forked from python-ldap/python-ldap
-
Notifications
You must be signed in to change notification settings - Fork 0
Expand file tree
/
Copy pathsasl_bind.py
More file actions
84 lines (79 loc) · 1.9 KB
/
sasl_bind.py
File metadata and controls
84 lines (79 loc) · 1.9 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
# For documentation, see comments in Module/LDAPObject.c and the
# ldap.sasl module documentation.
import ldap,ldap.sasl
ldap.sasl._trace_level=0
ldap.set_option(ldap.OPT_DEBUG_LEVEL,0)
for ldap_uri,sasl_mech,sasl_cb_value_dict in [
(
"ldap://nb2.stroeder.local:1390/",
'CRAM-MD5',
{
ldap.sasl.CB_AUTHNAME :'fred',
ldap.sasl.CB_PASS :'secret',
}
),
(
"ldap://nb2.stroeder.local:1390/",
'PLAIN',
{
ldap.sasl.CB_AUTHNAME :'fred',
ldap.sasl.CB_PASS :'secret',
}
),
(
"ldap://nb2.stroeder.local:1390/",
'LOGIN',
{
ldap.sasl.CB_AUTHNAME :'fred',
ldap.sasl.CB_PASS :'secret',
}
),
(
"ldapi://%2Ftmp%2Fopenldap-socket/",
'EXTERNAL',
{ }
),
(
"ldap://nb2.stroeder.local:1390/",
'GSSAPI',
{ }
),
(
"ldap://nb2.stroeder.local:1390/",
'NTLM',
{
ldap.sasl.CB_AUTHNAME :'fred',
ldap.sasl.CB_PASS :'secret',
}
),
(
"ldap://nb2.stroeder.local:1390/",
'DIGEST-MD5',
{
ldap.sasl.CB_AUTHNAME :'fred',
ldap.sasl.CB_PASS :'secret',
}
),
]:
sasl_auth = ldap.sasl.sasl(sasl_cb_value_dict,sasl_mech)
print 20*'*',sasl_auth.mech,20*'*'
# Open the LDAP connection
l = ldap.initialize(ldap_uri,trace_level=0)
# Set protocol version to LDAPv3 to enable SASL bind!
l.protocol_version = 3
try:
l.sasl_interactive_bind_s("", sasl_auth)
except ldap.LDAPError,e:
print 'Error using SASL mechanism',sasl_auth.mech,str(e)
else:
print 'Sucessfully bound using SASL mechanism:',sasl_auth.mech
try:
print 'Result of Who Am I? ext. op:',repr(l.whoami_s())
except ldap.LDAPError,e:
print 'Error using SASL mechanism',sasl_auth.mech,str(e)
try:
print 'OPT_X_SASL_USERNAME',repr(l.get_option(ldap.OPT_X_SASL_USERNAME))
except AttributeError:
pass
l.unbind()
del l