FilesExpand file tree

 master

/

ldap.py

Copy path

Blame

More file actions

Blame

More file actions

Latest commit

 

History

History

History

90 lines (73 loc) · 3.23 KB

 master

/

ldap.py

Copy path

Top

File metadata and controls

• Code
• Blame

90 lines (73 loc) · 3.23 KB

Raw

Copy raw file

Download raw file

Open symbols panel

Edit and raw actions

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

42

43

44

45

46

47

48

49

50

51

52

53

54

55

56

57

58

59

60

61

62

63

64

65

66

67

68

69

70

71

72

73

74

75

76

77

78

79

80

81

82

83

84

85

86

87

88

89

90

#!usr/bin/env python

#coding: utf-8

import os

import sys

import ldap

def login_ldap(username, password):

try:

# print("开始执行")

Server = "ldap://8.8.8.8:389"

baseDN = "dc=baidu,dc=com"

searchScope = ldap.SCOPE_SUBTREE

# 设置过滤属性，这里只显示cn=test的信息

searchFilter = "sAMAccountName=" + username

# 为用户名加上域名

username = 'baidu\\' + username

# None表示搜索所有属性，['cn']表示只搜索cn属性

retrieveAttributes = None

conn = ldap.initialize(Server)

#非常重要

conn.set_option(ldap.OPT_REFERRALS, 0)

conn.protocol_version = ldap.VERSION3

# 这里用户名是域账号的全名例如domain/name

#print conn.simple_bind_s(username, password)

conn.simple_bind_s(username, password)

# print 'ldap connect successfully'

#调用search方法返回结果id

ldap_result_id = conn.search(baseDN, searchScope, searchFilter, retrieveAttributes)

result_set = []

#print ldap_result_id

#print("****************")

while 1:

result_type, result_data = conn.result(ldap_result_id, 0)

if(result_data == []):

break

else:

if result_type == ldap.RES_SEARCH_ENTRY:

result_set.append(result_data)

#print result_set

Name,Attrs = result_set[0][0]

if hasattr(Attrs, 'has_key') and Attrs.has_key('name'):

ret = {}

#distinguishedName = Attrs['mail'][0]

#distinguishedName = Attrs['name'][0]

#distinguishedName = Attrs['displayName'][0]

#distinguishedName = Attrs['mail'][0]

#distinguishedName = Attrs['memberOf'][0]

#distinguishedName = Attrs['mailNickname'][0]

#distinguishedName = Attrs['sAMAccountName'][0]

#distinguishedName = Attrs['distinguishedName'][0]

#distinguishedName = Attrs['title'][0]

#distinguishedName = Attrs['department'][0]

#distinguishedName = Attrs['manager'][0]

# print "Login Info for user : %s" % distinguishedName

ret['mail'] = Attrs['mail'][0]

ret['username'] = Attrs['name'][0]

ret['nickname'] = Attrs['displayName'][0]

ret['sAMAccountName'] = Attrs['sAMAccountName'][0]

ret['memberOf'] = Attrs['memberOf'][0]

ret['distinguishedName'] = Attrs['distinguishedName'][0]

ret['code'] = 200010

# print Attrs['memberOf'][0]

#print Attrs['sAMAccountName'][0]

# print Attrs['title'][0]

# print Attrs['department'][0]

return ret

else:

return {'code': 400011, 'msg': u'认证失败'}

except ldap.LDAPError, e:

return {'code': 400012, 'msg': u'认证失败'}

if __name__ == "__main__":

username = "" # ldap中用户名

password = "" # ldap中密码

print login_ldap(username, password)