Django ldap auth. 0. I am building a Django Application which serves some operations for all the users. All of the documentation for django-auth-ldap is here. When you set the ldap authentication, users are loaded into the django's auth_user table and is_staff is set to 0. python manage. LDAP_AUTH_CONNECTION_USERNAME = "admin". # the `ldap_sync_users` command will perform an anonymous query. config import LDAPSearch # This search matches users with the sAMAccountName equal to the provided username. The one I use which works very well, is django-python3-ldap , which you can find here: Multiple LDAP Configs. This will fail in a future version of pip. Oct 12, 2020 · django-ldapdb is an LDAP database backend for Django, allowing to manipulate LDAP entries through Django models. Nov 13, 2013 · The django-auth-ldap docs are indeed written for developers who are familiar with Django. If you need a secure connection to the LDAP server, you can either use an ldaps:// URL or enable the StartTLS extension. If you have multiple backends, AUTH_LDAP_FIND_GROUP_PERMS will give permissions to users authenticated through LDAP, but not Apr 26, 2013 · Django-Ldap-Authentication. Mar 6, 2019 · 1. In particular, I would like to allow users to see only a few records (for example, suppose there is a model with a city field: some users . answered May 20, 2022 at 9:31. It looks like your domain components ( dc 's) are wrong: for the bind dn you set DC=ad,DC=users,DC=com while the user dn template takes DC=users,DC=yyy,DC=com. 16. py and its working fine. is_anonymous() if the last function call returns false then it your LDAP auth module works Install using pip install django-python3-ldap. ldapsearch -H ldap://domain. Apr 23, 2012 · AUTH_LDAP_PROFILE_ATTR_MAP does what you think it does, but it only works on a profile object that already exists. I'm able to connect to the LDAP server (MS Active Directory), search for the user but unable to verify against groups (using the config param AUTH_LDAP_REQUIRE_GROUP ). def ldap_auth(login, password): return c. django-auth-ldap Sep 3, 2018 · I was struggling for this soo long. 在使用django-auth-ldap插件进行身份验证时，可能会遇到以下一些常见的认证失败情况：. This is a Django authentication backend that authenticates against an LDAP service. Typically, non-secure LDAP runs on port 389 while secure LDAPS runs on port 636. 13) and django-auth-ldap (1. Configure Django Settings: In your Django Jul 22, 2020 · The code is not working with LDAPS but it is working fine with LDAP. This takes multiple LDAPSearch objects and returns the union of the results. 'django_auth_ldap. anyone using django_auth_ldap against an active directory server. Provide details and share your research! But avoid …. LDAPBackend",) Configure the settings for your LDAP server (s) (see Available settings, below). 5; and Django >= 1. 认证失败的可能原因. self. Before get into django, I have tested following shell command can return successfully. bind() So in auth view you need now two different condition for ldap and non-ldap users: Jun 17, 2011 · 1. 7) but it is not working. It supports most of the same APIs as a Django model: MyModel. Backend'] # IPアドレスやホスト名を文字列で記載して下さい LDAP_HOST = 'your-ldap-host-ip-address' # LDAPSは、標準の The least invasive way to map group permissions is to set AUTH_LDAP_FIND_GROUP_PERMS to True. At a glance, I would say that one problem is that AUTH_LDAP_SERVER_URI is not set to a URI; try something of the form ldap Thanks for contributing an answer to Stack Overflow! Please be sure to answer the question. I would like my web application authenticate users on an ldap server (only for username and password), but that the permissions reside on django. Verify logging for TLS connection by @francoisfreitag in #294. backend import _LDAPUser class GroupLDAPBackend (LDAPBackend): default_settings = {} def authenticate_ldap_user (self, ldap_user: _LDAPUser, password: str): # This is the default implemented authentication user = ldap_user. Django Authentication Using LDAP¶ This is a Django authentication backend that authenticates against an LDAP service. Have to set user as admin in django for successful login. from django_auth_ldap. Nov 15, 2018 · It looks like the Django module has two methods of authenticating a user. The latter is generally the preferred mechanism. backend import LDAPBackend. This solves the issue. 