Editing LDAP (section)

===LDAP Testing===
Below is test script to check whether you can connect to the LDAP server and get attributes back for a particular user.  This should generall be saved in ''/opt/eprints3/archives/ARCHIVE/bin/ldaplookup''  It can be called as follows:

 /opt/eprints3/archives/ARCHIVE/bin/ldaplookup USERNAME

 #!/usr/bin/perl -w
 
 # EPrints Services LDAP test script
 use Net::LDAP;
 use Net::LDAP::Constant;
 use strict;
 
 my ($user_sent) = $ARGV[0];
 
 # Params
 my $ldap_host = "ldaps://ad.example.org"; # Active Directory server on example.org domain
 my $bind_dn = "cn=USERNAME,ou=root,dc=example,dc=org"; # one or more 'ou's may need to be set
 my $bind_pword = "PASSWORD";
 my $base = "dc=example,dc=org"; # Likely the same domain as the AD server itself
 
 # Connect to server
 my $ldap = Net::LDAP->new( $ldap_host, version => 3, port => 636 ); # Version and port may need changing
 
 die "LDAP connect error: $@\n" unless defined $ldap;
 
 # Try to bind
 my $mesg;
 if( $bind_dn eq "" && $bind_pword eq "" )
 {
        $mesg = $ldap->bind; # anonymous bind
 }
 else
 {
        $mesg = $ldap->bind( $bind_dn, password => $bind_pword );
 }
 die "LDAP bind error: " . $mesg->error() . "\n" if $mesg->code();
 
 # Search for an account and get all available attributes (by not setting attrs)
 $mesg = $ldap->search (
        base    => $base,
        scope   => "sub",
        filter => "uid=$user_sent", # Most likely cn, uid or sAMAccountName
        sizelimit => 1,
 );
 if( $mesg->code() )
 {
        print STDERR "LDAP search error: ".$mesg->error."\n";
        exit;
 }
 
 my $entr = $mesg->pop_entry;
 unless( defined $entr )
 {
        print STDERR "LDAP no search results returned\n";
        exit 1;
 }
 
 # See what attributes are set for this user
 print $entr->dump;
 
 $ldap->unbind;