django使用ldap登录认证

最新推荐文章于 2022-05-16 21:00:27 发布

静水虚舟

最新推荐文章于 2022-05-16 21:00:27 发布

阅读量1.9k

点赞数

分类专栏： django

本文链接：https://blog.csdn.net/renxiaotianfei/article/details/72763777

版权

django 专栏收录该内容

3 篇文章 0 订阅

订阅专栏

1、重写认证过程

#coding:utf-8
from django.contrib.auth.models import User
import ldap
from django.contrib.auth import authenticate as authenticate_old
from xxxxxxxx.settings import ldapserver,mail_postfix ,se_dn,se_pw,base_dn,attrs,filter

#########################myclass
ldapserver='ldap://10.225.2.111:389'
#dn='CN=Users,DC=xxxx,DC=inc'
mail_postfix='@xxxx.com'
base_dn="OU=技术部,OU=xxxx,DC=xxxx,DC=inc"
se_dn='CN=xx,CN=Users,DC=xxxx,DC=inc'
se_pw='eds.ebj1'
attrs=['mailNickname','mobile']
filter = '(objectclass=person)'

class myldapBackend:
    def authenticate(self,username=None,password=None):
        if len(password) == 0:
            return None
        con = ldap.initialize(ldapserver)
        try:
            r1 = con.simple_bind_s( se_dn, se_pw )
            #print r1
            search_result = con.search_s( base_dn, ldap.SCOPE_SUBTREE, filter, attrs )
            for i in search_result:
                if i[1]['mailNickname'][0] == username:
                    x = i
                    dn=i[0]
                    result=con.simple_bind_s( dn, password )
                    break
                else:
                    pass
            if result:
                pass
            else:
                return authenticate_old(username=username,password=password)
        except:
            return authenticate_old(username=username,password=password)
        if result[0] == 97:
            return self.get_or_create_user(username,password,dn,x)
        else:
            return None

    def get_or_create_user(self, username, password, dn, i):
        try:
            user = User.objects.get(username=username)
        except User.DoesNotExist:
            mail = username + mail_postfix
            user = User(username=username,email=mail)
            user.is_staff = True
            user.is_superuser = False
            user.set_password('ldap a authenticated')
            user.save()
        return user

2、修改登录视图：

def login(req):
    if req.method == 'POST':
        uf = UserForm(req.POST)
        if uf.is_valid():
            username = uf.cleaned_data['username']
            password = uf.cleaned_data['password']
            a=myldapBackend()
            user = a.authenticate(username=username, password=password)
            print user
            if user:
                user.backend = 'django.contrib.auth.backends.ModelBackend'
                if user.is_active:
                    user_login(req,user)
                    response = HttpResponseRedirect("/home/")
                    req.session["uid"] = user.id
                    #response.set_cookie('user_id',user.id)
                    return  response
            else:
                return HttpResponseRedirect('/login/')
    else:
        uf = UserForm()
    return render_to_response('login.html',{'uf':uf})