python-ldap实现登录案例

Posted 2020-08-11

 1 ldap_config = {
 2     ‘ldap_path‘: ‘ldap://xx.xx.xx.xx:389‘,
 3     ‘base_dn‘: ‘ou=users,dc=ledo,dc=com‘,
 4     ‘ldap_user‘: ‘uid=reporttest,ou=users,dc=ledo,dc=com‘,
 5     ‘ldap_pass‘: ‘111111.0‘,
 6     ‘original_pass‘: ‘111111.0‘
 7 }
 8 
 9 ldap_message = {
10     0: 0, #‘ok‘
11     1: 1, #‘用户名或密码错误‘
12     2: 2, #ldap验证异常‘
13 }
14 
15 import ldap
16 import base64
17 import hashlib
18 from config_message import ldap_config, ldap_message
19 
20 
21 class LDAP_API(object):
22 
23     _ldap_path = ldap_config[‘ldap_path‘]
24     _base_dn = ldap_config[‘base_dn‘]
25     _ldap_user = ldap_config[‘ldap_user‘]
26     _ldap_pass = ldap_config[‘ldap_pass‘]
27     _original_pass = ldap_config[‘original_pass‘]
28 
29     # 连接ldap服务器
30     def __init__(self):
31 
32         try:
33             self.ldapconn = ldap.initialize(self._ldap_path)
34             self.ldapconn.protocal_version = ldap.VERSION3
35             self.ldapconn.simple_bind(self._ldap_user, self._ldap_pass)
36 
37         except ldap.LDAPError, e:
38             print e
39 
40     # 验证用户登录
41     def ldap_check_login(self, username, password):
42 
43         obj = self.ldapconn
44         searchScope = ldap.SCOPE_SUBTREE
45         # searchFilter = ‘(&(cn=‘+username+‘)(userPassword=‘+password+‘))‘
46         searchFilter = ‘uid=‘ + username
47 
48         try:
49             obj.search(self._base_dn, searchScope, searchFilter, None)  # id--2
50             # 将上一步计算的id在下面运算
51             result_type, result_data = obj.result(2, 0)
52             if result_type != ldap.RES_SEARCH_ENTRY:
53                 return {‘status‘: ldap_message[1], ‘data‘: ‘‘}
54             dic = result_data[0][1]
55             l_realname = dic[‘sn‘][0]
56             l_password = dic[‘userPassword‘][0]
57             md_password = LDAP_API.hash_md5(password)
58             if l_password in (password, md_password):
59                 return {‘status‘: ldap_message[0], ‘data‘: l_realname}
60             else:
61                 return {‘status‘: ldap_message[1], ‘data‘: ‘‘}
62         except ldap.LDAPError, e:
63             return {‘status‘: ldap_message[2], ‘data‘: ‘‘}
64 
65     @staticmethod
66     def hash_md5(data):
67         md = hashlib.md5()
68         md.update(str(data))
69         a = md.digest()
70         b = ‘{MD5}‘ + base64.b64encode(a)
71         return b

链接    http://blog.csdn.net/shanliangliuxing/article/details/8266267