python 访问LDAP服务器「建议收藏」

# -*- coding: GBK -*-
'''
Created on 2012-12-7

@author: herong
'''
import ldap

dn = "cn=ldapname,OU=APPuser,dc=xxxx,dc=com,dc=cn"
pw = "ldappw"
department = {"-1":"中心",
              "000060100":"开发一部",
              "000060200":"开发二部",
              "000060300":"开发三部",
              "000060400":"开发四部",}

conn = ldap.initialize('ldap://192.168.1.111')
print conn
conn.simple_bind(dn, pw)
base_dn = 'OU=000000001,OU=000000000,dc=xxxx,dc=com,dc=cn'
filter = "(objectClass=user)"
attrs = ['cn']

for depa in department:
    base_dn_tmp = base_dn
    if depa != "-1":      
        base_dn_tmp = "OU="+depa+","+base_dn_tmp
        print base_dn_tmp
    rs = conn.search_s(base_dn_tmp, ldap.SCOPE_ONELEVEL, filter, attrs)
    print "部门:%s,人数:%s"%(department[depa],len(rs))
    for user in rs:
        print user[1]['cn'][0]
    print "#"*40

conn.unbind()
if __name__ == '__main__':
    pass