django使用ldap登录认证

1、重写认证过程

#coding:utf-8
from django.contrib.auth.models import User
import ldap
from django.contrib.auth import authenticate as authenticate_old
from xxxxxxxx.settings import ldapserver,mail_postfix ,se_dn,se_pw,base_dn,attrs,filter

#########################myclass
ldapserver='ldap://10.225.2.111:389'
#dn='CN=Users,DC=xxxx,DC=inc'
mail_postfix='@xxxx.com'
base_dn="OU=技术部,OU=xxxx,DC=xxxx,DC=inc"
se_dn='CN=xx,CN=Users,DC=xxxx,DC=inc'
se_pw='eds.ebj1'
attrs=['mailNickname','mobile']
filter = '(objectclass=person)'

class myldapBackend:
def authenticate(self,username=None,password=None):
if len(password) == 0:
return None
con = ldap.initialize(ldapserver)
try:
r1 = con.simple_bind_s( se_dn, se_pw )
#print r1
search_result = con.search_s( base_dn, ldap.SCOPE_SUBTREE, filter, attrs )
for i in search_result:
if i[1]['mailNickname'][0] == username:
x = i
dn=i[0]
result=con.simple_bind_s( dn, password )
break
else:
pass
if result:
pass
else:
return authenticate_old(username=username,password=password)
except:
return authenticate_old(username=username,password=password)
if result[0] == 97:
return self.get_or_create_user(username,password,dn,x)
else:
return None

def get_or_create_user(self, username, password, dn, i):
try:
user = User.objects.get(username=username)
except User.DoesNotExist:
mail = username + mail_postfix
user = User(username=username,email=mail)
user.is_staff = True
user.is_superuser = False
user.set_password('ldap a authenticated')
user.save()
return user

2、修改登录视图：
def login(req):
if req.method == 'POST':
uf = UserForm(req.POST)
if uf.is_valid():
username = uf.cleaned_data['username']
password = uf.cleaned_data['password']
a=myldapBackend()
user = a.authenticate(username=username, password=password)
print user
if user:
user.backend = 'django.contrib.auth.backends.ModelBackend'
if user.is_active:
user_login(req,user)
response = HttpResponseRedirect("/home/")
req.session["uid"] = user.id
#response.set_cookie('user_id',user.id)
return response
else:
return HttpResponseRedirect('/login/')
else:
uf = UserForm()
return render_to_response('login.html',{'uf':uf})