NTLM, Samba, LDAP and SSO on Moodle

[Mintsoft]

Hi Guys,

I've been trying to set up SSO using Apache on the debian server, the users are authenticate using LDAP (which works), I've built and configured the auth_ntlm_winbind_module, and configured winbind.

Our moodle version is Moodle 1.9.4+ (Build: 20090422).

wbinfo -u returns a list of all the users, so that works fine.

I've set up a test file (ntlmTest.php) which does

echo "<pre>";
var_dump($_SERVER);
echo "</pre>";

and the REMOTE_USER is being set by the NTLM as:
OURDOMAIN\itrob
so that part works,

in the sites-enabled default file I've added

<Directory "/usr/moodle/www/auth/ldap/">
                <Files ntlmsso_magic.php>
                   NTLMAuth on
                   AuthType NTLM
                   AuthName "Moodle NTLM Authentication"
                   NTLMAuthHelper "/usr/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp"
                   NTLMBasicAuthoritative on
                   require valid-user
                </Files>
                <Files ntlmTest.php>
                   NTLMAuth on
                   AuthType NTLM
                   AuthName "Moodle NTLM Authentication"
                   NTLMAuthHelper "/usr/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp"
                   NTLMBasicAuthoritative on
                   require valid-user
                </Files>
        </Directory>

and there are no errors in the /var/log/apache2/error.log file so this appears to be working ok ( plus that test file works, so again it's fine!)

However! when I go to http://moodle it still presents me with a login page, I've added http://moodle to the trusted sites so IE should still send the NTLM information but I'm at a loss as to why it's just not working now!

Bit more info:
NTLM SSO is enabled,
the subnet is 10.133.0.0/16
and IE fast path is off.

Does anyone have ANY idea as to why it's not doing the SSO, I think I'm going insane here!

Thanks
-Rob

[monkeyx]

I last tried this with moodle 1.8 on a ubuntu server.

I hit the same issues as you, in that the it never seemed to redirect me, yet I proved that the ntlm module was working.

Recently upgraded to 1.9 so was planning to try again. Will be next week before I can test this so will let you know.

If you make any progress on this then please let me know. You could maybe try this via firefox after setting network.automatic-ntlm-auth.trusted-uris in the browser.

[glennda]

Sorry to drag up an old thread - did either of you get it working with 1.9?

I know NTLM works as i'm using the same box for squid which auths fine.

Any ideas?