| 1 |
e2c0dff2
|
Serghei MIHAI
|
import os
|
| 2 |
|
|
import json
|
| 3 |
09d398ce
|
Serghei MIHAI
|
|
| 4 |
e2c0dff2
|
Serghei MIHAI
|
from django.conf import global_settings
|
| 5 |
09d398ce
|
Serghei MIHAI
|
|
| 6 |
|
|
BASE_DIR = os.path.dirname(os.path.dirname(__file__))
|
| 7 |
|
|
|
| 8 |
|
|
|
| 9 |
|
|
# Quick-start development settings - unsuitable for production
|
| 10 |
|
|
# See https://docs.djangoproject.com/en/1.7/howto/deployment/checklist/
|
| 11 |
|
|
|
| 12 |
|
|
# SECURITY WARNING: keep the secret key used in production secret!
|
| 13 |
|
|
SECRET_KEY = 'jg@eap06#(68*jqv)j=q5we33*-5mqiku_r231++$2cdl43_bl'
|
| 14 |
|
|
|
| 15 |
|
|
# SECURITY WARNING: don't run with debug turned on in production!
|
| 16 |
|
|
DEBUG = True
|
| 17 |
|
|
|
| 18 |
|
|
TEMPLATE_DEBUG = True
|
| 19 |
|
|
|
| 20 |
|
|
ALLOWED_HOSTS = []
|
| 21 |
|
|
|
| 22 |
|
|
|
| 23 |
|
|
# Application definition
|
| 24 |
|
|
|
| 25 |
|
|
INSTALLED_APPS = (
|
| 26 |
|
|
'django.contrib.admin',
|
| 27 |
|
|
'django.contrib.auth',
|
| 28 |
|
|
'django.contrib.contenttypes',
|
| 29 |
|
|
'django.contrib.sessions',
|
| 30 |
|
|
'django.contrib.messages',
|
| 31 |
|
|
'django.contrib.staticfiles',
|
| 32 |
0bd60e19
|
Serghei MIHAI
|
'mellon',
|
| 33 |
|
|
'gadjo',
|
| 34 |
|
|
'uauth',
|
| 35 |
|
|
'uauth.organization',
|
| 36 |
09d398ce
|
Serghei MIHAI
|
)
|
| 37 |
|
|
|
| 38 |
e2c0dff2
|
Serghei MIHAI
|
METADATA_URIS = (
|
| 39 |
|
|
'https://federation.renater.fr/test/renater-test-metadata.xml',
|
| 40 |
|
|
# 'https://federation.renater.fr/renater/idps-renater-metadata.xml',
|
| 41 |
|
|
# 'https://federation.renater.fr/edugain/idps-edugain-metadata.xml',
|
| 42 |
|
|
)
|
| 43 |
|
|
|
| 44 |
|
|
METADATAS_DIR = os.path.join(BASE_DIR, 'metadatas')
|
| 45 |
|
|
|
| 46 |
09d398ce
|
Serghei MIHAI
|
MIDDLEWARE_CLASSES = (
|
| 47 |
|
|
'django.contrib.sessions.middleware.SessionMiddleware',
|
| 48 |
|
|
'django.middleware.common.CommonMiddleware',
|
| 49 |
|
|
'django.middleware.csrf.CsrfViewMiddleware',
|
| 50 |
|
|
'django.contrib.auth.middleware.AuthenticationMiddleware',
|
| 51 |
|
|
'django.contrib.auth.middleware.SessionAuthenticationMiddleware',
|
| 52 |
|
|
'django.contrib.messages.middleware.MessageMiddleware',
|
| 53 |
|
|
'django.middleware.clickjacking.XFrameOptionsMiddleware',
|
| 54 |
|
|
)
|
| 55 |
|
|
|
| 56 |
|
|
ROOT_URLCONF = 'uauth.urls'
|
| 57 |
|
|
|
| 58 |
|
|
WSGI_APPLICATION = 'uauth.wsgi.application'
|
| 59 |
|
|
|
| 60 |
|
|
DATABASES = {
|
| 61 |
|
|
'default': {
|
| 62 |
|
|
'ENGINE': 'django.db.backends.sqlite3',
|
| 63 |
|
|
'NAME': os.path.join(BASE_DIR, 'db.sqlite3'),
|
| 64 |
|
|
}
|
| 65 |
|
|
}
|
| 66 |
|
|
|
| 67 |
|
|
# Internationalization
|
| 68 |
|
|
# https://docs.djangoproject.com/en/1.7/topics/i18n/
|
| 69 |
|
|
|
| 70 |
|
|
LANGUAGE_CODE = 'en-us'
|
| 71 |
|
|
|
| 72 |
|
|
TIME_ZONE = 'UTC'
|
| 73 |
|
|
|
| 74 |
|
|
USE_I18N = True
|
| 75 |
|
|
|
| 76 |
|
|
USE_L10N = True
|
| 77 |
|
|
|
| 78 |
|
|
USE_TZ = True
|
| 79 |
|
|
|
| 80 |
|
|
|
| 81 |
|
|
# Static files (CSS, JavaScript, Images)
|
| 82 |
|
|
# https://docs.djangoproject.com/en/1.7/howto/static-files/
|
| 83 |
|
|
|
| 84 |
|
|
STATIC_URL = '/static/'
|
| 85 |
|
|
|
| 86 |
b697aa88
|
Serghei MIHAI
|
STATICFILES_FINDERS = global_settings.STATICFILES_FINDERS + \
|
| 87 |
|
|
('gadjo.finders.XStaticFinder',)
|
| 88 |
|
|
|
| 89 |
09d398ce
|
Serghei MIHAI
|
LDAP_CONF = {
|
| 90 |
|
|
'url': 'ldap://localhost',
|
| 91 |
|
|
'bind_dn': 'cn=admin,dc=entrouvert,dc=org',
|
| 92 |
|
|
'options': {},
|
| 93 |
|
|
'bind_passwd': 'entrouvert42',
|
| 94 |
|
|
'dn': 'ou=radius,dc=entrouvert,dc=org',
|
| 95 |
|
|
}
|
| 96 |
43725c91
|
Serghei MIHAI
|
|
| 97 |
dadd1166
|
Serghei MIHAI
|
AUTHENTICATION_BACKENDS = global_settings.AUTHENTICATION_BACKENDS + (
|
| 98 |
|
|
'mellon.backends.SAMLBackend',
|
| 99 |
|
|
)
|
| 100 |
|
|
|
| 101 |
|
|
MELLON_ATTRIBUTE_MAPPING = {
|
| 102 |
|
|
'email': '{attributes[mail][0]',
|
| 103 |
|
|
'first_name': '{attributes[gn][0]}',
|
| 104 |
|
|
'last_name': '{attributes[sn][0]}',
|
| 105 |
|
|
}
|
| 106 |
|
|
|
| 107 |
|
|
# mellon authentication params
|
| 108 |
|
|
MELLON_ADAPTER = ('uauth.adapters.UAuthAdapter', )
|
| 109 |
|
|
|
| 110 |
318ca21b
|
Serghei MIHAI
|
MELLON_IDENTITY_PROVIDERS = []
|
