add ldap authentication plugin to pretix

uwsgi-python/tasks/apps/pretix.yml

@@ -64,6 +64,7 @@
     chdir: "{{app_path}}"
   with_items:
     - rebuild
+    - compress
   notify:
     - "restart uwsgi instance {{app.instance}}"
 

uwsgi-python/templates/apps/pretix.j2

@@ -12,6 +12,10 @@ long_sessions={{ pretix_long_sessions }}
 ecb_rates={{ pretix_ecb_rates }}
 audit_comments={{ pretix_audit_comments }}
 
+{% if pretix_ldap %}
+auth_backend=pretix_ldap.LDAPAuthBackend
+{% endif %}
+
 [database]
 backend=postgresql
 name={{ app_db_name }}
@@ -66,6 +70,14 @@ dsn={{ pretix_sentry_dsn }}
 [tools]
 pdftk={{ pretix_tools_pdftk }}
 {% endif %}
+{% if pretix_ldap %}
+[ldap]
+bind_url={{ pretix_ldap_bind_url }}
+bind_dn={{ pretix_ldap_bind_dn }}
+bind_password={{ pretix_ldap_password }}
+search_base={{ pretix_ldap_search_base }}
+search_filter={{ pretix_ldap_search_filter }}
+{% endif %}
 
 [entropy]
 order_code={{ pretix_entropy_order_code }}

uwsgi-python/vars/pretix.yml

@@ -90,3 +90,11 @@ pretix_tools_pdftk: '/usr/bin/pdftk'
 pretix_entropy_order_code: 5  # <16
 pretix_entropy_ticket_secret: 32  # <64
 pretix_entropy_voucher_code: 16  # <255
+
+pretix_ldap: false # do not forget to enable it via plugins
+pretix_ldap_bind_url: "ldaps://ad.example.com"
+pretix_ldap_bind_dn: "EXAMPLE\user"
+pretix_ldap_password: "secret"
+pretix_ldap_search_base: "cn=User,dc=example,dc=com"
+pretix_ldap_search_filter: "(&(objectClass=inetOrgPerson)(mail={email}))"
+