add ldap authentication and function to create ldap user on signup

users/admin.py

@@ -0,0 +1,3 @@
+from django.contrib import admin
+
+# Register your models here.

users/apps.py

@@ -0,0 +1,5 @@
+from django.apps import AppConfig
+
+
+class UsersConfig(AppConfig):
+    name = 'users'

users/forms.py

@@ -0,0 +1,19 @@
+from django import forms
+from django.contrib.auth.forms import UserCreationForm
+from django.contrib.auth import get_user_model
+
+User = get_user_model()
+
+
+class SignUpForm(UserCreationForm):
+    first_name = forms.CharField(
+        max_length=30, required=False, help_text='Optional.')
+    last_name = forms.CharField(
+        max_length=30, required=False, help_text='Optional.')
+    email = forms.EmailField(
+        max_length=254, help_text='Required. Inform a valid email address.')
+
+    class Meta:
+        model = User
+        fields = ('username', 'first_name', 'last_name',
+                  'email', 'password1', 'password2', )

users/ldap_funcs.py

@@ -0,0 +1,28 @@
+from django.conf import settings
+from ldap3 import Server, ServerPool, Connection, ObjectDef, AttrDef, Reader, Writer
+
+server = Server(settings.AUTH_LDAP_SERVER_URI)
+
+
+
+def create_user(user, password, firstname, lastname, email):
+    conn = Connection(server, settings.AUTH_LDAP_BIND_DN,
+                      settings.AUTH_LDAP_BIND_PASSWORD)
+    if not conn.bind():
+        raise Exception('Could not connect to LDAP Server')
+    obj_new_user = ObjectDef(
+        ['inetOrgPerson'], conn)
+    w = Writer(conn, obj_new_user)
+    dn = 'uid=%s,ou=users,dc=example,dc=com' % user
+    w.new(dn)
+    w[0].givenName = firstname
+    w[0].sn = lastname
+    w[0].cn = firstname + " " + lastname
+    w[0].mail = email
+    w[0].userPassword = password
+
+    if not w.commit():
+        conn.unbind()
+        raise Exception("Couldn't write user")
+    conn.unbind()
+    return True

users/models.py

@@ -0,0 +1,3 @@
+from django.db import models
+
+# Create your models here.

users/templates/users/signup.html

@@ -0,0 +1,21 @@
+{% extends 'base.html' %}
+
+{% block body_content %}
+<h2>Sign up</h2>
+<form method="post">
+    {% csrf_token %}
+    {% for field in form %}
+    <p>
+        {{ field.label_tag }}<br>
+        {{ field }}
+        {% if field.help_text %}
+        <small style="color: grey">{{ field.help_text }}</small>
+        {% endif %}
+        {% for error in field.errors %}
+        <p style="color: red">{{ error }}</p>
+        {% endfor %}
+    </p>
+    {% endfor %}
+    <button type="submit">Sign up</button>
+</form>
+{% endblock %}

users/tests.py

@@ -0,0 +1,3 @@
+from django.test import TestCase
+
+# Create your tests here.

users/views.py

@@ -0,0 +1,26 @@
+from django.conf import settings
+from django.contrib.auth import login, authenticate
+from django.http import HttpResponseRedirect
+from django.shortcuts import render
+
+from .forms import SignUpForm
+from .ldap_funcs import create_user
+
+
+def signup(request):
+    if request.method == 'POST':
+        form = SignUpForm(request.POST)
+        if form.is_valid():
+            username = form.cleaned_data.get('username')
+            raw_password = form.cleaned_data.get('password1')
+            first_name = form.cleaned_data.get('first_name')
+            last_name = form.cleaned_data.get('last_name')
+            email = form.cleaned_data.get('email')
+            create_user(username, raw_password, first_name, last_name, email)
+            form.save()
+            user = authenticate(username=username, password=raw_password)
+            login(request, user, backend='django_auth_ldap.backend.LDAPBackend')
+            return HttpResponseRedirect(settings.LOGIN_REDIRECT_URL)
+    else:
+        form = SignUpForm()
+    return render(request, 'users/signup.html', {'form': form})