Is it possible to have Python authenticate with Active Directory?
Specifically what I'd like to do is have a user enter a
username/password, then have Python check the credentials with AD - if
what they entered is valid, for example, it returns a 1, otherwise a
0.. Thanks! 7 15513
On Fri, May 05, 2006 at 05:39:08AM -0700, D wrote: Is it possible to have Python authenticate with Active Directory? Specifically what I'd like to do is have a user enter a username/password, then have Python check the credentials with AD - if what they entered is valid, for example, it returns a 1, otherwise a 0.. Thanks!
Can't you query the AD through LDAP? Then http://python-ldap.sourceforge.net/ might help.
Kindly
Christoph
On Fri, 05 May 2006 05:39:08 -0700, D wrote: Is it possible to have Python authenticate with Active Directory? Specifically what I'd like to do is have a user enter a username/password, then have Python check the credentials with AD - if what they entered is valid, for example, it returns a 1, otherwise a 0.. Thanks!
It's possible and you need the python-ldap package for it.
The actual authentication will look like (simplified):
def authenticate(user='',passwd=''):
dn = find_user_dn(user)
try:
l = ldap.open(AD_HOST_URL)
l.protocol_version = ldap.VERSION3
l.simple_bind_s(dn,passwd)
l.search_s(SEARCHDN,ldap.SCOPE_SUBTREE,'objectType =bla')
l.unbind_s()
return True
except ldap.LDAPError:
return False
obviously, you need to supply some function 'find_user_dn' that maps
the user to its DN.
D wrote: Is it possible to have Python authenticate with Active Directory? Specifically what I'd like to do is have a user enter a username/password, then have Python check the credentials with AD - if what they entered is valid, for example, it returns a 1, otherwise a 0.. Thanks!
Install the Win32 extensions from http://starship.python.net/crew/skip...Downloads.html and do
something like this:
try:
handle=win32security.LogonUser(username, None, password,
win32security.LOGON32_LOGON_NETWORK,
win32security.LOGON32_PROVIDER_DEFAULT)
# We're not going to use the handle, just seeing if we can get it.
handle.Close()
return True
except pywintypes.error, e:
# Because of the sheer number of Windows-specific errors that can
# occur here, we have to assume any of them mean that the
# credentials were not valid.
return False
--
Benji York
Benji York wrote: D wrote: Is it possible to have Python authenticate with Active Directory? Specifically what I'd like to do is have a user enter a username/password, then have Python check the credentials with AD - if what they entered is valid, for example, it returns a 1, otherwise a 0.. Thanks!
Install the Win32 extensions from http://starship.python.net/crew/skip...Downloads.html and do something like this:
try: handle=win32security.LogonUser(username, None, password, win32security.LOGON32_LOGON_NETWORK, win32security.LOGON32_PROVIDER_DEFAULT)
# We're not going to use the handle, just seeing if we can get it. handle.Close() return True except pywintypes.error, e: # Because of the sheer number of Windows-specific errors that can # occur here, we have to assume any of them mean that the # credentials were not valid. return False -- Benji York
I assume then that you can also change user information using the same
principle ? I'm trying to switch some VB6 code to python.
Philippe
If you have Pywin32 installed, you can use the win32com.adsi
package to open an object with username/password credentials.
See adsi.ADsOpenObject for details. Adsi also contains a number
of interfaces for dealing with users, containers, etc.
Roger
"D" <du********@hotmail.com> wrote in message news:11**********************@j33g2000cwa.googlegr oups.com... Is it possible to have Python authenticate with Active Directory? Specifically what I'd like to do is have a user enter a username/password, then have Python check the credentials with AD - if what they entered is valid, for example, it returns a 1, otherwise a 0.. Thanks!
----== Posted via Newsfeeds.Com - Unlimited-Unrestricted-Secure Usenet News==---- http://www.newsfeeds.com The #1 Newsgroup Service in the World! 120,000+ Newsgroups
----= East and West-Coast Server Farms - Total Privacy via Encryption =----
Stephan Diehl wrote: On Fri, 05 May 2006 05:39:08 -0700, D wrote:
Is it possible to have Python authenticate with Active Directory? Specifically what I'd like to do is have a user enter a username/password, then have Python check the credentials with AD - if what they entered is valid, for example, it returns a 1, otherwise a 0.. Thanks!
It's possible and you need the python-ldap package for it. The actual authentication will look like (simplified):
def authenticate(user='',passwd=''): dn = find_user_dn(user) try: l = ldap.open(AD_HOST_URL) l.protocol_version = ldap.VERSION3 l.simple_bind_s(dn,passwd) l.search_s(SEARCHDN,ldap.SCOPE_SUBTREE,'objectType =bla') l.unbind_s() return True except ldap.LDAPError: return False
obviously, you need to supply some function 'find_user_dn' that maps the user to its DN.
Since MS AD does not allow anonymous search in its default configuration
find_user_dn() would have to bind as an application user with search
rights to search the user entry by UPN.
Hack not LDAPv3 compliant:
When sending a simple bind request to MS AD over LDAP you can also
directly use the UPN for 'dn' when invoking l.simple_bind_s(). Note that
this is a special semantic of LDAP bind request for MS AD. It is not a
LDAPv3 compliant! But if you're sure you won't use this code for binding
to another LDAP server you could use this hack.
The nice thing about python-ldap is that it also works on other
platforms than Win32. The caveat is that you might need to build the
OpenLDAP libs. If you're solely on Win32 using ADSI through Win32
extensions for Python as stated by others in this thread might be the
better approach.
Ciao, Michael.
Thanks to everyone for your help..I'm not familiar with the packages
mentioned, so this will definitely be a learning experience! This thread has been closed and replies have been disabled. Please start a new discussion. Similar topics
by: Tom Petersen |
last post by:
Hello, we just migrated to Windows Server 2003 and active directory. On our
intranet I would like to personalize some of the pages my users hit. Let's
say I login as petertom, when I go to my...
|
by: |
last post by:
What is a good resource for integrating ASP applications with Active
Directory? I want pages that will allow operations on AD. A prime example is
that I want to have an ASP page that would ask...
|
by: Sjaak |
last post by:
Hi All,
I'm trying to get an ASP.NET Application to work with Active Directory
but not having much luck.
On the MS Website I found this example :...
|
by: deathbydisco |
last post by:
I've created a simple website with a login screen that requires an
email address and a password. It uses the email ID and password to
authenticate against active directory (just to see if the user...
|
by: varkey.mathew |
last post by:
Dear all,
Bear with me, a poor newbie(atleast in AD)..
I have to authenticate a user ID and password for a user as a valid
Active Directory user or not. I have created the IsAuthenticated...
|
by: Theon Greyjoy |
last post by:
Hello,
I'll admit up-front that I have very limited experience with Active
Directory...
I am using the Active Directory membership provider in my ASP.NET (C#)
application. However, we do not...
|
by: piggy |
last post by:
I have a login name with user name and password. based on provided username
and password, those infor will be looked up in the active directory for a
specific group to authenticate users. Could...
|
by: jarice1978 |
last post by:
Hello,
I have been scanning the internet for a few days now. That is not working. So now it is time to post!
I have read a few other posts on here about authentication but they do not match...
|
by: =?Utf-8?B?QlVCQkxFVEFMSzI2MA==?= |
last post by:
Hello. I am writing an application that uses Active Directory and needs to
grab user information. I pass user email addresses and and get back a
userInfo structure with AD information. My issue is...
|
by: Max Vit |
last post by:
I have been toying with the idea of having an Active Directory
authentication / authorisation functionality in MS Access; but there
is not much useful info around.
I have built these...
|
by: Charles Arthur |
last post by:
How do i turn on java script on a villaon, callus and itel keypad mobile phone
|
by: emmanuelkatto |
last post by:
Hi All, I am Emmanuel katto from Uganda. I want to ask what challenges you've faced while migrating a website to cloud.
Please let me know.
Thanks!
Emmanuel
|
by: BarryA |
last post by:
What are the essential steps and strategies outlined in the Data Structures and Algorithms (DSA) roadmap for aspiring data scientists? How can individuals effectively utilize this roadmap to progress...
|
by: Sonnysonu |
last post by:
This is the data of csv file
1 2 3
1 2 3
1 2 3
1 2 3
2 3
2 3
3
the lengths should be different i have to store the data by column-wise with in the specific length.
suppose the i have to...
|
by: marktang |
last post by:
ONU (Optical Network Unit) is one of the key components for providing high-speed Internet services. Its primary function is to act as an endpoint device located at the user's premises. However,...
|
by: Oralloy |
last post by:
Hello folks,
I am unable to find appropriate documentation on the type promotion of bit-fields when using the generalised comparison operator "<=>".
The problem is that using the GNU compilers,...
|
by: Hystou |
last post by:
Overview:
Windows 11 and 10 have less user interface control over operating system update behaviour than previous versions of Windows. In Windows 11 and 10, there is no way to turn off the Windows...
|
by: tracyyun |
last post by:
Dear forum friends,
With the development of smart home technology, a variety of wireless communication protocols have appeared on the market, such as Zigbee, Z-Wave, Wi-Fi, Bluetooth, etc. Each...
|
by: agi2029 |
last post by:
Let's talk about the concept of autonomous AI software engineers and no-code agents. These AIs are designed to manage the entire lifecycle of a software development project—planning, coding, testing,...
| |