前一篇文章我们讲解了Ldap3库的连接AD服务器的方法:Ldap3 库使用方法(四)
今天给大家讲解如何使用Ldap3 库删除AD中用户和部门(OU),以及封装一个账户密码认证方法
#!/usr/bin/env python # -*- coding: utf-8 -*- import json from ldap3 import ALL_ATTRIBUTES # 注意:ldap3库如果要使用tls(安全连接),需要ad服务先安装并配置好证书服务,才能通过tls连接,否则连接测试时会报LDAPSocketOpenError('unable to open socket' # 如果是进行账号密码修改及账户激活时,会报错:“WILL_NOT_PERFORM” from ldap3 import Connection, NTLM, Server from ldap3 import MODIFY_REPLACE server1 = Server("adtest.com", port=636, use_ssl=True, get_info=ALL, connect_timeout=5) LDAP_SERVER_POOL = [server1] SERVER_USER = 'adtest\\administrator' SERVER_PASSWORD = "XXXXXXX" class AD(object): ''' AD用户操作 ''' def __init__(self): '''初始化''' self.conn = Connection( #配置服务器连接参数 server=LDAP_SERVER_POOL, auto_bind=True, authentication=NTLM, #连接Windows AD需要配置此项 read_only=False, #禁止修改数据:True user=SERVER_USER,#管理员账户 password=SERVER_PASSWORD, ) self.leaved_base_dn = 'ou=Leaved,dc=adtest,dc=intra'#离职账户所在OU self.active_base_dn = 'ou=测试部门,dc=adtest,dc=intra'#正式员工账户所在OU self.search_filter = '(objectclass=user)'#只获取【用户】对象 self.ou_search_filter = '(objectclass=organizationalUnit)'#只获取【OU】对象 def check_credentials(username, password): """ 用户认证接口 # """ ldap_user = '\\{}@adtest.intra'.format(username) server = Server('adtest.intra', use_ssl=True) connection = Connection(server, user=ldap_user, password=password, authentication=NTLM) try: logger.info("username:%s ;res: %s" %(username,connection.bind())) return connection.bind() except: logger.warning("username:%s ;res: %s" % (username, connection.bind())) return False finally: connection.closed def del_obj(self,DN): ''' 删除用户 or 部门 :param DN: :return:True ''' res = self.conn.delete(dn=DN) return res
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
|
#!/usr/bin/env python
# -*- coding: utf-8 -*-
import
json
from
ldap3
import
ALL_ATTRIBUTES
# 注意:ldap3库如果要使用tls(安全连接),需要ad服务先安装并配置好证书服务,才能通过tls连接,否则连接测试时会报LDAPSocketOpenError('unable to open socket'
# 如果是进行账号密码修改及账户激活时,会报错:“WILL_NOT_PERFORM”
from
ldap3
import
Connection
,
NTLM
,
Server
from
ldap3
import
MODIFY_REPLACE
server1
=
Server
(
"adtest.com"
,
port
=
636
,
use_ssl
=
True
,
get_info
=
ALL
,
connect_timeout
=
5
)
LDAP_SERVER_POOL
=
[
server1
]
SERVER_USER
=
'adtest\\administrator'
SERVER_PASSWORD
=
"XXXXXXX"
class
AD
(
object
)
:
''' AD用户操作 '''
def
__init__
(
self
)
:
'''初始化'''
self
.
conn
=
Connection
(
#配置服务器连接参数
server
=
LDAP_SERVER_POOL
,
auto_bind
=
True
,
authentication
=
NTLM
,
#连接Windows AD需要配置此项
read_only
=
False
,
#禁止修改数据:True
user
=
SERVER_USER
,
#管理员账户
password
=
SERVER_PASSWORD
,
)
self
.
leaved_base_dn
=
'ou=Leaved,dc=adtest,dc=intra'
#离职账户所在OU
self
.
active_base_dn
=
'ou=测试部门,dc=adtest,dc=intra'
#正式员工账户所在OU
self
.
search_filter
=
'(objectclass=user)'
#只获取【用户】对象
self
.
ou_search_filter
=
'(objectclass=organizationalUnit)'
#只获取【OU】对象
def
check_credentials
(
username
,
password
)
:
"""
用户认证接口 #
"""
ldap_user
=
'\\{}@adtest.intra'
.
format
(
username
)
server
=
Server
(
'adtest.intra'
,
use_ssl
=
True
)
connection
=
Connection
(
server
,
user
=
ldap_user
,
password
=
password
,
authentication
=
NTLM
)
try
:
logger
.
info
(
"username:%s ;res: %s"
%
(
username
,
connection
.
bind
(
)
)
)
return
connection
.
bind
(
)
except
:
logger
.
warning
(
"username:%s ;res: %s"
%
(
username
,
connection
.
bind
(
)
)
)
return
False
finally
:
connection
.
closed
def
del_obj
(
self
,
DN
)
:
'''
删除用户 or 部门
:param DN:
:return:True
'''
res
=
self
.
conn
.
delete
(
dn
=
DN
)
return
res
|
具体的文档,可以参考官网文档:Ldap3 文档
以上的方法,大家主要查看【LDAP Operations】章节的内容。
欢迎大家访问我的博客:bigyong.cn
欢迎大家关注我的公众号: