def authenticate(username, password):
'''Authenticate username and password against database.
Returns account object if user was authenticated, else None.
'''
# FIXME Log stuff?
auth = False
account = None
# Try to find the account in the database. If it's not found we can try
# LDAP.
try:
account = Account.objects.get(login__iexact=username)
except Account.DoesNotExist:
if ldapauth.available:
user = ldapauth.authenticate(username, password)
# If we authenticated, store the user in database.
if user:
account = Account(
login=user.username,
name=user.get_real_name(),
ext_sync='ldap'
)
account.set_password(password)
account.save()
_handle_ldap_admin_status(user, account)
# We're authenticated now
auth = True
if account and account.locked:
_logger.info("Locked user %s tried to log in", account.login)
if (account and
account.ext_sync == 'ldap' and
ldapauth.available and
not auth and
not account.locked):
try:
auth = ldapauth.authenticate(username, password)
except ldapauth.NoAnswerError:
# Fallback to stored password if ldap is unavailable
auth = False
else:
if auth:
account.set_password(password)
account.save()
_handle_ldap_admin_status(auth, account)
else:
return
if account and not auth:
auth = account.check_password(password)
if auth and account:
return account
else:
return None
def authenticate(username, password):
'''Authenticate username and password against database.
Returns account object if user was authenticated, else None.
'''
# FIXME Log stuff?
auth = False
account = None
# Try to find the account in the database. If it's not found we can try
# LDAP.
try:
account = Account.objects.get(login__iexact=username)
except Account.DoesNotExist:
if ldapauth.available:
user = ldapauth.authenticate(username, password)
# If we authenticated, store the user in database.
if user:
account = Account(
login=user.username,
name=user.get_real_name(),
ext_sync='ldap'
)
account.set_password(password)
account.save()
# We're authenticated now
auth = True
if (account and account.ext_sync == 'ldap' and
ldapauth.available and not auth):
try:
auth = ldapauth.authenticate(username, password)
except ldapauth.NoAnswerError:
# Fallback to stored password if ldap is unavailable
auth = False
else:
if auth:
account.set_password(password)
account.save()
else:
return
if account and not auth:
auth = account.check_password(password)
if auth and account:
return account
else:
return None