Django User Authentication against LDAP - Multiple Groups

Question

As per the documentation in django_auth_ldap at http://pythonhosted.org/django-auth-ldap/reference.html#std:setting-AUTH_LDAP_REQUIRE_GROUP

AUTH_LDAP_REQUIRE_GROUP can be used to configure the distinguished name of a group; authentication will fail for any user that does not belong to this group.

Is it possible to set multiple groups against which the user can be authenticated? instead of just one?

Answer 1

Consider managing your groups in your views, for that to work you will need to set your user attributes with AUTH_LDAP_USER_FLAGS_BY_GROUP or AUTH_LDAP_MIRROR_GROUPS.

Also, if you want to just keep it all in the AUTH_LDAP settings, you might try looking into having multiple LDAP configurations. The site will try to authenticate against each configuration until one succeeds or they all fail.