If AUTH_LDAP_DENY_GROUP is set, then only users who are not members of that group will successfully authenticate.
If AUTH_LDAP_DENY_GROUP is set, then only users who are not members of that group will successfully authenticate.

theatlantic/django-auth-ldap