mirror of https://github.com/openspug/spug
35 lines
1.4 KiB
Python
35 lines
1.4 KiB
Python
# Copyright: (c) OpenSpug Organization. https://github.com/openspug/spug
|
|
# Copyright: (c) <spug.dev@gmail.com>
|
|
# Released under the AGPL-3.0 License.
|
|
from apps.setting.models import Setting
|
|
import ldap
|
|
import json
|
|
|
|
|
|
class LDAP:
|
|
def __init__(self):
|
|
server_info = Setting.objects.filter(key='ldap_service').first()
|
|
ldap_info_dict = json.loads(server_info.value)
|
|
self.server = ldap_info_dict['server']
|
|
self.port = ldap_info_dict['port']
|
|
self.rules = ldap_info_dict['rules']
|
|
self.admin_dn = ldap_info_dict['admin_dn']
|
|
self.password = ldap_info_dict['password']
|
|
self.base_dn = ldap_info_dict['base_dn']
|
|
|
|
def valid_user(self, username, password):
|
|
try:
|
|
conn = ldap.initialize("ldap://{0}:{1}".format(self.server, self.port), bytes_mode=False)
|
|
conn.simple_bind_s(self.admin_dn, self.password)
|
|
search_filter = f'({self.rules}={username})'
|
|
ldap_result_id = conn.search(self.base_dn, ldap.SCOPE_SUBTREE, search_filter, None)
|
|
result_type, result_data = conn.result(ldap_result_id, 0)
|
|
if result_type == ldap.RES_SEARCH_ENTRY:
|
|
conn.simple_bind_s(result_data[0][0], password)
|
|
return True, None
|
|
else:
|
|
return False, None
|
|
except Exception as error:
|
|
args = error.args
|
|
return False, args[0].get('desc', '未知错误') if args else '%s' % error
|