kennysarmy Posted January 20, 2009 Posted January 20, 2009 Can an externally hosted Moodle authenticate against an internally (school servers) hosted active directory (LDAP) or access database? thanks.
danIT Posted January 20, 2009 Posted January 20, 2009 There isnt any reason why that shouldnt be possible, essentially you just need to point Moodle to your internal database and make your database (LDAP or Otherwise) externally accessible.
FN-GM Posted January 20, 2009 Posted January 20, 2009 You will probably have to point some ports directly to your DC, i would not recommend this. The other option could be to to use a VPN or host internally.
budgester Posted January 20, 2009 Posted January 20, 2009 It's possible but there are all sorts of security issues, so be very carefull how you do this, you don't want any Alice ob Bob with access to your LDAP/AD server. Another issue you to be aware of is the traffic implications, slow internet day, could mean a really slow moodle authentication. A no internet day will definately mean no vle. And of course if you teachers start uploading large powerpoints (i've seen them up to 100mb) and you have 30 kids all downloading that, lets just say a local install with a LAN could be a bit quicker than a 20mb internet connection.
nadeem Posted January 20, 2009 Posted January 20, 2009 Can an externally hosted Moodle authenticate against an internally (school servers) hosted active directory (LDAP) or access database? thanks. Yes, we do do that (ULCC hosted moodle) authenicates against our AD
kctesting Posted July 3, 2012 Posted July 3, 2012 Yes, we do do that (ULCC hosted moodle) authenicates against our AD How did u do it? just enabled ldap through your firewall? ldaps? VPN?
nadeem Posted July 4, 2012 Posted July 4, 2012 Authenticate via LDAP, there is a pinhole in our firewall for the ULCC IP to let it talk to one of our AD servers. It was fairly painless to setup.
penfold_99 Posted July 4, 2012 Posted July 4, 2012 If it going out over the internet you need to use LDAPS on port 636 (this also allows user passwords to be changed). You would need to restrict the port to only accept connection from a defined IP address.
Geoff Posted July 4, 2012 Posted July 4, 2012 The other option is to do it over a VPN between the moodle server and your LAN.
glennda Posted July 4, 2012 Posted July 4, 2012 The other option is to do it over a VPN between the moodle server and your LAN. Thats how i have done it with other software.
CyberNerd Posted July 4, 2012 Posted July 4, 2012 I'd go for the VPN, its a bit more flexible for when you want to add other services.
Geoff Posted July 4, 2012 Posted July 4, 2012 Plus you don't have to worry about people brute forcing your LDAP.
kctesting Posted July 6, 2012 Posted July 6, 2012 Authenticate via LDAP, there is a pinhole in our firewall for the ULCC IP to let it talk to one of our AD servers. It was fairly painless to setup. Seems to be an easy option but...not sure if very secure, in the end I've build an RODC and added ldaps for that Server, will see if there are any issues.
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now