Show HN: Moribito – A TUI for LDAP Viewing/Queries | Hacker News Reader

Show HN: Moribito – A TUI for LDAP Viewing/Queries

github.com

106 pointswoumn24 comments

Check out my TUI I wrote for viewing and querying an LDAP. I need to do basic queries and validation daily for work, and as I work on a mac, there are really no good options. The major player is the Apache Directory Studio which is... not great. So I decided to create a new one.

Open articleView on HN

As someone that spends an inordinate amount of time in LDAP for work, it warms my heart to see this project. Will definitely try it out!

Apache Directory Studio is extremely cumbersome / heavy so this is much appreciated.

That was what I immediately was thinking about. I wish I had had a tool like this when admining an LDAP server for a compute cluster. This would have made my life much easier, as opposed to using Apache Directory Studio through SSH tunnels.

I’m glad this tool exists.

I hate it so much. And it barely works with newer macs.

This is epic, especially as it is repository friendly. Thank you.

You're very welcome!

Tested it now somewhat. Some points so far:

1. Installation script doesn't work on Windows. Exit 1 is particularly problematic as it kills the current shell

2. No search on current page vim style (/) or full page up/down J/K

3. On Query page j works but k somewhat scrambless the page in Windows terminal

Not sure how seriously you want to support Windows, I could rise tickets on Github

I don't have a way to debug windows, so atm it's kind wysiwyg.

#2 is a great idea. open a ticket if you'd like.

Is it possible to view/edit the "cn=config" tree of OpenLDAP to make configuration changes with this?

I often do

    ldapvi -h ldapi:/// -Y EXTERNAL -b 'cn=config'

and another tool could be useful.

It would be possible, but I don't have a good ldap server to test on, especially one I can modify config changes. If you'd like to contribute to the repo, adding a test ldap server that can be used for development would enable a lot more features.

May find this worth a whirl, hosted instance: https://www.freeipa.org/page/Demo

Verified the services respond/credentials work [through the UI, my ldapsearch-fu is weak] :)

If you have a Debian or Ubuntu system available, installing the `slapd` package (OpenLDAP) would be sufficient to get something on localhost or ldapi:///. RH-based systems have openldap* packages.

You don't really have to do much more than that for the purpose of testing this (no creating of accounts, groups, sub-trees, etc).

Perhaps at most go to the stanza/paragraph that defines "olcDbIndex" values, add a new one, and see if a new index file is created in "olcDbDirectory" (often /var/lib/ldap):

* https://www.zytrax.com/books/ldap/apa/indeces.html

* https://warlord0blog.wordpress.com/2020/10/19/ldap-indexes/

As someone else who has to do a lot of work with LDAP, thank you!

You might want to consider adding a LICENSE file to the repo. That's the first place I looked before noticing it at the bottom of the readme.

I am thinking you opened an issue. Thank you! I added one.

We need more TUIs! Love it!

Thank you!

The OP should post this on terminal trove [0]

There are lots of TUIs there.

[0] https://terminaltrove.com/

Will do!

Nice, thanks for the link. Right up my alley