6 documentation Nov 19, 2019 · 1. I couldn’t find anything useful in the logs. Log variable data separately by @francoisfreitag in #292. userxxx is logged in with LDAP_AUTH_SEARCH_BASEOU=Users,OU=xxx Accounts,OU=ZZZ,DC=domain,DC=local useryyy is logged in with LDAP_AUTH_SEARCH_BASEOU=Users,OU=yyy Accounts,OU=ZZZ,DC=domain,DC=local i have tried with User objects. and finally its working with django-auth-ldap on Django 2. Using django_auth_ldap module. Sep 18, 2015 · Change Log — django-auth-ldap 1. Mar 1, 2014 · 1. x. py install for python-ldap: finished with status 'error'. I am using django-python3-ldap v0. With that background out of the way, I would Mar 23, 2016 · I can't seem to get python ldap libraries to work properly with Django: >>> from django_auth_ldap import * Traceback (most recent call last): File "<console>", line 1, in <module> ImportError: No module named django_auth_ldap I'm running Ubuntu v14. py for each run using different LDAP_AUTH_SEARCH_BASE . As those users had the same usernames in LDAP, maybe this could May 4, 2017 · 1. So you have to specify version pinning information in install_requires or requirements files . Jun 22, 2015 · The client retransmits its original request (from Step 1), this time including the cookie in the Cookie field of the HTTP header. models import User from django. Just add django_auth_ldap. Install `django-auth-ldap`: pip install django-auth-ldap. ERROR: Command errored out with exit status 1: from django_auth_ldap. pai. LDAP_GROUP_TYPE_PARAMS is a dictionary, which will be converted by Tower to kwargs and passed to the LDAP Group Type class Nov 21, 2011 · This site authenticates users against a remote active directory via the django ldap plugin. It requires python-ldap >= 3. backend authentication app. LDAPBackend', 'django. Configuration can be as simple as a single distinguished name template, but there are many rich configuration options for working with users, groups, and permissions. filter (x=1, y__contains=2) Full admin support and browsing. Jul 17, 2015 · The logging configuration just hooks up the django_auth_ldap debug output to your console so that you'll see it. 302 Found. io/. authenticating against LDAP server used to work! Now, when trying to authenticate against the LDAP server, the request just hangs until it times out. with a simple server failover. if i run my auth from the django interactive shell the auth works fine. I have found that there's a Django authentication backend that authenticates against an LDAP service. 9. fixed the porblem by installing this things: sudo apt-get install libsasl2-dev python-dev libldap2-dev libssl-dev sudo apt-get install build-essential python3-dev python3. config import LDAPSearch, NestedActiveDirectoryGroupType. Sep 25, 2019 · python - 3. 2. 0; under Python 3, it uses pyldap. Nov 29, 2017 · 1. – EricLavault. database backend for Django. For debugging your configuration, you'll want to install a logging handler on the 'django_auth_ldap' logger; see Django's logging documentation for more on that. Jun 18, 2019 · Django Admin login page. I'm using django-rest-framework-jwt for that. If you need to search in more than one place for a user, you can use LDAPSearchUnion. py ldap_sync_users works fine and is refreshing my db. 6, 2. Because the LDAP search is case-insensitive, the default implementation also searches for existing Django users with an iexact Django Authentication Using LDAP. AUTH_LDAP_BIND_DN = "CN=SVC_fwauto_prod,OU=Service Accounts,OU=ADCCreated,DC=example1,DC=com". The default logging settings in Python/Django will just eat the output. May 15, 2013 · 2) django-auth-ldap doesn't propagate Django users up to LDAP, only the other way around. We use django-allauth for authentication. Authenticating against an external source is swell, but Django’s auth module is tightly bound to a user model. Windows 8. auth. Jan 19, 2017 · from django. Jan 20, 2019 · Configure Django Auth LDAP. 4. This version is supported on Python 2. After we’ve installed the package and its dependencies we are ready to configure it to work the way we want to, and to integrate with our specific Active Directory instance. AUTH_LDAP_USER_SEARCH = LDAPSearch pip-install django-auth-ldap. May 28, 2021 · (venv) [admin@localhost ~]$ sudo pip3 install django-auth-ldap WARNING: pip is being invoked by an old script wrapper. To test out communication I then ran. The precedence of the underlying searches is unspecified. # The LDAP username and password of a user for querying the LDAP database for user. But my requirement is. First, I'm using Open Directory, so I need to use AUTH_LDAP_GROUP_TYPE = PosixGroupType (name_attr='cn') instead of GroupOfNamesType (). Using the default LDAPBackend provided by django-auth-ldap: AUTHENTICATION_BACKENDS = (. 