15.企业域账号集成

什么是目录服务 Directory Service ? 可以直接使用域账号登陆 不用手工添加账号，维护独立密码 可以集成 OpenLDAP/ActiveDirecotry

以 Open LDAP 为例

Open LDAP 服务搭建 juejin.cn/spost/73023…

开发应用

pip install django-python3-ldap

wangdalei_dj/wangdalei/settings.py

INSTALLED_APPS = [
    'django.contrib.admin',
    'django.contrib.auth',
    'django.contrib.contenttypes',
    'django.contrib.sessions',
    'django.contrib.messages',
    'django.contrib.staticfiles',
    'django_python3_ldap',
    'jobs',
    'interview'
]



LDAP_AUTH_URL = "ldap://172.31.7.188:389"
LDAP_AUTH_USE_TLS = False
LDAP_AUTH_SEARCH_BASE = "dc=example,dc=com"
LDAP_AUTH_OBJECT_CLASS = "inetOrgPerson"

LDAP_AUTH_USER_FIELDS = {
    "username": "cn",
    "first_name": "givenName",
    "last_name": "sn",
    "email": "mail",
}

LDAP_AUTH_USER_LOOKUP_FIELDS = ("username",)
LDAP_AUTH_CLEAN_USER_DATA = "django_python3_ldap.utils.clean_user_data"
LDAP_AUTH_CONNECTION_USERNAME = "admin"
LDAP_AUTH_CONNECTION_PASSWORD = "123456"

AUTHENTICATION_BACKENDS = {"django_python3_ldap.auth.LDAPBackend", 'django.contrib.auth.backends.ModelBackend',}

[root@bogon wangdalei]# python3 manage.py ldap_sync_users
Synced wxl
Synced wangdalei

后台可以看到账号已经同步过来了