paulmataruso/zulip
1
0
Fork 0
mirror of https://github.com/zulip/zulip.git synced 2025-10-25 00:53:56 +00:00
Code Issues Packages Projects Releases Wiki Activity

ldap: Turn off the AUTH_LDAP_ALWAYS_UPDATE_USER setting.

Browse Source 
The `AUTH_LDAP_ALWAYS_UPDATE_USER` is `True` by default, and this would sync the
attributes defined in the `AUTH_LDAP_USER_ATTR_MAP` to the user profile. But,
the default code in `django-auth-ldap` would work correctly only for `full_name`
field. This commit disables the setting by default, in favour of using the
`sync_ldap_user_data` script as a cron job.
This commit is contained in:
Puneeth Chaganti
2019-05-28 14:23:49 +05:30
committed by Tim Abbott
parent 569d79b9d8
commit 717d1e504d
2 changed files with 4 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
docs/production/authentication-methods.md
View File

@@ -134,11 +134,10 @@ management command:
``` ```
This will sync the fields declared in `AUTH_LDAP_USER_ATTR_MAP` for This will sync the fields declared in `AUTH_LDAP_USER_ATTR_MAP` for
all of your users; in the default configuration, it will just all of your users.
synchronize users' `full_name`.
We recommend running this command in a **regular cron job**, to pick We recommend running this command in a **regular cron job**, to pick
up name changes made on your LDAP server. up changes made on your LDAP server.
All of these data synchronization options have the same model: All of these data synchronization options have the same model:
* New users will be populated automatically with the * New users will be populated automatically with the

2
zproject/settings.py
View File

@@ -146,6 +146,8 @@ DEFAULT_SETTINGS = {
'AUTH_LDAP_CONNECTION_OPTIONS': {}, 'AUTH_LDAP_CONNECTION_OPTIONS': {},
# Disable django-auth-ldap caching, to prevent problems with OU changes. # Disable django-auth-ldap caching, to prevent problems with OU changes.
'AUTH_LDAP_CACHE_TIMEOUT': 0, 'AUTH_LDAP_CACHE_TIMEOUT': 0,
# Disable syncing user on each login; Using sync_ldap_user_data cron is recommended.
'AUTH_LDAP_ALWAYS_UPDATE_USER': False,
# Development-only settings for fake LDAP authentication; used to # Development-only settings for fake LDAP authentication; used to
# support local development of LDAP auth without an LDAP server. # support local development of LDAP auth without an LDAP server.
# Detailed docs in zproject/dev_settings.py. # Detailed docs in zproject/dev_settings.py.