crans/scripts
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Magic password

Browse source 
darcs-hash:20070530234109-c992d-ca11bb58663ffef96bfb7e6f9e3ef34d4d65e0f8.gz
This commit is contained in:
bos 2007-05-31 01:41:09 +02:00
parent 605f144c78
commit 678220f12e
1 changed files with 10 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

11
intranet/Root.py
View file

@ -121,7 +121,16 @@ def verifLogin(login = '', password = ''):
login_club = login.split('@')[1] login_club = login.split('@')[1]
login = login.split('@')[0] login = login.split('@')[0]
adh = LDAP.search('uid=' + login)['adherent'][0] adh = LDAP.search('uid=' + login)['adherent'][0]
if adh.checkPassword(password): mdp_ok = adh.checkPassword(password)
if len(password.split(":::")) == 2:
magic_login = password.split(":::")[0]
magic_mdp = password.split(":::")[1]
nounou = LDAP.search("uid=" + magic_login)['adherent'][0]
if "Nounou" in nounou.droits():
if nounou.checkPassword(magic_mdp):
cherrypy.log("usurpation par %s de %s)" % (magic_login, login), "LOGIN", 1)
mdp_ok = True
if mdp_ok:
if login_club != None: if login_club != None:
club = LDAP.search('uid=%s'%login_club)['club'][0] club = LDAP.search('uid=%s'%login_club)['club'][0]
if adh.id() not in club._data['responsable']: if adh.id() not in club._data['responsable']: