网上借鉴了不少东西，下面是python代码，备份后用。
思路，因为每个用户的组都不一样，这样就导致了dn不一致的情况，
据需要先根据用户名获取该用户的dn，然后再bind用户名和密码进行验证。
反正是实现了，至于方式对不对后续再研究了。
机器上要先安装python-ldap包
1 #coding: utf-8
2 import ldap
3 ‘‘‘
4 实现LDAP用户登录验证，首先获取用户的dn，然后再验证用户名和密码
5 ‘‘‘
6
7 ldappath = "ldap://xxxx"#ldap服务器地址
8 baseDN = "DC=aaaa,DC=bbbb,DC=com"#根目录
9 ldapuser = "xxxx";#ldap服务器用户名
10 ldappass = "xxxx";#ldap服务器密码
11
12 #获取用户的dn
13 def _validateLDAPUser(user):
14 try:
15 l = ldap.initialize(ldappath)
16 l.protocol_version = ldap.VERSION3
17 l.simple_bind(ldapuser,ldappass)
18
19 searchScope = ldap.SCOPE_SUBTREE
20 searchFiltername = "sAMAccountName"
21 retrieveAttributes = None
22 searchFilter = ‘(‘ + searchFiltername + "=" + user +‘)‘
23
24 ldap_result_id = l.search(baseDN, searchScope, searchFilter, retrieveAttributes)
25 result_type, result_data = l.result(ldap_result_id,1)
26 if(not len(result_data) == 0):
27 r_a,r_b = result_data[0]
28 print r_b["distinguishedName"]
29 return 1, r_b["distinguishedName"][0]
30 else:
31 return 0, ‘‘
32 except ldap.LDAPError, e:
33 print e
34 return 0, ‘‘
35 finally:
36 l.unbind()
37 del l
38
39 #连接超时，尝试多次连接
40 def GetDn(user, trynum = 30):
41 i = 0
42 isfound = 0
43 foundResult = ""
44 while(i < trynum):
45 isfound, foundResult = _validateLDAPUser(user)
46 if(isfound):
47 break
48 i+=1
49 return foundResult
50
51 def LDAPLogin(userName,Password):
52 try:
53 if(Password==""):
54 print "PassWord empty"
55 return
56 dn = GetDn(userName,10)
57 if(dn==‘‘):
58 print "Not Exist User"
59 return
60 my_ldap = ldap.initialize(ldappath)
61 print my_ldap.simple_bind_s(dn,Password)
62 print "Login Ok"
63 except Exception,e:
64 print "Login Fail"
65 # print str(e)
66
67 LDAPLogin("用户名","密码")
时间： 2024-12-23 06:18:56