这可能是由于网络问题、服务器配置错误或安全规则限制造成的。. LDAPBackend will then find all of the LDAP groups that a user belongs to, map them to Django groups, and load the permissions for those groups. 7. 33. 0 python-ldap - 3. It comes with an inbuilt LDAP Authentication Backend with makes it very easy to authenticate users with LDAP Django Authentication Using LDAP. Login without checking for a group works fine. May 18, 2022 · 1 Answer. I am trying to set up auth through django_auth_ldap and am having an issue. By default, Django uses a user-oriented authentication with a login page. Then we can attempt to bind again with the user’s password. Prefer relative imports in the django_auth_ldap package by @francoisfreitag in #290. LDAPBackend" だけだと全ユーザが LDAP でしかログインできなくなることを踏まえて。管理者ユーザは LDAP を使わずにログインできる仕様としたかったので、このような書き方にした。 Nov 2, 2021 · LDAP_AUTH_ACTIVE_DIRECTORY_DOMAIN = "". Django provides a very useful admin interface that permits to manage users, display and modify model data. py: Apr 23, 2018 · I am using django_auth_ldap. To connect on the admin dashboard and add other users, we need to create a user with all the Oct 17, 2016 · I'm trying to use Django-Auth-Ldap in my project (Django 1. backend is Feb 14, 2020 · django-auth-ldap3-ad 1. Along with LDAP and Kerberos. It's designed to allow Django deployments to authenticate against existing LDAP services that are managed separately. 6 documentation. Not all ldap users must have access to the web application. . backend import LDAPBackend from django. Second, mapping the 'is_active' flag to the entire 'groups' container doesn't make sense, because I can't login when I use it, so I Installing collected packages: python-ldap, django-angular-host-page-template-backend, django-ldap-auth-backend. My LDAP backend is Active Directory. From the documentation of django_auth_ldap: Under Python 2, it requires python-ldap >= 2. Jun 16, 2016 · The Django user won't be removed from Django's user table if removed from LDAP; if you set multiple auth backends to also using the Django default auth, the user should be able to login (perhaps after a password reset) if removed from LDAP. But something else already installed a newer version of pyasn1 to you build environment. LDAP service. objects. for ldap objectclasses. If None, then the authenticated user will be used for querying, and. Running setup. 7, 3. 8, django_auth_ldap I have LDAP Server (Active Directory Server) in my organization. I want my users could authenticate using their ldap accounts. py ldap_sync_users -v 3. config import LDAPSearch, LDAPGroupQuery,GroupOfNamesType AUTH_LDAP_SERVER_URI = 'ldap://192. Ldap config. Docs: Use newer locations for python-ldap and tox in intersphinx by Jun 7, 2017 · From what I can deduce, it appears that django_ldap_auth cannot be easily installed for 1. I recently wrote a web application for managing a seminar series at University. This is my settings. 222' AUTH_LDAP_BIND_DN = 'CN=Django Admin,CN=Users,DC=hqvfx,DC=com' AUTH_LDAP_BIND_PASSWORD Jan 7, 2023 · ※ AUTHENTICATION_BACKENDS をこのような書き方にしているのは、"django_auth_ldap. port: 389. 2 of module pyasn1. Hot Network Questions Are Unique Options FX Feb 6, 2013 · 2. Where all users should be able to access the web services ( I achieved this ). NGINX Plus forwards the request to the ldap‑auth daemon (as in Step 2). May 26, 2017 · Then I can connect. We use LDAP for authentication with our flagship Django website in our organization, using TLS certificates. py shell. 11 4. Mar 22, 2019 · Could anyone of you please help me to implement LDAP authentication using Django. com We will be using django-auth-ldap,anawesomeopen-source django library. 0 Code: import ldap from django_auth_ldap. I'm using django-auth-ldap 1. 04. How to login using LDAP in Django. If you're starting from scratch, I would recommend taking it one step at a time: The Django tutorial; Django authentication; Some kind of LDAP tutorial, if you're not already familiar. ModelBackend', You probably have to define a few more settings like you ldap host. I can see that communication worked because it is grabbing the users and inserting them into the django database. Second, these objects get attached to the User objects, which allows us to cache expensive LDAP information, especially around groups and permissions. The key is to get the python Aug 28, 2018 · 1. Feb 6, 2019 · You need to configure your LDAP settings in settings. My environment is using virtualevn and when trying to install pip python-ldap I receive the following message: error: Unable to find vcvarsall. LDAPSearch("ou=users,dc=example,dc=com", ldap. I know Django has built-in User Authentication mechanism, But it authenticates if users are present in User Model Database. For this reason, the solution is to replace: cn=noc. Can you tell my why i got this errors and what can I do? Jun 8, 2014 · I'm creating a web services that use JWT Auth. 