Ooh, that's neat Jason! - certainly our guys can get their teeth around that code.
Authentication of django apps is going to be one of our biggest issues, and examples like this can only help. It's just the sort of thing that deserves an entry in the wiki http://code.djangoproject.com/wiki. You do mention that every entry in LDAP must also exist in the django users table as well - is that a fundamental requirement? Cheers, Tone