Crate ldap_rs

Yet another LDAP client for Rust

Overview

This project aims to provide a minimal working LDAP client written in Rust focused on ergonomics, correctness and clean code. It uses tokio asynchronous runtime for network I/O and an excellent rasn crate for all ASN.1 goodness.

TLS connectivity is controlled by two mutually exclusive feature flags: tls-native-tls or tls-rustls. The default is to use tls-native-tls which uses the native-tls crate.

A minimal Kerberos support is provided via gssapi feature flag with the following limitations:

• SASL protection is not supported for plain connections, TLS should be used for all communication
• Channel binding is not supported

Roadmap

• Simple bind with username and password
• SASL EXTERNAL bind
• Kerberos GSSAPI bind (SASL protection is not implemented, use TLS instead)
• Plain, TLS and STARTTLS connections
• Simple search and paged search via asynchronous streams
• Documentation
• rustls support via optional feature flag
• Additional ProtocolOp client operations (add, modify, delete)
• Additional extended operations

Usage

Please see the examples directory.

Alternatives

ldap3 is actively maintained and has currently more features (e.g. Kerberos support).

License

Licensed under MIT or Apache license (LICENSE-MIT or LICENSE-APACHE)

Re-exports

• pub use bytes;
• pub use rasn_ldap;
• pub use client::*;
• pub use model::*;
• pub use options::*;
• pub use request::*;

Modules

• channel
  Low-level LDAP channel operations
• client
  LDAP client module
• controls
  LDAP controls
• error
  LDAP errors
• model
  Data structures
• oid
  OID definitions
• options
  LDAP connection options
• request
  LDAP request