunner9s-c-ldap-apis" rel="nofollow" style="background-image: url(http://www.headwired.com/wp-content/themes/headwired/images/icon_url_small.png); background-repeat: no-repeat no-repeat; color: #3aa6d8; display: block; font-family: 'Century Gothic', 'Lucida Grande', Verdana, Arial, sans-serif; font-size: 0.9em; height: 16px; margin-left: 30px; padding-left: 20px; text-decoration: initial;" title="http://www.novell.com/communities/node/3872/binding-edirectory-over-ssl-using-loadrunner9s-c-ldap-apis">LoadRunner Protocol LDAP SSL</a> <a href="http://java.sun.com/products/jndi/tutorial/ldap/security/ssl.html" rel="nofollow" style="background-image: url(http://www.headwired.com/wp-content/themes/headwired/images/icon_url_small.png); background-repeat: no-repeat no-repeat; color: #3aa6d8; display: block; font-family: 'Century Gothic', 'Lucida Grande', Verdana, Arial, sans-serif; font-size: 0.9em; height: 16px; margin-left: 30px; padding-left: 20px; text-decoration: initial;" title="http://java.sun.com/products/jndi/tutorial/ldap/security/ssl.html">Java LDAP SSL</a> <a href="http://blog.spikesource.com/java_certificate_import.htm" rel="nofollow" style="background-image: url(http://www.headwired.com/wp-content/themes/headwired/images/icon_url_small.png); background-repeat: no-repeat no-repeat; color: #3aa6d8; display: block; font-family: 'Century Gothic', 'Lucida Grande', Verdana, Arial, sans-serif; font-size: 0.9em; height: 16px; margin-left: 30px; padding-left: 20px; text-decoration: initial;" title="http://blog.spikesource.com/java_certificate_import.htm">Java LDAP SSL Certificate Import</a> <a href="http://greg.cathell.net/php_ldap_ssl.html" rel="nofollow" style="background-image: url(http://www.headwired.com/wp-content/themes/headwired/images/icon_url_small.png); background-repeat: no-repeat no-repeat; color: #3aa6d8; display: block; font-family: 'Century Gothic', 'Lucida Grande', Verdana, Arial, sans-serif; font-size: 0.9em; height: 16px; margin-left: 30px; padding-left: 20px; text-decoration: initial;" title="http://greg.cathell.net/php_ldap_ssl.html">LDAP SSL via PHP</a></div></div></div></div>

Performance Testing LDAP – Basics

A while back, I took some time to familariase myself with the Lightweight Directory Access Protocol (LDAP) from a performance testing standp...

Performance Daddy

Using Regular Expressions in LoadRunner

Performance Testing LDAP – Basics

Popular Posts

Tags

Blog Archive