# -*- coding: UTF-8 -*-

import ldap

def validate_ldap_user(user_name, user_pwd):
    l = ldap.initialize(_LDAP_URL)
    try:
        l.protocol_version = ldap.VERSION3
        l.simple_bind_s(user_name, user_pwd)
        return True, ""
    except ldap.INVALID_CREDENTIALS:
        error_msg = "Your username or password is incorrect."
    except ldap.LDAPError as e:
        if hasattr(e, 'message') and type(e.message) == dict and e.message.has_key('desc'):
            error_msg = e.message['desc']
        else:
            error_msg = e
    l.unbind_s()

    return False, error_msg