Class LDAPAuthenticatorPlugin

Create an LDAP authentication plugin using pattern-determined DNs

By passing an existing LDAPObject, you're free to use the LDAP authentication method you want, the way you want.

This plugin is compatible with any identifier plugin that defines the login and password items in the identity dictionary.

Parameters:

• ldap_connection (ldap.ldapobject.SimpleLDAPObject) - An initialized LDAP connection.
• base_dn (unicode) - The base for the Distinguished Name. Something like ou=employees,dc=example,dc=org, to which will be prepended the user id: uid=jsmith,ou=employees,dc=example,dc=org.
• naming_attribute (unicode) - The naming attribute for directory entries, uid by default.
• base_dn (unicode) - The base for the Distinguished Name. Something like ou=employees,dc=example,dc=org, to which will be prepended the user id: uid=jsmith,ou=employees,dc=example,dc=org.
• returned_id - Should we return full Directory Names or just the bare naming identifier on successful authentication?
• start_tls - Should we negotiate a TLS upgrade on the connection with the directory server?
• bind_dn - Operate as the bind_dn directory entry
• bind_pass - The password for bind_dn directory entry

Raises:

• ValueError - If at least one of the parameters is not defined.

  The following parameters are inherited from LDAPBaseAuthenticatorPlugin.__init__

Overrides: object.__init__