在遇到此问题时 AUTH_LDAP_FIND_GROUP_PERMS calculates the permissions from the LDAP, which means the LDAP group permission is the source of truth. Add debug logging before bind or search_as by @stevecj in #291. To mirror groups from ldap to django, you can set the AUTH_LDAP_MIRROR_GROUPS flag to True. Unable to connect to ldap using django-python3-ldap. Netbox is working fine with Gunicorn and Apache. In either case, you’ll need the OpenLDAP libraries and headers available on your system. 6, Python 2. Bind Password: thePassword. I would like to make few people (part of ldap group) as admins. May 24, 2021 · Install the package with pip: $ pip install django-auth-ldap. The object class name that you use for groups. 6. 1). selva316. This class exists for two reasons. Also LDAP. 6 django - 2. Jan 31, 2017 · And, on the other hand, in subsequent request, I need to check that the user who makes the request belongs to LDAP (and only LDAP not the own Django backend, so if there's an user with the same credentials in the Django users database should't be allow to continue). LDAPBackend to your AUTHENTICATION_BACKENDS. I added a couple print statement in the django_auth_ldap mo Mar 1, 2020 · # Just needed for type hinting lol from django_auth_ldap. I found the problem. 无法连接到LDAP服务器. 4. Everything's okay right now. And we want to use django-auth-ldap. create () MyModel. 1. Oct 7, 2022 · 1. Auth: Bind DN – cn=testuser1@test. com:636". middleware. 3 against Windows Server 2008 R2. 2 for LDAP authentication in Django. Django is one of the most famous Python frameworks. com -D "ou=Resources,ou=Company, dc=domain,dc=com" -U "user_name" -w "user Jul 1, 2011 · Go to your Django project folder and Start the python interpreter with. I set the ldap config in the settings. backends. The server setup is: NginX, Django 1. It is unclear whether or not you are, as your destination URL seems to be ldap:// instead of ldaps://. py install for python-ldap: started. noc,ou=Users,dc=XXX,dc=XX. Aug 10, 2014 · I'm using django-auth-ldap with following setting because there is no default/global 'admin' user on the ldap server, its only for authenticating users and users themselves may see their user information. But when trying with Django with following settings: import ldap. Add 'django_python3_ldap' to your INSTALLED_APPS setting. The setup you have configured first attempts to lookup the record (via uid) and then uses the found DN to then bind (again) with the password supplied. To use the auth backend in a Django project, add 'django_auth_ldap. To enable StartTLS, set AUTH_LDAP_START_TLS to True. To manipulate the contents of an LDAP directory from a Django app you might want to look at django-ldapdb. That's rather unsatisfying, of course. Mar 14, 2019 · I can log-in by use of Apache Directory Studio as followed: hostname: private. RemoteUserBackend', ] If you are already doing this without success, and given you need more granular access controls, I would just write a custom authentication backend and ditch mod_ldap altogether. 2 + Python 3. solution which can be included. nginx May 21, 2021 · I am trying to configure LDAP authentication on my django project. Jul 29, 2022 · i'm using django_python3_ldap and it works fine when i change settings. You need to create a default profile object for each user by some other mechanism. config import LDAPSearch but no matter what I'm getting an error: ImportError: Could not import settings ' Apr 26, 2016 · I am trying to configure ldap authentication for a django project. With AUTH_LDAP_MIRROR_GROUPS, the Django database duplicates the LDAP group membership. The migration using this command: python manage. Sorted by: 1. 8 . Next step is to login as admin or update the auth_user table setting is_staff to 1 to every user which has to login. May 9, 2018 · # 上記のActive Directory用の認証バックエンドクラスの指定 # ここを変更すると標準のバックエンドは利用されなくなり、すべてActive Directoryになるので注意 AUTHENTICATION_BACKENDS = ['django_ldap. bat Jul 27, 2018 · When using django-python3-ldap you have to explicitly use version 0. But trying to login with the user example_user which was added to the group example_group on LDAP and setting AUTH_LDAP_REQUIRE_GROUP fails. python3 manage. 