#!/usr/bin/python
# -*- coding: utf-8 -*-
# filename: ldap_test.py
import ldap
'''
实现LDAP用户登录验证,首先获取用户的dn,然后再验证用户名和密码
'''
#获得用户的dn
def getLdapUserDN(user):
l = ldap.initialize(ldapPath)
# Set LDAP protocol version used
l.protocol_version = ldap.VERSION3
l.simple_bind_s(ldapUser,ldapPasswd)
# l.simple_bind_s(dn,ldapPasswd)
searchScope = ldap.SCOPE_SUBTREE
searchFiltername = "sAMAccountName"
retrieveAttributes = None
searchFilter = '(' + searchFiltername + "=" + user +')'
ldap_result_id = l.search(baseDN, searchScope, searchFilter, retrieveAttributes)
result_type, result_data = l.result(ldap_result_id,1)
if(not len(result_data) == 0):
r_a,r_b = result_data[0]
print r_b["distinguishedName"]
return 1, r_b["distinguishedName"][0]
else:
return 0, ''
if __name__ == '__main__':
ldapPath = "ldap://x.x.x.x"
baseDN = "OU=demo,DC=AD,DC=xx,DC=com"
# ldapUser = "root"
ldapUser = "CN=admin,OU=demo,DC=AD,DC=xx,DC=com"
ldapPasswd = "demo"
passwd = "0"
dn = getLdapUserDN("test1")[1]
print dn
my_ldap = ldap.initialize(ldapPath)
print my_ldap.simple_bind_s(dn,passwd)
参考文档:
http://www.vpsee.com/2012/11/use-python-...
http://www.linuxidc.com/Linux/2015-02/11...
**粗体** _斜体_ [链接](http://example.com) `代码` - 列表 > 引用
。你还可以使用@
来通知其他用户。