Arbor LDAP Browser

Arbor is a native macOS LDAP browser and administration tool for directory services professionals. Connect to any LDAP or LDAPS server — including Microsoft Active Directory, NetIQ / OpenText eDirectory, OpenLDAP, 389 Directory Server, FreeIPA, and more — and manage your directory with a clean, responsive interface built around modern macOS conventions.

Browse and Search

• Lazy-loading tree with paged children, container-only filtering, and naming-context awareness
• Quick search and Advanced Search with RFC 4515 filter validation and schema-backed attribute autocomplete
• Graphical filter builder plus an optional AI assistant that turns plain English into LDAP filters
• Saved searches with one-click recall, plus recent-search history
• Rich attribute display: schema-aware rendering for DNs, dates, booleans, integers, eDirectory net addresses and paths, AD userAccountControl flag breakdowns, and binary data
• Reveal-in-Tree from any DN value to jump and expand the directory hierarchy
• Session-scoped activity log with sensitive-attribute masking and CSV export

Secure Connections

• Full TLS / LDAPS support with trust prompts and per-host certificate pinning
• Keychain-stored passwords for saved connection profiles
• Optional iCloud sync of connection profiles across your Macs
• Read-only mode for safe browsing of production directories
• Automatic directory-type detection

Active Directory Tools

• Domain Info, Password Policy, Account Lockout Status
• Nested Group Membership traversal
• Replication Metadata inspection
• userAccountControl flag editor with per-flag toggles

eDirectory Tools

• Replication Status — per-server replica health
• Partition Status — cross-server replica holders with type, state, and sync indicators
• Server Statistics from cn=monitor
• Tree-wide ACL editor and per-entry ACL editor

OpenLDAP / 389 Directory Server Tools

• Server Monitor with backend statistics
• Replication agreement status

Arbor Pro

Unlock advanced capabilities with a one-time in-app purchase:

• Full editing — add, edit, delete attribute values; rename, move, and delete entries; create new entries via a schema-aware wizard
• Delete Subtree with progress and cancel
• LDIF Import wizard with changetype support, update-existing mode, live progress, and per-operation logging
• LDIF Export — entries, containers, subtrees, search results, or the full schema; configurable line endings and fold length
• CSV Export of search results with configurable column delimiter and multi-value separator
• X.509 Certificate Viewer — decode userCertificate, nDSPKIPublicKeyCertificate, and similar binary attributes; export as .cer
• Binary attribute load/save to disk for certificate replacement and media upload
• Password management — Active Directory reset, eDirectory Universal Password, and standard LDAP password modify
• Effective Rights Calculator (eDirectory)
• Schema Editor — browse, create, edit, and delete attribute types and object classes
• DirXML / Identity Manager command panel with chunked-response support