ldap authentication

apps/mainsite/backends.py

@@ -0,0 +1,19 @@
+from django_auth_ldap.backend import LDAPBackend
+from django.conf import settings
+from django.contrib.auth.models import Group
+
+class StaffLDAPBackend(LDAPBackend):
+
+    def get_or_create_user(self, username, ldap_user):
+        staff_group_name = getattr(settings, 'STAFF_GROUP_NAME', 'Staff')
+
+        user, created = super(StaffLDAPBackend, self).get_or_create_user(username, ldap_user)
+        if created:
+            try:
+                user.groups.add(Group.objects.get(name=staff_group_name))
+            except Group.DoesNotExist:
+                pass
+
+            user.is_staff = True
+            user.save()
+        return (user, created)

apps/mainsite/local_settings.py.example

@@ -36,3 +36,9 @@ CACHES = {
 #    '127.0.0.1',
 #)
 
+AUTHENTICATION_BACKENDS = [
+    'mainsite.backends.StaffLDAPBackend',
+    'django.contrib.auth.backends.ModelBackend',
+]
+AUTH_LDAP_SERVER_URI = "ldap://ldap.example.com"
+AUTH_LDAP_USER_DN_TEMPLATE = "uid=%(user)s,ou=people,dc=example,dc=com"

apps/mainsite/settings.py

@@ -9,6 +9,9 @@
 
 from mainsite import TOP_DIR
 
+
+
+
 INSTALLED_APPS = [
     'django.contrib.auth',
     'django.contrib.contenttypes',
@@ -91,6 +94,11 @@
         'mail_admins': {
             'level': 'ERROR',
             'class': 'django.utils.log.AdminEmailHandler'
+        },
+        'ldap_debug': {
+            'level': 'DEBUG',
+            'class': 'logging.FileHandler',
+            'filename': os.path.join(os.path.dirname(TOP_DIR), 'logs', 'ldap_debug.log'),
         }
     },
     'loggers': {
@@ -99,6 +107,11 @@
             'level': 'ERROR',
             'propagate': True,
         },
+        'django_auth_ldap': {
+            'level': 'DEBUG',
+            'handlers': ['ldap_debug'],
+            'propagate': True,
+        }
     }
 }
 

requirements.txt

@@ -1,2 +1,4 @@
 Django==1.3.1
-PIL
+PIL==1.1.7
+django-auth-ldap==1.0.12
+python-ldap==2.4.3