| 111 |
dadd1166
|
Serghei MIHAI
|
|
| 112 |
|
|
MELLON_PRIVATE_KEY = """-----BEGIN PRIVATE KEY-----
|
| 113 |
|
|
MIIEwAIBADANBgkqhkiG9w0BAQEFAASCBKowggSmAgEAAoIBAQDH8DE3TT4xUbe4
|
| 114 |
|
|
/lTUNYM6cONGmESMGdLQGMPI3zO8ObslD7Nc2QtvBVz3hldZM/NZ9SAtvhoGwT3u
|
| 115 |
|
|
bXFWWUFkxC1F0qaz3Lc3XY5u2r4f2+aWGjdUE504fNmyZpAsPBSZcAEnMhweCGi0
|
| 116 |
|
|
d+RveaG8VRlHQDHzBcp/8fj4Nhfferv46i7GHUmoEJSZCbjMbCCgg1AOFqBRWQ8P
|
| 117 |
|
|
sQlwY9nGQq0RaQOpDvoBjZOkGBzcg1XqfgvZB3AwWMXaBoupxoCBEwbLllWB6Wb2
|
| 118 |
|
|
FT4mng0aOFPaKJabynCvdRpD5Fc9QR9Fhmzm+O+1eJbTj8RC8wJ/g8jdRRMLJATN
|
| 119 |
|
|
zAJzPnS5AgMBAAECggEBAJWXZptj1aZ856Mn1zw3FYpCMCn/fzn7kDlWbhX6ufCY
|
| 120 |
|
|
mSbvillroxxbvOUNxIjfT7H8ryjKVRq8tqOPiv76JO1Jwj29kDB+cS6hdxIF475e
|
| 121 |
|
|
fzXLQ55KVpWPBCpwhmoyQY9Tt+klmtf1nrF4CphFPvd0DEe9BiI4MPxthMPhZRc0
|
| 122 |
|
|
oKgOY5zcSvgbX042sLT2urlnOC2BU9ylUOt2GVIWhmj5mI6L+WGEmRPz4xtZyE32
|
| 123 |
|
|
hesvLPheFnWpm04xASlJ7Xq8DE2NzSkGsEEekzSgq+k0ntMMxgzYbA55EvioduIG
|
| 124 |
|
|
NrSAMSzThWBLEmXLu7fnPIq6A60DXcX9gmiG9leoVWkCgYEA4n89AAn3UMn0t1Pd
|
| 125 |
|
|
qwDJIhGwPFLak09YSLlokdZWoL6Bg25z4suewc+IC/BfEGWP9c2CeIdLcDQpYtLh
|
| 126 |
|
|
NmDyMUcv/+VLcwfUisvJpMVXOHZT9nB3A7L+qZpf6y1BzHYVNuFOgkJB1rX6d7w/
|
| 127 |
|
|
kfgEgWRAO4yZeZM6qqH9MKJ7FMMCgYEA4ftTeAozZq5mFlYhJd2OwonCtOVRPYqI
|
| 128 |
|
|
ckxDnj7iu5X955eCt/r9E01HqZmSdTT/EiAcCbseBcrA6y3B+8FqTQ0AEghU/72h
|
| 129 |
|
|
PhFjL3E7d5rgyIFIm5lPoZTXh0Uv55o8KWiOuGx+SHpA+JZ+LzQvQE4na30tkEsh
|
| 130 |
|
|
dB5fZtjcyNMCgYEAw5qK/budoGGpO6Hr78Bv80I/ZvlO1qVRYwzsJ/ZpPc0IYI9E
|
| 131 |
|
|
+XpMEqi9n0Hpd2mel/LxWFHPbok9rKDd6m5y+ue1plNJg4Ahp/Qyol/i4VofTNb3
|
| 132 |
|
|
kXRFxgcSCzI8fu0DiS+u84NxBJKISluCsvb0PSJs7oCQEpR5t97Jn/TSQq0CgYEA
|
| 133 |
|
|
0PYum8yK9UME4VipdDMohFkQs2dtNQP54f8Fc7ngvOcYjuN6G5g6FnQadQit9jWY
|
| 134 |
|
|
O3F3m8PsIhz3QUDhpGOYYUFJNGOB/a2jARrg5YjGHXYYry9lLYSZrudMWSgwAPCM
|
| 135 |
|
|
+xlVB9JC/9AUbgnzCsEthEAAkZOB43ClsZM4Uojrt8MCgYEAkdSR7m9FjY7KmmpC
|
| 136 |
|
|
XqSvgTl1Qjn4OmTnR1ASfrnRhQKPzl69ftQ21CP2H9IMPEEJ9CYwehxpCt/61lB2
|
| 137 |
|
|
nJnouXneXGasbXKD6tGUgUn3nLXSgZUFJsqSGQUxwNDBkkoAZyZsHZJgQwLJMUYK
|
| 138 |
|
|
FWK4A31CSSMhmyqTlqePGzOOat0=
|
| 139 |
|
|
