Show HN: Moribito – A TUI for LDAP Viewing/Queries (opens in new tab)

(github.com)

106 pointswoumn6mo ago24 comments

Check out my TUI I wrote for viewing and querying an LDAP. I need to do basic queries and validation daily for work, and as I work on a mac, there are really no good options. The major player is the Apache Directory Studio which is... not great. So I decided to create a new one.

24 comments

zephyreon6mo ago

As someone that spends an inordinate amount of time in LDAP for work, it warms my heart to see this project. Will definitely try it out!

zephyreon6mo ago

Apache Directory Studio is extremely cumbersome / heavy so this is much appreciated.

mbreese6mo ago

That was what I immediately was thinking about. I wish I had had a tool like this when admining an LDAP server for a compute cluster. This would have made my life much easier, as opposed to using Apache Directory Studio through SSH tunnels.

I’m glad this tool exists.

woumnOP6mo ago

I hate it so much. And it barely works with newer macs.

majkinetor6mo ago

This is epic, especially as it is repository friendly. Thank you.

woumnOP6mo ago

You're very welcome!

majkinetor6mo ago

Tested it now somewhat. Some points so far:

1. Installation script doesn't work on Windows. Exit 1 is particularly problematic as it kills the current shell

2. No search on current page vim style (/) or full page up/down J/K

3. On Query page j works but k somewhat scrambless the page in Windows terminal

Not sure how seriously you want to support Windows, I could rise tickets on Github

1 more reply

throw0101a6mo ago

Is it possible to view/edit the "cn=config" tree of OpenLDAP to make configuration changes with this?

I often do

    ldapvi -h ldapi:/// -Y EXTERNAL -b 'cn=config'

and another tool could be useful.

woumnOP6mo ago

It would be possible, but I don't have a good ldap server to test on, especially one I can modify config changes. If you'd like to contribute to the repo, adding a test ldap server that can be used for development would enable a lot more features.

throw0101a6mo ago

If you have a Debian or Ubuntu system available, installing the `slapd` package (OpenLDAP) would be sufficient to get something on localhost or ldapi:///. RH-based systems have openldap* packages.

You don't really have to do much more than that for the purpose of testing this (no creating of accounts, groups, sub-trees, etc).

Perhaps at most go to the stanza/paragraph that defines "olcDbIndex" values, add a new one, and see if a new index file is created in "olcDbDirectory" (often /var/lib/ldap):

* https://www.zytrax.com/books/ldap/apa/indeces.html

* https://warlord0blog.wordpress.com/2020/10/19/ldap-indexes/

bravetraveler6mo ago

May find this worth a whirl, hosted instance: https://www.freeipa.org/page/Demo

Verified the services respond/credentials work [through the UI, my ldapsearch-fu is weak] :)

johntash6mo ago

As someone else who has to do a lot of work with LDAP, thank you!

You might want to consider adding a LICENSE file to the repo. That's the first place I looked before noticing it at the bottom of the readme.

woumnOP6mo ago

I am thinking you opened an issue. Thank you! I added one.

dionian6mo ago

We need more TUIs! Love it!

joelp6mo ago

The OP should post this on terminal trove [0]

There are lots of TUIs there.

[0] https://terminaltrove.com/

dionian6mo ago

Nice, thanks for the link. Right up my alley

woumnOP6mo ago

Will do!

woumnOP6mo ago

Thank you!

victor1066mo ago

Does this work with AD?

woumnOP6mo ago

Haven't tested, but i think it should. it's using Go's LDAP library in the background

jcims6mo ago

Miss my days tinkering with LDAP. This looks great, thanks!

oaiey6mo ago

Me too. I also believe that LDAP and directory services are overlooked today

7y3g3g2h2u286mo ago

176 276 123

j / k navigate · click thread line to collapse

24 comments

zephyreon6mo ago

As someone that spends an inordinate amount of time in LDAP for work, it warms my heart to see this project. Will definitely try it out!

zephyreon6mo ago

Apache Directory Studio is extremely cumbersome / heavy so this is much appreciated.

mbreese6mo ago

I’m glad this tool exists.

woumnOP6mo ago

I hate it so much. And it barely works with newer macs.

majkinetor6mo ago

This is epic, especially as it is repository friendly. Thank you.

woumnOP6mo ago

You're very welcome!

majkinetor6mo ago

Tested it now somewhat. Some points so far:

1. Installation script doesn't work on Windows. Exit 1 is particularly problematic as it kills the current shell

2. No search on current page vim style (/) or full page up/down J/K

3. On Query page j works but k somewhat scrambless the page in Windows terminal

Not sure how seriously you want to support Windows, I could rise tickets on Github

1 more reply

throw0101a6mo ago

Is it possible to view/edit the "cn=config" tree of OpenLDAP to make configuration changes with this?

I often do

    ldapvi -h ldapi:/// -Y EXTERNAL -b 'cn=config'

and another tool could be useful.

woumnOP6mo ago

throw0101a6mo ago

If you have a Debian or Ubuntu system available, installing the `slapd` package (OpenLDAP) would be sufficient to get something on localhost or ldapi:///. RH-based systems have openldap* packages.

You don't really have to do much more than that for the purpose of testing this (no creating of accounts, groups, sub-trees, etc).

Perhaps at most go to the stanza/paragraph that defines "olcDbIndex" values, add a new one, and see if a new index file is created in "olcDbDirectory" (often /var/lib/ldap):

* https://www.zytrax.com/books/ldap/apa/indeces.html

* https://warlord0blog.wordpress.com/2020/10/19/ldap-indexes/

bravetraveler6mo ago

May find this worth a whirl, hosted instance: https://www.freeipa.org/page/Demo

Verified the services respond/credentials work [through the UI, my ldapsearch-fu is weak] :)

johntash6mo ago

As someone else who has to do a lot of work with LDAP, thank you!

You might want to consider adding a LICENSE file to the repo. That's the first place I looked before noticing it at the bottom of the readme.

woumnOP6mo ago

I am thinking you opened an issue. Thank you! I added one.

dionian6mo ago

We need more TUIs! Love it!