Hi,

  authenticates a user against our ldap server.: User types in name and 
password, and module sees if name and password check out right with the 
ldap server.

I see that it's pretty straightforward to do this with:

     import ldap
     l = ldap.open('our.ldap.server')
     try:
         l.bind_s(username, password, ldap.AUTH_SIMPLE)
         authenticated = True
     except:
        authenticated = False

But this uses the plaintext of the user's password.  Is there a proper 
way to send a cryptographic hash to the ldap server?  Or do I have to 
negotiate this through an ssl tunnel or something?

Thanks for any tips.  Cheers!
j

-- 
Jed Parsons       Industrial Light + Magic  (415) 746-2974
        
grep(do{for(ord){(!$_&&print"$s\n")||(($O+=(($_-1)%6+1)and
grep(vec($s,$O++,1)=1,1..int(($_-6*6-1)/6))))}},(split(//,
"++,++2-27,280,481=1-7.1++2,800+++2,8310/1+4131+1++2,80\0.  What!?")));
-- 
http://mail.python.org/mailman/listinfo/python-list

Reply via email to