tehmaze / django-pam

A simple PAM authentication backend for Django

django-pam

A simple PAM authentication backend for Django. Add the folder dpam somewhere on your python path and add 'dpam.backends.PAMBackend' to your settings.py:

AUTHENTICATION_BACKENDS = (
    ...
    'dpam.backends.PAMBackend',
    ...
)

Now you can login via the system-login credentials. If the user is successfully authenticated but has never logged-in before, a new User object is created. By default this new User has both is_staff and is_superuser set to False. You can change this behavior by adding PAM_IS_STAFF=True and PAM_IS_SUPERUSER in your settings.py file.

If you do not want a User record to be created automatically, use PAM_CREATE_USER=False in settings.py. This is useful in situations where you want to use PAM for authentication but not for authorization.

django-pam's Issues

Unable to login using Ubuntu Users

Hi,

I installed package 'django-pam' using 'python setup.py install', the installation was successful. I added the entry in setting.py (fresh django 1.8.x installation) as below. After that I restarted django server and tried to login into http://admin url page. It was taking some time to reload but the LOGIN FAILED. Moreover, the Django superuser was unable to login into admin. I removed below entry from setting.py and the superuser was able to login. Please help me integrating this package.

setting.py:

AUTHENTICATION_BACKENDS = (
'dpam.backends.PAMBackend',
)
PAM_IS_STAFF = True
PAM_IS_SUPERUSER = True

Does this only work if Django is running as root?

Based on problems I am having, and comments like this one, it seems that this might be the case, but django doesn't typically run as root and the docs for this app don't mention requiring it to do so. If someone could provide a quick sanity-check about this I would appreciate it.

For details on what I'm seeing, see this issue I filed against python-pam, which seems to be the same pam module that runs under the hood of django-pam. Any help would be greatly appreciated!

backends.py line 12: too broad exception clause

This should be "except User.DoesNotExist", not trying to catch every type of exception which is bad practice.