122. I then promote a user. LDAPBackend' to AUTHENTICATION_BACKENDS. Django FreeIPA Auth is a. Another solution would be to modify the sources of django-auth-ldap. 168. com,ou=users,dc=ldap,dc=pai,dc=org`. Each LDAP Group Type can potentially take different parameters. config import LDAPSearch,GroupOfUniqueNamesType. SCOPE_SUBTREE, "(uid=%(user)s)"), May 6, 2015 · The following is the snippet of the setting for our project. AuthenticationMiddleware: Next, you must replace the ModelBackend with RemoteUserBackend in the AUTHENTICATION_BACKENDS setting: With this setup, RemoteUserMiddleware will detect the username in request The LDAP Group Types that are supported by Tower leverage the underlying django-auth-ldap library. You will need to create the Django groups and associate permissions yourself, generally through the admin Direct Bind. This system allows users to book times to give talks, view a list of upcoming talks, provides an iCalendar feed of scheduled talks and emails reminders to both attendees and speakers at various times throughout the week. If it's the case you can check this post for getting valid top-level base dn (s). See full list on github. 4 and 3. Django-auth-ldap is using the CN to identify a group member instead of the DN. 10. As an example it will search (uid=boyle), then find the DN: uid=boyle,dc=example,dc=com. The second method is to derive the user’s DN from his username and attempt to bind as the user directly. Mar 10, 2021 · django-ldapdb. 3. conf import settings def login_user(request): state = "" username = settings. Writing a custom authentication backend is really easy. You can use the default LDAPBackend provided or create a custom one and use that. asked Mar 10, 2021 at 20:09. Make sure you have AUTH_LDAP_SERVER_URI May 10, 2016 · AUTHENTICATION_BACKENDS = [ 'django. x django-auth-ldap - 2. Do not add anything to INSTALLED_APPS. The first one involves connecting to the LDAP server either anonymously or with a fixed account and searching for the distinguished name of the authenticating user. With the help of psagers' tips, I managed to find the answer to my issue. This is normally "sAMAccountName". 4 -b "dc=corp,dc=rate,dc=com" -D corp\\peter -W sAMAccountName=peter Jun 21, 2016 · I'm working on a Django project that is using an ldap authentication module. 1. backend. The object class that you use for username within AD. ldapsearch -H ldap://172. AUTH_LDAP_BIND_PASSWORD auth = LDAPBackend() try: User = auth. 1 Enterprise and 2. 10-dev python2. for Python 3 (https: Oct 2, 2013 · 1. django-ldapdb, an LDAP. This defaults to "group". 11. 4) on Ubuntu 12. You will need the full distinguished name. Jan 22, 2024 · Here are the general steps to set up Active Directory authentication in a Django project: 1. Set your AUTHENTICATION_BACKENDS setting to ("django_python3_ldap. very simple authentication module for python3 / django / LDAP or AD. 0, Python-3. These days, you can also set this up in Django's LOGGING setting. Dec 24, 2014 · I've been trying to get the LDAP -> Django groups mappings working without success. The problem is that it did not seem like it is connecting to the LDAP server. I successfully managed to connect to my ldap test server which I created with some dummy users. 34. The ldap‑auth daemon decodes the cookie, and sends the username and password to the LDAP server in an authentication request. You’ve probably noticed that all of the settings for this backend have the prefix AUTH_LDAP_. Unlike many other Django packages, django-auth-ldap do not need you to add it to your application’s INSTALLED_APPS setting. This is working on our server but I am running into issues getting this running on my windows dev machine. ドキュメントのトップには、依存しているpython-ldapがPython3に非対応とありました。ただ、併記する形でPython3対応されたforkの記載もありました。 Django Authentication Using LDAP — django-auth-ldap 1. http import HttpResponse from django_auth_ldap. You’ll need the OpenLDAP libraries and headers available on your system. io/ The first one involves connecting to the LDAP server either anonymously or with a fixed account and searching for the distinguished name of the authenticating user. Here is my example config: """. RemoteUserMiddleware to the MIDDLEWARE setting after the django. in the memberUid field of the group in LDAP by: noc. settings. I want to develop a web application which should allow users to access the application post LDAP authentication. We learned that this should be done with the DefaultAccountAdapter in the django-allauth package. populate_user(<LDAP