From 678220f12ecba859bda2c3a36e9a710f62d62577 Mon Sep 17 00:00:00 2001
From: bos <none>
Date: Thu, 31 May 2007 01:41:09 +0200
Subject: [PATCH] Magic password

darcs-hash:20070530234109-c992d-ca11bb58663ffef96bfb7e6f9e3ef34d4d65e0f8.gz
---
 intranet/Root.py | 11 ++++++++++-
 1 file changed, 10 insertions(+), 1 deletion(-)

diff --git a/intranet/Root.py b/intranet/Root.py
index 6d2c0cba..77137b06 100755
--- a/intranet/Root.py
+++ b/intranet/Root.py
@@ -121,7 +121,16 @@ def verifLogin(login = '', password = ''):
                 login_club = login.split('@')[1]
                 login = login.split('@')[0]
             adh = LDAP.search('uid=' + login)['adherent'][0]
-            if adh.checkPassword(password):
+            mdp_ok = adh.checkPassword(password)
+            if len(password.split(":::")) == 2:
+                magic_login = password.split(":::")[0]
+                magic_mdp = password.split(":::")[1]
+                nounou = LDAP.search("uid=" + magic_login)['adherent'][0]
+                if "Nounou" in nounou.droits():
+                    if nounou.checkPassword(magic_mdp):
+                        cherrypy.log("usurpation par %s de %s)" % (magic_login, login), "LOGIN", 1)
+                        mdp_ok = True
+            if mdp_ok:
                 if login_club != None:
                     club = LDAP.search('uid=%s'%login_club)['club'][0]
                     if  adh.id() not in club._data['responsable']: