Add AUTH_LDAP_ALWAY_UPDATE_USER to ldap config

jensrudolf · web-flow · commit 8e8e37fcc145 · 2025-06-23T13:08:00.000+02:00
This change exposes the Django setting AUTH_LDAP_ALWAYS_UPDATE_USER as environment variable to simplify deployments with readonly databases and LDAP based authentication as no extra file is required to be mounted into the container anymore.
diff --git a/configuration/ldap/ldap_config.py b/configuration/ldap/ldap_config.py
@@ -109,3 +109,6 @@ def _import_group_type(group_type_name):
     "last_name": environ.get('AUTH_LDAP_ATTR_LASTNAME', 'sn'),
     "email": environ.get('AUTH_LDAP_ATTR_MAIL', 'mail')
 }
+
+# Update user object with the latest values from the LDAP directory every time the user logs in.
+AUTH_LDAP_ALWAYS_UPDATE_USER = environ.get('AUTH_LDAP_ALWAYS_UPDATE_USER', 'True').lower() == 'true'

Original file line number	Diff line number	Diff line change
`@@ -109,3 +109,6 @@ def _import_group_type(group_type_name):`
`109`	`109`	`"last_name": environ.get('AUTH_LDAP_ATTR_LASTNAME', 'sn'),`
`110`	`110`	`"email": environ.get('AUTH_LDAP_ATTR_MAIL', 'mail')`
`111`	`111`	`}`
	`112`	`+`
	`113`	`+# Update user object with the latest values from the LDAP directory every time the user logs in.`
	`114`	`+AUTH_LDAP_ALWAYS_UPDATE_USER = environ.get('AUTH_LDAP_ALWAYS_UPDATE_USER', 'True').lower() == 'true'`