Monday, October 6, 2014

LDAPing......

We are setting up LDAP authentication for one of our school district moodle instances.  Moodle with pull from this server for accounts to create/authenticate in moodle.  There is a concept of a *group within the LDAP server, which will contain the users that will be created in the moodle mdl_user table.  The users are provided by the LDAP server.

I am using moodle v 2.6.

 Not sure if the data in the "moodle users" created Contexts entry below is defined in a table or a csv file?  There is probably a file created by the LDAP DD, written to the "moodle users" *group, comma separated values that moodle reads and creates accounts / authenticates logins.

With information from our tech. customer at the school district, I filled out the moodle admin configuration.























I provided the Host URL, Distinguished name, User type  and Contexts.  I am still waiting on the password from my customer.  Once the password is supplied, we should have all we need to make the connection with the *data - hosted by the LDAP server.

In the Site Admin - turn on Robust error reporting and send to the log file.  

I also turned on debug reporting at the developer level while we are trying to make the connection.  I need to figure out how to test it better.

I think once we are set up / configured - we need to know the name of someone in the Moodle_Users group, defined in the Bind setting Distinguished user field.  That is when the authentication happens, when the user logs into the moodle site.....duh?  When someone logs in, the authentication request is send to the LDAP server to verify that they are in the said group.  Then one of three things happens:

1 - they authenticate and log in

2 - they authenticate, account is created, and then logged in

3 - their account credentials are not part of the group and they do not authenticate.


No comments:

Post a Comment