Tuesday morining moodle reflections

Two LDAP settings in my moodle that I did not understand, until it was implemented and used by customer.

I did not understand that this setting would automatically give everyone in its group course creator rights, at the system level.  Members of this group can create courses anywhere.  Bold in its intent, but I disabled it and removed its spawn :).  Spawn = 58 accounts in LDAP group that were given site wide teacher permissions.

I disabled this setting by removing the string in the Creators field.

 Moodle setting

The second misinterpretation by yours truly was in the Bind settings.  I thought that password changes to the LDAP would trickle down to the moodle.  Wrong.  Changed the LDAP Bind settings to yes.

Moodle setting

Moral of the story? Two good outcomes 

1. Now I have account being created without site wide privileges
2. Password changes to the LDAP push into the moodle.