1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
|
# For documentation, see comments in Module/LDAPObject.c and the
# ldap.sasl module documentation.
from __future__ import print_function
import ldap,ldap.sasl
ldap.sasl._trace_level=0
ldap.set_option(ldap.OPT_DEBUG_LEVEL,0)
for ldap_uri,sasl_mech,sasl_cb_value_dict in [
(
"ldap://nb2.stroeder.local:1390/",
'CRAM-MD5',
{
ldap.sasl.CB_AUTHNAME :'fred',
ldap.sasl.CB_PASS :'secret',
}
),
(
"ldap://nb2.stroeder.local:1390/",
'PLAIN',
{
ldap.sasl.CB_AUTHNAME :'fred',
ldap.sasl.CB_PASS :'secret',
}
),
(
"ldap://nb2.stroeder.local:1390/",
'LOGIN',
{
ldap.sasl.CB_AUTHNAME :'fred',
ldap.sasl.CB_PASS :'secret',
}
),
(
"ldapi://%2Ftmp%2Fopenldap-socket/",
'EXTERNAL',
{ }
),
(
"ldap://nb2.stroeder.local:1390/",
'GSSAPI',
{ }
),
(
"ldap://nb2.stroeder.local:1390/",
'NTLM',
{
ldap.sasl.CB_AUTHNAME :'fred',
ldap.sasl.CB_PASS :'secret',
}
),
(
"ldap://nb2.stroeder.local:1390/",
'DIGEST-MD5',
{
ldap.sasl.CB_AUTHNAME :'fred',
ldap.sasl.CB_PASS :'secret',
}
),
]:
sasl_auth = ldap.sasl.sasl(sasl_cb_value_dict,sasl_mech)
print(20*'*',sasl_auth.mech,20*'*')
# Open the LDAP connection
l = ldap.initialize(ldap_uri,trace_level=0)
# Set protocol version to LDAPv3 to enable SASL bind!
l.protocol_version = 3
try:
l.sasl_interactive_bind_s("", sasl_auth)
except ldap.LDAPError as e:
print('Error using SASL mechanism',sasl_auth.mech,str(e))
else:
print('Sucessfully bound using SASL mechanism:',sasl_auth.mech)
try:
print('Result of Who Am I? ext. op:',repr(l.whoami_s()))
except ldap.LDAPError as e:
print('Error using SASL mechanism',sasl_auth.mech,str(e))
try:
print('OPT_X_SASL_USERNAME',repr(l.get_option(ldap.OPT_X_SASL_USERNAME)))
except AttributeError:
pass
l.unbind()
del l
|
