Show HN: Moribito – A TUI for LDAP Viewing/Queries

(github.com)

103 points | by woumn 5 days ago ago

24 comments

  • zephyreon 5 days ago ago

    As someone that spends an inordinate amount of time in LDAP for work, it warms my heart to see this project. Will definitely try it out!

    • zephyreon 5 days ago ago

      Apache Directory Studio is extremely cumbersome / heavy so this is much appreciated.

      • mbreese 5 days ago ago

        That was what I immediately was thinking about. I wish I had had a tool like this when admining an LDAP server for a compute cluster. This would have made my life much easier, as opposed to using Apache Directory Studio through SSH tunnels.

        I’m glad this tool exists.

      • woumn 5 days ago ago

        I hate it so much. And it barely works with newer macs.

  • majkinetor 5 days ago ago

    This is epic, especially as it is repository friendly. Thank you.

    • woumn 5 days ago ago

      You're very welcome!

      • majkinetor 5 days ago ago

        Tested it now somewhat. Some points so far:

        1. Installation script doesn't work on Windows. Exit 1 is particularly problematic as it kills the current shell

        2. No search on current page vim style (/) or full page up/down J/K

        3. On Query page j works but k somewhat scrambless the page in Windows terminal

        Not sure how seriously you want to support Windows, I could rise tickets on Github

        • woumn 5 days ago ago

          I don't have a way to debug windows, so atm it's kind wysiwyg.

          #2 is a great idea. open a ticket if you'd like.

  • throw0101a 5 days ago ago

    Is it possible to view/edit the "cn=config" tree of OpenLDAP to make configuration changes with this?

    I often do

        ldapvi -h ldapi:/// -Y EXTERNAL -b 'cn=config'
    
    and another tool could be useful.
    • woumn 5 days ago ago

      It would be possible, but I don't have a good ldap server to test on, especially one I can modify config changes. If you'd like to contribute to the repo, adding a test ldap server that can be used for development would enable a lot more features.

      • throw0101a 4 days ago ago

        If you have a Debian or Ubuntu system available, installing the `slapd` package (OpenLDAP) would be sufficient to get something on localhost or ldapi:///. RH-based systems have openldap* packages.

        You don't really have to do much more than that for the purpose of testing this (no creating of accounts, groups, sub-trees, etc).

        Perhaps at most go to the stanza/paragraph that defines "olcDbIndex" values, add a new one, and see if a new index file is created in "olcDbDirectory" (often /var/lib/ldap):

        * https://www.zytrax.com/books/ldap/apa/indeces.html

        * https://warlord0blog.wordpress.com/2020/10/19/ldap-indexes/

      • bravetraveler 5 days ago ago

        May find this worth a whirl, hosted instance: https://www.freeipa.org/page/Demo

        Verified the services respond/credentials work [through the UI, my ldapsearch-fu is weak] :)

  • johntash 5 days ago ago

    As someone else who has to do a lot of work with LDAP, thank you!

    You might want to consider adding a LICENSE file to the repo. That's the first place I looked before noticing it at the bottom of the readme.

    • woumn 5 days ago ago

      I am thinking you opened an issue. Thank you! I added one.

  • dionian 5 days ago ago

    We need more TUIs! Love it!

  • victor106 5 days ago ago

    Does this work with AD?

    • woumn 5 days ago ago

      Haven't tested, but i think it should. it's using Go's LDAP library in the background

  • jcims 5 days ago ago

    Miss my days tinkering with LDAP. This looks great, thanks!

    • oaiey 5 days ago ago

      Me too. I also believe that LDAP and directory services are overlooked today

  • 7y3g3g2h2u28 5 days ago ago

    176 276 123