[Moodle] LDAP Script Questions

[FN-GM]

Hi,

sorry about all the questions guys!

I have had a look on Moodle docs but cant find anyhting. I just have one or two questions.

1. Can the LDAP script pull the user details from AD and make acconts on moodle?
2. Once it has synced will moodle behave the same way asif you haven't run the script? Will it go to active directory each time to check the password each time. If we change a password will it allow the user to log into moodle right away with this password? Or does the script have to be run again?
3. What script file do you use? I have found a few in the moodle install. What needs changing in the file?

Thanks

[rh91uk]

I would be interested to know this as well as we are moving to Moodle. Is the script single sign on or would the user have to sign in with their AD credentials again?

Cheers, rich

[FN-GM]

We currently use LDAP and they sign in with AD credentials. When they first login the account is created. I would like the script to make all the accounts in bulk so i can assign users to user groups.

You can setup moodle so when the user opens the browser it automatically signs them into moodle.

[imullings]

On our windows server I run this in a command line-
php -d memory_limit=256M D:\WWWroot\auth\ldap\auth_ldap_sync_users.php > c:\log.txt
You will need to change the paths to fit your server setup.
It sets up new users and deletes old ones depending on your Moodle LDAP settings.

Ian Mullings
Devizes School IT Support

[FN-GM]

Thanks

Once it has synced will moodle behave the same way asif you haven't run the script? Will it go to active directory each time to check the password each time. If we change a password will it allow the user to log into moodle right away with this password? Or does the script have to be run again?

And do i need to change anything in the script itself?

Thanks

[imullings]

All it does is pull the feilds setup in Moodle from LDAP into the Moodle database.
Passwords are checked every time you logon. If you change your windows password it will work stright away.
I run it when a lot of new users are created or if I update lots of users descriptions.
So yes it behave the same way as if you haven't run the script.

Ian Mullings
Devizes School IT Support

[FN-GM]

Thanks, just run it once works a treat. I amm going to set it to run every 10 mins with the cron script. I didn't think it was that easy.

[penfold_99]

1. Can the LDAP script pull the user details from AD and make acconts on moodle?

A moodle account can be created during the login/ ldap authentication process or pre built via the cron job.

2. Once it has synced will moodle behave the same way asif you haven't run the script? Will it go to active directory each time to check the password each time. If we change a password will it allow the user to log into moodle right away with this password? Or does the script have to be run again?

Yes.

3. What script file do you use? I have found a few in the moodle install. What needs changing in the file?

You need to map AD fields to fields within moodle so when an account is created it will have the right details.

[FN-GM]

On our windows server I run this in a command line-
php -d memory_limit=256M D:\WWWroot\auth\ldap\auth_ldap_sync_users.php > c:\log.txt
You will need to change the paths to fit your server setup.
It sets up new users and deletes old ones depending on your Moodle LDAP settings.

Ian Mullings
Devizes School IT Support

Hi,

I am using this command but it doesn't seem to get rid of old users.

Do you have any ideas please?

Thanks

[Geoff]

The removal of old users depends on the setting of 'Removed ext user' in the 'Cron synchronization script' section of the LDAP configuration on the Moodle Server. To do what you want you must set it to 'full delete internal' and ensure you're running the cron.php script regularly

[FN-GM]

what is the name of the script please?

I am looking in cron.php and auth_ldap_sync_users.php and cant find it. Is it just me being blind?

[Geoff]

Cron - MoodleDocs

[FN-GM]

Sorry geoff having a blonde moment, i was looking in the script itself.