使用Djangoauthldap的Django配置LDAP

2024-10-03 17:19:44 发布

您现在位置:Python中文网/ 问答频道 /正文

我正在尝试在django项目上配置LDAP身份验证

在进入django之前,我已经测试了以下shell命令能否成功返回

ldapsearch -H ldap://172.16.34.4 -b "dc=corp,dc=rate,dc=com" -D corp\\peter -W sAMAccountName=peter

结果:

...
# search result
search: 2
result: 0 Success

# numResponses: 3
# numEntries: 1
# numReferences: 1

但是当谈到djangosettings.py时,您知道有很多项需要设置。我尝试了很多组合,但都没有成功

AUTH_LDAP_SERVER_URI = 'ldap://172.16.34.4'
AUTH_LDAP_USER_SEARCH = LDAPSearch(
    "DC=corp,dc=rate,dc=com",
    ldap.SCOPE_SUBTREE,
    "(sAMAccountName=%(user)s)"
)
AUTH_LDAP_USER_ATTR_MAP = {
    "username": "sAMAccountName",
    "name": "cn",
    "email": "mail",
    "first_name": "displayName",
    "last_name": "sn"
}
AUTHENTICATION_BACKENDS = (
    'django_auth_ldap.backend.LDAPBackend',
    'django.contrib.auth.backends.ModelBackend'
)

我创建了一个API来登录:

from rest_framework.views import APIView

class LoginAuth(APIView):
    def post(self, request, *args, **kwargs):
        user_loggedin = 'guest'
        display_name = 'guest'
        username = self.request.data.get('username')
        password = self.request.data.get('password')
        usergo = authenticate(username=username, password=password)  # usergo always returns None
        print('authuser', usergo)
        if usergo is not None:
            auth_login(self.request, usergo)
            user_loggedin = usergo.username
            display_name = usergo.first_name
            context = {
                'username': user_loggedin,
                'displayName': display_name,
                'state': False
            }
            return Response(context, status=status.HTTP_200_OK)
        return Response(
            f'Failed to authenticate with {username} / {password}',
            status=status.HTTP_400_BAD_REQUEST
        )

当使用post数据访问端点时,我得到如下错误(usergo始终返回None):

发布数据:

{
    "username": "corp\\peter",
    "password": "mypassword"
}

彼得的身份验证失败:未能将用户名映射到DN

有人能帮我吗?我想settings.py配置中应该有一些错误


Tags: djangonameselfrequeststatususernamepassworddc