This core was pulled out of an OUCS project, and has not undergone much testing beyond its current use. Comments to infodev@oucs.ox.ac.uk.
Add 'django_webauth' to your list of INSTALLED_APPS in your settings.py.
Add the following to your urlconf:
url(r'^webauth/', include('django_webauth.urls', 'webauth')),Add 'django_webauth.backends.WebathBackend' to your list of AUTHENTICATION_BACKENDS.
To link to the Webauth views from your templates use webauth:login and webauth:logout for url names.
Install and enable the webauth module. It's packaged as libapache2-webauth in Debian, and can be enabled using a2enmod webauth.
Follow the OUCS documentation, protecting only the Webauth login view. You may also wish to use the WebauthDoLogout directive for the logout view.
Make sure that your Kerberos principle has access to the LDAP directory.
Add something like the following to your crontab to keep your Kerberos ticket alive:
* * * * * /sbin/start-stop-daemon --start --oknodo --quiet --pidfile /var/run/k5start.pid --exec /usr/bin/k5start -- -b -K 5 -p /var/run/k5start.pid -f /path/to/keytab webauth/aardvark.ox.ac.ukInstallation requires python 2.7
This is installed as follows:
First install python 2.7
yum groupinstall "Development tools" yum install zlib-devel bzip2-devel openssl openssl-devel ncurses-devel sqlite-devel readline-devel tk-devel gdbm-devel db4-devel libpcap-devel xz-devel -y cd ~ wget http://python.org/ftp/python/2.7.6/Python-2.7.6.tar.xz tar xf Python-2.7.6.tar.xz cd Python-2.7.6 ./configure --prefix=/usr/local --enable-unicode=ucs4 --enable-shared LDFLAGS="-Wl,-rpath /usr/local/lib" make && make altinstall ln -s /usr/local/bin/python2.7 /usr/bin/python2.7 wget https://bitbucket.org/pypa/setuptools/raw/bootstrap/ez_setup.py python2.7 ez_setup.py easy_install-2.7 -i http://pypi.douban.com/simple pip
Next install the django webauth code
git clone https://github.com/ox-it/django-webauth /tmp/django-webauth
Next create a virtualenv for the django webauth
mkvirtualenv --python=/usr/local/bin/python2.7 cbh_stage pip install /tmp/django-webauth