username of an existing user>) user. contrib. But the documentation is quite good. 2. AUTH_LDAP_BIND_DN password = settings. So you can't login also if you are a valid ldap user. but the same code from within a view in the app fails with. Especially on Windows, I'd recommend trying a pure Python solution. Feb 5, 2014 · So all the tutorials on ldap with Django start by saying import ldap from django_auth_ldap. Say it will return True/False by provided credentials. authenticate(username 1. backend import LDAPBackend, _LDAPUser, LDAPSearch user = _LDAPUser(LDAPBackend(), "any") # just for getting root connection to LDAP search = LDAPSearch( "ou=Some,dc=some,dc=some,dc=some", ldap. LDAP服务器可能无法从Django应用程序中访问。. In this tutorial, I explain how to automatically log in users in its built-in admin interface using an LDAP. Documentation: https://django-auth-ldap. import ldap from django_auth_ldap. This is the default, but it can be customized by subclasses of LDAPBackend. Pip is up to date ( 21. authenticate (password) # If the authentication was denied, we Jan 21, 2022 · I have problem with finalizing netbox installation on Centos8. Jul 1, 2014 · One option might be to ignore the domain, use the multiple-backend feature of django-auth-ldap, and just let it try each one until it succeeds. This is required if the user's # username is not in their DN (Active Directory). First, you must add the django. "USR-NETBOX-USERS", "USR-NETBOX-ADM". Next you are going to need the following AD related things: User in order to bind to AD. 7-dev libldap2-dev libsasl2-dev slapd ldap-utils tox lcov valgrind. New in version 1. noc. My active Directory shema is: I've tested the connection on the cmd line by installing the ldap-utils package. org. django-ldapdb supports every upstream-supported Django version, based on the Nov 1, 2017 · django-auth-ldap needs to be compiled due to its dependencies. ] Something that could have caused confusion was that I had created manually some users before using LDAP. Released: Feb 14, 2020. I wanted to add LDAP auth but there is a problem with django-auth-ldap installation. This is what a pip freeze looks like on my working environment: Jul 19, 2012 · When communicating with an LDAP server on localhost or on a local network, this might be fine. The main reason you would want to do this is to create two backend subclasses that reference different collections of settings Aug 21, 2018 · New in version 1. AUTH_LDAPS_SERVER_URI = "ldaps://example1. py (as shown in the link you posted) and add your LDAPBackend to AUTHENTICATION_BACKENDS. ldapobj = LDAPBackend() user = ldapobj. I have virtual env and python version 3. The function that does the authentication in django-rest-framework-jwt is coded like this : My setup: Django-3. sudo apt-get install ldap-utils. Add function to check ldap auth. Tower exposes LDAP_GROUP_TYPE_PARAMS to account for this. 3, Fedora 15, mySql 5. Feb 22, 2016 · It comes with a django authentification backend. Everything seems to work fine except for the group mapping part. # details. ¶. The groups will be created under Groups but the permissions you will have to set yourself. Oct 8, 2018 · LDAP Authentication with Django Mon, Oct 8, 2018. First, it's convenient to have a separate object for each request so that we can use object attributes without running into threading problems. py file, notice that there are specific settings for MS Active Directory. If you look in your auth_user table you will noticed users using Django auth have their passwords hashed Mar 14, 2016 · Project description. Currently, we can login with LDAP from the default django sign-in page (/admin). example from the shell. SCOPE_SUBTREE, "???? what should be Sep 6, 2013 · I'm trying to get django-auth-ldap working, but I keep getting invalid credentials (49) errors, despite having correct credentials: additional info: 80090308: LdapErr: DSID-0C0903A9, comment: AcceptSecurityContext error, data 52e, v1db1 Using python-ldap (2. Asking more detail about the AD structure, I found that the group use a multi-valued DN to store the users, named member. A Django ORM-like interface. and then do, from django_auth_ldap. readthedocs. I'm getting crazy cause of Django LDAP authentication. Asking for help, clarification, or responding to other answers. What I did was to assign an array with group names to be mirrored, like: AUTH_LDAP_MIRROR_GROUPS = [. import ldap. When a user logs in, we have to create a model object to represent them in the database. ll pg nq iq rn fe nj rn gd jw