use ldap_client::{ClientBuilder, SecretString};

let client = ClientBuilder::new("ldap.example.com", 389)
    .connect().await?;

client.simple_bind("cn=admin,dc=example,dc=com", &SecretString::from("password")).await?;

use ldap_client::ClientBuilder;

// LDAPS on port 636
let client = ClientBuilder::from_url("ldaps://ldap.example.com")?
    .connect().await?;

use ldap_client::{Filter, SearchScope};

let entries = client.search(
    "dc=example,dc=com",
    SearchScope::WholeSubtree,
    Filter::eq("uid", "alice"),
    vec!["cn".into(), "mail".into()],
).await?;

for entry in &entries {
    println!("{}", entry.dn);
}

use ldap_client::{Filter, SearchScope};

let entry = client.search_one(
    "dc=example,dc=com",
    SearchScope::WholeSubtree,
    Filter::eq("uid", "alice"),
    vec!["cn".into(), "mail".into()],
).await?;

if let Some(entry) = entry {
    println!("{}", entry.dn);
}

use ldap_client::{Filter, SearchScope};

let all_entries = client.search_paged(
    "dc=example,dc=com",
    SearchScope::WholeSubtree,
    Filter::present("objectClass"),
    vec!["dn".into()],
    100, // page size
).await?;

use ldap_client::{Filter, SearchScope};

let mut stream = client.search_paged_stream(
    "dc=example,dc=com",
    SearchScope::WholeSubtree,
    Filter::present("objectClass"),
    vec!["dn".into()],
    100,
);

while let Some(page) = stream.next_page().await? {
    println!("got {} entries", page.len());
}

use ldap_client::{Modification, ModifyOperation, PartialAttribute};

// Add
client.add("cn=new,dc=example,dc=com", vec![
    PartialAttribute::new("objectClass", vec!["inetOrgPerson"]),
    PartialAttribute::new("cn", vec!["new"]),
    PartialAttribute::new("sn", vec!["User"]),
]).await?;

// Modify
client.modify("cn=new,dc=example,dc=com", vec![
    Modification {
        operation: ModifyOperation::Replace,
        attribute: PartialAttribute::new("sn", vec!["Updated"]),
    },
]).await?;

// Delete
client.delete("cn=new,dc=example,dc=com").await?;

let is_member = client.compare(
    "cn=alice,dc=example,dc=com",
    "memberOf",
    b"cn=admins,dc=example,dc=com",
).await?;

use ldap_client::{ClientBuilder, ReferralPolicy};

let client = ClientBuilder::new("ldap.example.com", 389)
    .referral_policy(ReferralPolicy::Return)
    .connect().await?;

// Operations that trigger a referral will return Error::Referral
// with the referral URLs instead of Error::Ldap

if !client.is_connected() {
    client.reconnect().await?;
    client.rebind_service_account().await?;
}

use ldap_client::{ClientBuilder, Transport};

let client = ClientBuilder::new("ldap.example.com", 389)
    .transport(Transport::StartTls)
    .connect().await?;

use ldap_client::{ClientBuilder, TlsConfig, TlsVersion, Transport};

let client = ClientBuilder::new("ldap.example.com", 636)
    .transport(Transport::Tls)
    .tls(TlsConfig::default().min_tls_version(TlsVersion::Tls13))?
    .connect().await?;

if let Some(authz_id) = client.who_am_i().await? {
    println!("bound as {authz_id}");
}

use ldap_client::ClientBuilder;

let client = ClientBuilder::new("ldap.example.com", 389)
    .on_unsolicited_notification(|resp| {
        eprintln!("server notification: {:?}", resp.oid);
    })
    .connect().await?;