
Research
Two Malicious Rust Crates Impersonate Popular Logger to Steal Wallet Keys
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
@simulacrum/ldap-simulator
Advanced tools
Run local LDAP server with specific users for local development and integration testing
Simulate an actual LDAP server for testing and development.
Often you are working on software that depends on the presence of an LDAP directory. This let's you create an LDAP server in a known state that can be used for offline development and testing.
There are two different ways to start an LDAP simulator, but they both involve the same set of options. If you are running in a vanilla JavaScript environment, you can use promise-based API.
import { runLDAPServer } from "@simulacrum/ldap-simulator";
async function run() {
let server = await runLDAPServer({
port: 3890,
baseDN: "ou=users,dc=org.com",
bindDn: "admin@org.com",
bindPassword: "password",
groupDN:"ou=groups,dc=org.com",
users: [{
//required
cn: 'Charles Lowell',
//optional to bind using this user
password: "super-secret-but-not-really",
//optional:
uid: 'cowboyd',
}]
});
console.log(`LDAP server running on ${server.port}`);
try {
//.... do some stuff;
} finally {
// don't forget to release the server resources!
await server.close();
}
}
However, if you are already using Effection, the LDAP server is available as a Resource, and so you can use it freely in any context:
import { createLDAPServer } from "@simulacrum/ldap-simulator";
function* run() {
let server = yield createLDAPServer({
port: 3890,
baseDN: "ou=users,dc=org.com",
bindDn: "admin@org.com",
bindPassword: "password",
groupDN:"ou=groups,dc=org.com",
users: [{
//required
cn: 'Charles Lowell',
//optional to bind using this user
password: "super-secret-but-not-really",
//optional:
uid: 'cowboyd',
}]
});
//... do some stuff
}
FAQs
Run local LDAP server with specific users for local development and integration testing
We found that @simulacrum/ldap-simulator demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.