Prerequisites
- Loom LDAP Browser installed (see Installation)
- Access to an LDAP server (host, credentials, and base DN)
- Or use offline demo mode for testing
Connect to your LDAP server
- Connection dialog (recommended)
- Command line
- Config file
- Offline demo
Perfect for first-time users and managing multiple servers.
Enter connection details
Fill in the required fields:
- Host: Your LDAP server hostname (e.g.,
ldap.example.com) - Port:
389for LDAP,636for LDAPS - Bind DN: Your authentication DN (e.g.,
cn=admin,dc=example,dc=com) - Base DN: Starting point for browsing (e.g.,
dc=example,dc=com) - TLS Mode:
auto(recommended),ldaps,starttls, ornone
Enter your password
When prompted, enter your bind password. The password is not saved unless you explicitly save the profile.
Browse the directory
Once connected, you’ll see the directory tree in the left panel and entry details in the right panel.Navigate the tree
| Key | Action |
|---|---|
j or ↓ | Move down |
k or ↑ | Move up |
l or → or Enter | Expand node / view entry |
h or ← | Collapse node |
View entry details
When you select an entry in the tree, all its attributes appear in the detail panel on the right:- Navigate attributes with
j/kor arrow keys - Press
eorEnterto edit an attribute value - Press
ato add a new attribute - Press
dto delete an attribute value
Search for entries
Enter an LDAP filter
Type an LDAP search filter, for example:This finds all entries where the
cn attribute starts with “john”.Common search filters
| Filter | Description |
|---|---|
(objectClass=person) | All person entries |
(cn=Alice*) | Entries where cn starts with “Alice” |
(mail=*@example.com) | Entries with email ending in @example.com |
(&(objectClass=inetOrgPerson)(mail=*)) | All inetOrgPerson entries with an email |
(|(cn=Alice)(cn=Bob)) | Entries where cn is Alice OR Bob |
Edit an entry
Changes are sent to the LDAP server immediately. There is no undo — the change is applied to the live directory.
Create a new entry
Press a in the tree panel
A dialog opens prompting for:
- RDN: Relative Distinguished Name (e.g.,
cn=NewUser) - Object classes: Comma-separated (e.g.,
inetOrgPerson,posixAccount) - Extra attributes: Optional comma-separated
attr=valuepairs
Export data
Configure export
- Filter: LDAP search filter (e.g.,
(objectClass=person)) - Attributes: Comma-separated list or
*for all - Format: LDIF, JSON, CSV, or XLSX (press
F2to cycle) - Filename: Path to save (extension determines format)
View schema
PressF6 to open the schema viewer. This shows:
- Object Classes: Structural, abstract, and auxiliary classes with their MUST and MAY attributes
- Attribute Types: All attribute types with their syntax and single-value flag
j/k, switch tabs with Tab, and filter by name with /.
Essential keybindings
| Key | Action |
|---|---|
F1 | Switch to profiles layout |
F2 | Connection dialog |
F4 | Export dialog |
F5 or ? | Help overlay |
F6 | Schema viewer |
F7 | Toggle log panel |
F8 | Bulk update dialog |
F9 or / | Focus search input |
Tab | Next panel |
Shift+Tab | Previous panel |
Ctrl+Q | Quit |
Next steps
User guide
Learn all the features in depth
Configuration
Customize config.toml and keybindings
Authentication
Set up password managers and keychains
Export & import
Work with LDIF, JSON, CSV, and XLSX
Advanced features
Credential management
Instead of entering your password every time, configure one of these methods:- Command: Execute a shell command (e.g.,
pass,op,gpg) - Keychain: Use your OS keychain (macOS Keychain, GNOME Keyring, Windows Credential Manager)
- Vault: Encrypted vault with master password
Bulk updates
PressF8 to open the bulk update dialog. Apply a single modification to all entries matching a filter:
- Replace: Set an attribute to a new value
- Add: Add a value to an attribute
- Delete: Remove an attribute or specific value
Multi-tab workflows
PressCtrl+Right or gt to open a new tab. Each tab is an independent LDAP connection. Switch between tabs with Ctrl+Left/Ctrl+Right or gT/gt.
Use this to:
- Compare entries across different servers
- Test changes in staging before applying to production
- Work with multiple base DNs simultaneously