Quick Moodle question

[kennysarmy]

Can an externally hosted Moodle authenticate against an internally (school servers) hosted active directory (LDAP) or access database?

 

thanks.

[danIT]

There isnt any reason why that shouldnt be possible, essentially you just need to point Moodle to your internal database and make your database (LDAP or Otherwise) externally accessible.

[FN-GM]

You will probably have to point some ports directly to your DC, i would not recommend this. The other option could be to to use a VPN or host internally.

[budgester]

It's possible but there are all sorts of security issues, so be very carefull how you do this, you don't want any Alice ob Bob with access to your LDAP/AD server.

 

Another issue you to be aware of is the traffic implications, slow internet day, could mean a really slow moodle authentication.

 

A no internet day will definately mean no vle.

 

And of course if you teachers start uploading large powerpoints (i've seen them up to 100mb) and you have 30 kids all downloading that, lets just say a local install with a LAN could be a bit quicker than a 20mb internet connection.

[nadeem]

Can an externally hosted Moodle authenticate against an internally (school servers) hosted active directory (LDAP) or access database?

 

thanks.

 

 

Yes, we do do that (ULCC hosted moodle) authenicates against our AD

[kctesting]

Yes, we do do that (ULCC hosted moodle) authenicates against our AD

 

How did u do it? just enabled ldap through your firewall? ldaps? VPN?

[nadeem]

Authenticate via LDAP, there is a pinhole in our firewall for the ULCC IP to let it talk to one of our AD servers. It was fairly painless to setup.

[penfold_99]

If it going out over the internet you need to use LDAPS on port 636 (this also allows user passwords to be changed). You would need to restrict the port to only accept connection from a defined IP address.

[Geoff]

The other option is to do it over a VPN between the moodle server and your LAN.

[glennda]

The other option is to do it over a VPN between the moodle server and your LAN.

 

Thats how i have done it with other software.

[CyberNerd]

I'd go for the VPN, its a bit more flexible for when you want to add other services.

[Geoff]

Plus you don't have to worry about people brute forcing your LDAP.

[kctesting]

Authenticate via LDAP, there is a pinhole in our firewall for the ULCC IP to let it talk to one of our AD servers. It was fairly painless to setup.

 

Seems to be an easy option but...not sure if very secure, in the end I've build an RODC and added ldaps for that Server, will see if there are any issues.