Add settings for LDAP authentication

steering/settings.py

@@ -4,6 +4,9 @@ import os
 from pathlib import Path
 
 from corsheaders.defaults import default_headers
+from django_auth_ldap.config import LDAPSearch, PosixGroupType
+
+import ldap
 
 # Paths
 BASE_DIR = Path(__file__).resolve(strict=True).parent.parent
@@ -185,3 +188,34 @@ else:
     )
 
 # WSGI_APPLICATION = 'steering.wsgi.application';
+
+if os.getenv("USE_LDAP_AUTH"):
+    AUTHENTICATION_BACKENDS = (
+        "django_auth_ldap.backend.LDAPBackend",
+        "django.contrib.auth.backends.ModelBackend",
+    )
+
+    AUTH_LDAP_SERVER_URI = "ldap://ldap.local"
+    AUTH_LDAP_BIND_DN = "cn=reader,dc=local"
+    AUTH_LDAP_BIND_PASSWORD = os.getenv("AUTH_LDAP_BIND_PASSWORD")
+    AUTH_LDAP_USER_DN_TEMPLATE = "uid=%(user)s,ou=users,dc=local"
+    AUTH_LDAP_GROUP_SEARCH = LDAPSearch(
+        "ou=groups,dc=local",
+        ldap.SCOPE_SUBTREE,
+        "(objectClass=posixGroup)",
+    )
+    AUTH_LDAP_GROUP_TYPE = PosixGroupType()
+    AUTH_LDAP_USER_ATTR_MAP = {
+        "first_name": "givenName",
+        "last_name": "sn",
+        "email": "mail",
+    }
+    AUTH_LDAP_USER_FLAGS_BY_GROUP = {
+        "is_active": "cn=active,ou=django,ou=groups,dc=local",
+        "is_staff": "cn=staff,ou=django,ou=groups,dc=local",
+        "is_superuser": "cn=superuser,ou=django,ou=groups,dc=local",
+    }
+
+    AUTH_LDAP_ALWAYS_UPDATE_USER = True
+    AUTH_LDAP_FIND_GROUP_PERMS = True
+    AUTH_LDAP_MIRROR_GROUPS = True