I\'m looking for a good LDAP editor. This is a priorized list of requirements: N

Question

I'm looking for a good LDAP editor. This is a priorized list of requirements:

Not tightly integrated to any specific LDAP server (for example, Fedora Directory have a built-in editor, which is not useful with other LDAP directories)
Easy to use - preferably GUI, as command line programs tend to require quite a bit of memorized commands and keys.
Obviously, adding/modifying/deleting objects and attributes. Schema changes are out-of-scope, but of course, some support is a plus.
Human readable attribute names - standard fields are not too self-explanatory (sn, cn, o, l etc.)
Search for
Objects in the tree - for example, users under specific organization
Attributes and attribute values - when there's tens or hundreds of attributes for object, manually finding the right attribute is a bit cumbersome.
Preferably batch editing: select multiple objects and edit specific attributes. For example, setting password expiration dates for multiple users.
Linking in UI: going from group page to group member page should be easy.
Reverse relations: for example, (command to) show all groups user is member of.
Connection profiles, supporting more than one server. It's annoying to enter server details when changing the server.

Paid software is ok, as long as price is reasonable (no more than 200

Explanation / Answer

I did use each of these three LDAP browser in different projects:

LDAP Admin - Windows
jXplorer - Java Based
Apache Directory Studio - Java based

There are all free but the one which give the most features is Apache Directory Studio. After saying that, I am not an LDAP expert to say it does all the things you asked; for me it was way too much complicated and slow compared to the first one (LDAP Admin).

The pros and cons for that list are:

LDAP Admin
pros: fast and lightweight
cons: limited for edition and probably not a tool for ldap administrators; run only on Windows
jXplorer
pros: multiplatform (java based); simple
cons: a bit slow;
Apache Directory Studio
pros: a lot of functionalities; eclipse based (GUI; many options)
cons: eclipse based (slow startup); complicated for simple task.

As your feature list is long, I think the best fit would be Apache Director Studio.

The following list names all features you ask for:

It supports all LDAP servers as long they use the LDAP protocol.
OK, but a bit slow to startup (like all eclipse based programs)
OK, contains a value editor for each specific types (images, text, etc...)
I am note sure, but I think it support different views like one with aliases (in preferences).
a) LDAP Browser supports many filtering options like searching in a specific ou.
b) Not sure what features you re looking for; the LDAP Browser have several preferences to search for specific
LDAP Browser have some wizards like Batch operation wizard
Not sure, but you can see the tree, then passing from one group to any member should not be an issue.
Not sure, but searching / filtering have a lot of advanced features; I think it sould be possible by using advanced filtering
You can create several Connection and Project for managing your different server or projects

Related Questions

Navigate

• Browse (All)
• Browse I
• Subjects

Integrity-first tutoring: explanations and feedback only — we do not complete graded work. Learn more.