
Research
/Security News
Weaponizing Discord for Command and Control Across npm, PyPI, and RubyGems.org
Socket researchers uncover how threat actors weaponize Discord across the npm, PyPI, and RubyGems ecosystems to exfiltrate sensitive data.
@simulacrum/ldap-simulator
Advanced tools
Run local LDAP server with specific users for local development and integration testing
Simulate an actual LDAP server for testing and development.
Often you are working on software that depends on the presence of an LDAP directory. This let's you create an LDAP server in a known state that can be used for offline development and testing.
There are two different ways to start an LDAP simulator, but they both involve the same set of options. If you are running in a vanilla JavaScript environment, you can use promise-based API.
import { runLDAPServer } from "@simulacrum/ldap-simulator";
async function run() {
let server = await runLDAPServer({
port: 3890,
baseDN: "ou=users,dc=org.com",
bindDn: "admin@org.com",
bindPassword: "password",
groupDN:"ou=groups,dc=org.com",
users: [{
//required
cn: 'Charles Lowell',
//optional to bind using this user
password: "super-secret-but-not-really",
//optional:
uid: 'cowboyd',
}]
});
console.log(`LDAP server running on ${server.port}`);
try {
//.... do some stuff;
} finally {
// don't forget to release the server resources!
await server.close();
}
}
However, if you are already using Effection, the LDAP server is available as a Resource, and so you can use it freely in any context:
import { createLDAPServer } from "@simulacrum/ldap-simulator";
function* run() {
let server = yield createLDAPServer({
port: 3890,
baseDN: "ou=users,dc=org.com",
bindDn: "admin@org.com",
bindPassword: "password",
groupDN:"ou=groups,dc=org.com",
users: [{
//required
cn: 'Charles Lowell',
//optional to bind using this user
password: "super-secret-but-not-really",
//optional:
uid: 'cowboyd',
}]
});
//... do some stuff
}
FAQs
Run local LDAP server with specific users for local development and integration testing
We found that @simulacrum/ldap-simulator demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
Socket researchers uncover how threat actors weaponize Discord across the npm, PyPI, and RubyGems ecosystems to exfiltrate sensitive data.
Security News
Socket now integrates with Bun 1.3’s Security Scanner API to block risky packages at install time and enforce your organization’s policies in local dev and CI.
Research
The Socket Threat Research Team is tracking weekly intrusions into the npm registry that follow a repeatable adversarial playbook used by North Korean state-sponsored actors.