Integrate the CloudFace into your own applications. No custom API's to write or learn. Your user's address book can be accessed directly using the LDAP protocol.
We've collected a few sample sites that show the use of the (native) LDAP API in several different languages:
For the most part we've tried to use the RFC standard schema attributes in defining the address book. But we extend it with a few additional items, see Schema Extension below. In addition, we make some special considerations for managing the attributes homePostalAddress, dateOfBirth, and the jpegPhoto.
312 S. Bascom (homeStreet) Santa Clara (homeCity) CA (homeState) 94082 (homePostalCode) USA (homeCountry)
birthYear birthMonth birthDay
Your code should keep these attributes dateOfBirth and homePostalAddress in sync with their birth* and the home* attributes.
In addition, the jpegPhoto attribute has some special requirements. In addition to the RFC standard 1.3.6.1.4.1.1466.115.121.1.28 syntax, we also allow this attribute to contain a URL of the photo resource. This URL can be of the form http or file reference.
Our registered base OID is: 1.3.6.1.4.1.27867. LDAPBook makes some minor extensions to the default schema:
People Objects
| OID | Name | Syntax | Notes |
|---|---|---|---|
| 1.3.6.1.4.1.27867.1.1.1 | imhandle | 1.3.6.1.4.1.1466.115.121.1.15 | |
| 1.3.6.1.4.1.27867.1.1.5 | tag | 1.3.6.1.4.1.1466.115.121.1.15 | |
| 1.3.6.1.4.1.27867.1.1.6 | homeStreet | 1.3.6.1.4.1.1466.115.121.1.15 | |
| 1.3.6.1.4.1.27867.1.1.7 | homeCity | 1.3.6.1.4.1.1466.115.121.1.15 | |
| 1.3.6.1.4.1.27867.1.1.8 | homeState | 1.3.6.1.4.1.1466.115.121.1.15 | |
| 1.3.6.1.4.1.27867.1.1.9 | homePostalCode | 1.3.6.1.4.1.1466.115.121.1.15 | |
| 1.3.6.1.4.1.27867.1.1.10 | homeCountry | 1.3.6.1.4.1.1466.115.121.1.15 | |
| 1.3.6.1.4.1.27867.1.1.11 | birthYear | 1.3.6.1.4.1.1466.115.121.1.15 | |
| 1.3.6.1.4.1.27867.1.1.12 | birthMonth | 1.3.6.1.4.1.1466.115.121.1.15 | |
| 1.3.6.1.4.1.27867.1.1.13 | birthDay | 1.3.6.1.4.1.1466.115.121.1.15 | |
| 1.3.6.1.4.1.27867.1.1.14 | dateOfBirth | 1.3.6.1.4.1.1466.115.121.1.15 |
Event Objects
| OID | Name | Syntax | Notes |
|---|---|---|---|
| 1.3.6.1.4.1.27867.1.1.50 | dateOfEvent | 1.3.6.1.4.1.1466.115.121.1.15 | |
| 1.3.6.1.4.1.27867.1.1.51 | eventDay | 1.3.6.1.4.1.1466.115.121.1.27 | |
| 1.3.6.1.4.1.27867.1.1.52 | eventMonth | 1.3.6.1.4.1.1466.115.121.1.27 | |
| 1.3.6.1.4.1.27867.1.1.53 | eventYear | 1.3.6.1.4.1.1466.115.121.1.27 | |
| 1.3.6.1.4.1.27867.1.1.54 | longitude | 1.3.6.1.4.1.1466.115.121.1.15 | |
| 1.3.6.1.4.1.27867.1.1.55 | latitude | 1.3.6.1.4.1.1466.115.121.1.15 |
| OID | Name | MUST | MAY |
|---|---|---|---|
| 1.3.6.1.4.1.27867.1.2.4 | tag | mail $ cn | |
| 1.3.6.1.4.1.27867.1.2.1 | pabPerson | c $ otherMailbox $ imhandle $ telephone-office2 $ homeStreet $ homeCity $ homeState $ homePostalCode $ homeCountry $ birthYear $ birthMonth $ birthDay $ dateOfBirth | |
| 1.3.6.1.4.1.27867.1.2.5 | event | cn $ dateOfEvent | description $ longitude $ latitude $ eventDay $ eventMonth $ eventYear $ jpegPhoto |
Anonymous lookups to the public are disabled. You can connect to the LDAP server using the full DN of the user or you can lookup users with certain criteria to determine DN. This lookup requires special access. To request this feature be added to your account, please contact us. You'll need to have a valid account with Entic.net.
All contacts created using the LDAPBook interface get the following objectClass added:
The RDN for the contacts use the cn attribute. The contacts are stored under the uid=<username>, ou=People, o=entic.net branch.
Each contact can have one or more tags assigned to it. Tags are one or two word descriptions that describe that contact. We use the description attribute (OID: 2.5.4.13) to store the tag name in LDAP. You can assign the same tag name to multiple contacts.
Most of the access to LDAPBook will be done using the LDAP protocol itself, but we extend this with a few additional features.
The base URL to access the API is: https://api.entic.net/api HTTP Basic authentication should be used to connect. The user name is formatted as: user@DOMAIN (the Domain the API should be set with). The password is a MD5 hash.
The Content-Type header should be set to application/xml for POST and PUT requests.
Required: name, uid, and password Optional: mail, debug, subscribe, and domain
POST https://entic.net/api/account/register <account> <name>Full Name</name> <mail>asdf@sadf.com</mail> <uid>login</uid> <password>pass</password> <domain>entic.net</domain> <debug/> <subscribe/> </account>
HTTP/1.1 Status response codes with message
400 on validation failures <account> <result>error</result> <message>uid: too short</message> </account> 201 on success, with this response body <account> <result>success</result> </account>
Required: uid Optional: debug, and domain
POST https://entic.net/api/account/usage <account> <uid>login</uid> <domain>entic.net</domain> <debug/> </account>
HTTP/1.1 Status response codes with message
400 on validation failures
<account>
<result>error</result>
<message>uid: too short</message>
</account>
201 on success, with this response body
<account>
<result>success</result>
<usage>
<search max="200">150</search>
<entries max="200">50</entries>
<size max="5242880">2893832</size>
</usage>
</account>