Implementing Kerberos and LDAP in Django

First, if you’re looking to use this as an SSO solution, simply authenticating the app using LDAP isn’t going to do it.

If you’re going to allow the browser to have their domain credentials automatically recognized by Django, the server needs to be a member of the domain, the web server needs to be configured to support SPNEGO and provide the REMOTE_USER, and Django needs to be configured for the RemoteUserBackend - and then use LDAP to request whatever additional attributes may be needed (such as group membership).

You won’t find much in the way of Django-specific information about this because very little of it involves Django itself.

There have been a couple of other discussions here about this topic.

See: