python ldap search with flask-kerberos credentials
sounds like you are mixing up authentication and authorization, but with no useful information provided regarding your code or setup its hard to help.
Take a look at something like this, and use ldap as impersonation to authenticate your users using their own credentials.
Is there any way to use the authenticated user or the server keytab in a python3/flask-kerberos application to query ldap?
I am using flask-kerberos connecting to active directory and is authenticating correctly.  I need to add authorization now based on the AD group and understand ldap is typically the best practice. 
I am able to query successfully via ldap3, but I do not want to hardcode ldap bind credentials in my code.
The sasl/kerberos bind option for ldap3 looks like it needs an OS level credential-cache, but I would like to do this completely within the application.
Looking for any suggestions/alternatives to do this.