-----END PRIVATE KEY-----"""
|
| 140 |
|
|
|
| 141 |
|
|
MELLON_PUBLIC_KEYS = ["""-----BEGIN CERTIFICATE-----
|
| 142 |
|
|
MIID7TCCAtWgAwIBAgIJAIMCYinZvykRMA0GCSqGSIb3DQEBCwUAMIGMMQswCQYD
|
| 143 |
|
|
VQQGEwJGUjETMBEGA1UECAwKU29tZS1TdGF0ZTEOMAwGA1UEBwwFUGFyaXMxEzAR
|
| 144 |
|
|
BgNVBAoMCkVudHJvdXZlcnQxHTAbBgNVBAMMFCouZGV2LmVudHJvdXZlcnQub3Jn
|
| 145 |
|
|
MSQwIgYJKoZIhvcNAQkBFhVzbWloYWlAZW50cm91dmVydC5jb20wHhcNMTUwMzE3
|
| 146 |
|
|
MTczMTE1WhcNMTYwMzE2MTczMTE1WjCBjDELMAkGA1UEBhMCRlIxEzARBgNVBAgM
|
| 147 |
|
|
ClNvbWUtU3RhdGUxDjAMBgNVBAcMBVBhcmlzMRMwEQYDVQQKDApFbnRyb3V2ZXJ0
|
| 148 |
|
|
MR0wGwYDVQQDDBQqLmRldi5lbnRyb3V2ZXJ0Lm9yZzEkMCIGCSqGSIb3DQEJARYV
|
| 149 |
|
|
c21paGFpQGVudHJvdXZlcnQuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
|
| 150 |
|
|
CgKCAQEAx/AxN00+MVG3uP5U1DWDOnDjRphEjBnS0BjDyN8zvDm7JQ+zXNkLbwVc
|
| 151 |
|
|
94ZXWTPzWfUgLb4aBsE97m1xVllBZMQtRdKms9y3N12Obtq+H9vmlho3VBOdOHzZ
|
| 152 |
|
|
smaQLDwUmXABJzIcHghotHfkb3mhvFUZR0Ax8wXKf/H4+DYX33q7+Oouxh1JqBCU
|
| 153 |
|
|
mQm4zGwgoINQDhagUVkPD7EJcGPZxkKtEWkDqQ76AY2TpBgc3INV6n4L2QdwMFjF
|
| 154 |
|
|
2gaLqcaAgRMGy5ZVgelm9hU+Jp4NGjhT2iiWm8pwr3UaQ+RXPUEfRYZs5vjvtXiW
|
| 155 |
|
|
04/EQvMCf4PI3UUTCyQEzcwCcz50uQIDAQABo1AwTjAdBgNVHQ4EFgQUUw8dVvEe
|
| 156 |
|
|
Nw6emo06xeqPIdxwO34wHwYDVR0jBBgwFoAUUw8dVvEeNw6emo06xeqPIdxwO34w
|
| 157 |
|
|
DAYDVR0TBAUwAwEB/zANBgkqhkiG9w0BAQsFAAOCAQEAM4ZyCY0WIkkzozvO+Rw4
|
| 158 |
|
|
Q1bZmnz+F6+rZith852K57uRJU0GYX8Mz+LzQN+hqtWZipb6cwyX4I0TwVDkTHfA
|
| 159 |
|
|
blZlhiEterLLMYZlfVkgUpR56Z8SwE30yzDLAGvsBoY/Qy6sUFXGJMWNquWND2ii
|
| 160 |
|
|
7hYPP31xfv3omkQkkg4mxGWEpeo5oIwnM/tgPmlp3y8vACwkPXXzFkAUevjoqNXS
|
| 161 |
|
|
k5zCDjew+ZHe4d3Tzw2LUyRiELjOzdrjTtTCUQ3BZZSlLoXHdYdO+QZUUutaQMNa
|
| 162 |
|
|
3hWDMk5AYC2wkdbiFaYiihbz0MQrmoIc0RBl8kfdbQnC9xwoT1wgJeUOv0v2nuDv
|
| 163 |
|
|
iQ==
|
| 164 |
|
|
-----END CERTIFICATE-----"""]
|
| 165 |
|
|
|
| 166 |
|
|
|
| 167 |
43725c91
|
Serghei MIHAI
|
local_settings_file = os.environ.get('UAUTH_SETTINGS_FILE',
|
| 168 |
|
|
os.path.join(os.path.dirname(__file__), 'local_settings.py'))
|
| 169 |
|
|
if os.path.exists(local_settings_file):
|
| 170 |
|
|
execfile(local_settings_file)
|