1079
by William Grant
Merge setup-refactor branch. This completely breaks existing installations; |
1 |
# IVLE - Informatics Virtual Learning Environment
|
2 |
# Copyright (C) 2007-2008 The University of Melbourne
|
|
3 |
#
|
|
4 |
# This program is free software; you can redistribute it and/or modify
|
|
5 |
# it under the terms of the GNU General Public License as published by
|
|
6 |
# the Free Software Foundation; either version 2 of the License, or
|
|
7 |
# (at your option) any later version.
|
|
8 |
#
|
|
9 |
# This program is distributed in the hope that it will be useful,
|
|
10 |
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
11 |
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
12 |
# GNU General Public License for more details.
|
|
13 |
#
|
|
14 |
# You should have received a copy of the GNU General Public License
|
|
15 |
# along with this program; if not, write to the Free Software
|
|
16 |
# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA
|
|
17 |
||
18 |
# Module: Guest Authenticate
|
|
19 |
# Author: Matt Giuca
|
|
20 |
# Date: 21/2/2008
|
|
21 |
||
22 |
# Pluggable authentication module for LDAP servers.
|
|
23 |
# This module is part-test part-something-you-may-want.
|
|
24 |
# If enabled, it allows "external auth" against an account "guest" with
|
|
25 |
# password "guest".
|
|
26 |
# It may be called with a None user, and will return a guest User object,
|
|
27 |
# which will mean it gets put in the database.
|
|
28 |
# Thus it behaves similarly to a module which retrieves user details from an
|
|
29 |
# external source like LDAP.
|
|
30 |
# This module is NOT active implicitly - it must be specified in the
|
|
31 |
# "auth_modules" config string.
|
|
32 |
||
1080.1.12
by me at id
ivle.auth.autherror: Remove, moving AuthError into ivle.auth itself. |
33 |
from ivle.auth import AuthError |
1080.1.14
by me at id
ivle.auth.* now uses Storm, and not ivle.(db|user). This changes the interface |
34 |
from ivle.database import User |
1079
by William Grant
Merge setup-refactor branch. This completely breaks existing installations; |
35 |
|
36 |
# XXX: What to put here
|
|
37 |
GUEST_UID = 4000 |
|
38 |
||
1080.1.14
by me at id
ivle.auth.* now uses Storm, and not ivle.(db|user). This changes the interface |
39 |
def auth(store, login, password, user): |
1079
by William Grant
Merge setup-refactor branch. This completely breaks existing installations; |
40 |
"""
|
41 |
A plugin auth function, as described above.
|
|
42 |
This one authenticates against a "guest"/"guest" account.
|
|
43 |
Returns user if successful. Raises AuthError if unsuccessful.
|
|
44 |
Returns a new User object if user is None.
|
|
45 |
"""
|
|
46 |
if login != "guest" or password != "guest": |
|
47 |
raise AuthError() |
|
48 |
||
49 |
if user is not None: |
|
50 |
return user |
|
51 |
||
52 |
# Create a guest user
|
|
1080.1.14
by me at id
ivle.auth.* now uses Storm, and not ivle.(db|user). This changes the interface |
53 |
return User(login=u"guest", fullname=u"Guest Account", nick=u"Guest", |
1101
by William Grant
Privileges (apart from admin) are now offering-local, not global. |
54 |
state=u"no_agreement", unixid=GUEST_UID) |