RonW Posted October 27, 2015 Posted October 27, 2015 I setup moodle on IIS recently. When I pull up the page I am presented with the guest page and I have to log in. I can use my domain credentials and get in just fine but to my understanding moodle uses NTLM and you dont have to login. If this option is enabled it should work am I correct?
jamesfed Posted October 27, 2015 Posted October 27, 2015 There are a few extra steps you have to do if you want to make it SSO, https://docs.moodle.org/29/en/NTLM_authentication#How_to_Turn_Integrated_Authentication_on is what you are after Note that the settings change in IIS has to only apply to the auth/ldap/ntlmsso_magic.php file.
RonW Posted October 27, 2015 Author Posted October 27, 2015 There are a few extra steps you have to do if you want to make it SSO, https://docs.moodle.org/29/en/NTLM_authentication#How_to_Turn_Integrated_Authentication_on is what you are after Note that the settings change in IIS has to only apply to the auth/ldap/ntlmsso_magic.php file. Here is my dilemma. I have followed that guide and even used this one Moodle MS-AD LDAP Authentication and NTLM SSO | wicher.co.uk but for some reason I am asked to login. --> http://i.imgur.com/rPKsvAp.jpg so I am not sure what is wrong. Ive switched the IIS authentication around so that it encompasses the entire moodle folder http://i.imgur.com/GKhUjum.jpg to just that single file and I get the same result. I've tried the network settings as 10.0.0.0/255.0.0.0 and 10.1.1.1/255.255.255.255
jamesfed Posted October 27, 2015 Posted October 27, 2015 Phew that guide looks like a little overkill! No matter though Think you could post screen shots of your config? It certinly needs to be only the auth/ldap/ntlmsso_magic.php file - it can't be the whole site or the folder that ntlmsso_magic.php is in it does need to be just that file.
RonW Posted October 27, 2015 Author Posted October 27, 2015 Phew that guide looks like a little overkill! No matter though Think you could post screen shots of your config? It certinly needs to be only the auth/ldap/ntlmsso_magic.php file - it can't be the whole site or the folder that ntlmsso_magic.php is in it does need to be just that file. Large screenshot http://i.imgur.com/6DOc3p8.png
jamesfed Posted October 27, 2015 Posted October 27, 2015 Give 10.0.0.0/8 a go as your network range (instead of 10.0.0.0/255.0.0.0)
RonW Posted October 27, 2015 Author Posted October 27, 2015 Give 10.0.0.0/8 a go as your network range (instead of 10.0.0.0/255.0.0.0) Same result
jamesfed Posted October 27, 2015 Posted October 27, 2015 Oh one more thing; right now you have 10.2.2.40 as your Host URL setting - could you change that to ldap://10.2.2.40 while keeping 10.0.0.0/8 as the network range
RonW Posted October 27, 2015 Author Posted October 27, 2015 (edited) Oh one more thing; right now you have 10.2.2.40 as your Host URL setting - could you change that to ldap://10.2.2.40 while keeping 10.0.0.0/8 as the network range Same thing, sorta.. I see a log in at the top but when I click log in, it doesn't ask me for my login details. so it's not auto logging me in but its one step further than I had previously. Any way to get it to auto log in? Edited October 27, 2015 by RonW
jamesfed Posted October 27, 2015 Posted October 27, 2015 Thats the expected response for the feature In my case I've got the users IE/Chrome homepage set to http://moodle.schoolname.org/my which takes them to their 'My Home' page on Moodle which also logs them in at the same time.
RonW Posted October 27, 2015 Author Posted October 27, 2015 Thats the expected response for the feature In my case I've got the users IE/Chrome homepage set to http://moodle.schoolname.org/my which takes them to their 'My Home' page on Moodle which also logs them in at the same time. Ahh ok so it's normal. Their start page is Sharepoint actually so I cant change it But as long as that is the expected response then I will consider this working. My issue was network and the ldap connector
jamesfed Posted October 27, 2015 Posted October 27, 2015 Good old SharePoint Have the same for our staff (students go direct to Moodle) - the staff link on SharePoint has the /my bit at the end so its pretty much seamless when they are inside the network.
RonW Posted October 27, 2015 Author Posted October 27, 2015 Good old SharePoint Have the same for our staff (students go direct to Moodle) - the staff link on SharePoint has the /my bit at the end so its pretty much seamless when they are inside the network. Good Point.
RonW Posted October 27, 2015 Author Posted October 27, 2015 Any chance they can log in without being taken to their profile after logged in?
jamesfed Posted October 27, 2015 Posted October 27, 2015 Can't quite recall what I did to stop that one; by chance does that first page have any red boxes prompting for details?
RonW Posted October 27, 2015 Author Posted October 27, 2015 Can't quite recall what I did to stop that one; by chance does that first page have any red boxes prompting for details? When you first log in you are asked to enter your first name, surname and email address. Those are the only three things that have red asterisks next to them
jamesfed Posted October 27, 2015 Posted October 27, 2015 Are those fields pre populated? If not head to Site administration > Plugins > Authentication > LDAP server and under Data mapping enter the corresponding fields from AD in the boxes provided (e.g. First name is givenName and Email address is mail) and set ‘Update local’ to either On every login or on Creation. You will need to have these fields populated in AD as well……
RonW Posted October 27, 2015 Author Posted October 27, 2015 Are those fields pre populated? If not head to Site administration > Plugins > Authentication > LDAP server and under Data mapping enter the corresponding fields from AD in the boxes provided (e.g. First name is givenName and Email address is mail) and set ‘Update local’ to either On every login or on Creation. You will need to have these fields populated in AD as well…… Ok that makes sense now.
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now