debian: cancel all mellon specific settings

debian/debian_config.py

@@ -2,6 +2,9 @@
 
 import os
 
+from django.conf import global_settings
+
+
 PROJECT_NAME = 'zoo'
 
 #
@@ -9,7 +12,10 @@ PROJECT_NAME = 'zoo'
 #
 exec(open('/usr/lib/hobo/debian_config_common.py').read())
 
-# get DRF auth configuration back (zoo is not a mellon/publik system)
+
+# Cancel mellon specific settings
+
+# DRF authentication does not use mellon (NameID= in publik signature)
 REST_FRAMEWORK = {
     'DEFAULT_AUTHENTICATION_CLASSES': (
         'rest_framework.authentication.BasicAuthentication',
@@ -17,6 +23,12 @@ REST_FRAMEWORK = {
     ),
     'DEFAULT_PERMISSION_CLASSES': ('rest_framework.permissions.IsAdminUser',),
 }
+# no mellon/SAML sessionNotOnOrAfter session expiration
+SESSION_ENGINE = global_settings.SESSION_ENGINE
+# remove mellon middleware
+if 'MIDDLEWARE_CLASSES' in globals():
+    MIDDLEWARE_CLASSES = tuple(m for m in MIDDLEWARE_CLASSES if not m.startswith('mellon.'))
+
 
 #
 # local settings