NTLM, Samba, LDAP and SSO on Moodle

[Mintsoft]

Hi Guys,

 

I've been trying to set up SSO using Apache on the debian server, the users are authenticate using LDAP (which works), I've built and configured the auth_ntlm_winbind_module, and configured winbind.

 

Our moodle version is Moodle 1.9.4+ (Build: 20090422).

 

wbinfo -u returns a list of all the users, so that works fine.

 

I've set up a test file (ntlmTest.php) which does

echo "";
var_dump($_SERVER);
echo "";

 

and the REMOTE_USER is being set by the NTLM as:

OURDOMAIN\itrob

so that part works,

 

in the sites-enabled default file I've added

               
                  NTLMAuth on
                  AuthType NTLM
                  AuthName "Moodle NTLM Authentication"
                  NTLMAuthHelper "/usr/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp"
                  NTLMBasicAuthoritative on
                  require valid-user
               
               
                  NTLMAuth on
                  AuthType NTLM
                  AuthName "Moodle NTLM Authentication"
                  NTLMAuthHelper "/usr/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp"
                  NTLMBasicAuthoritative on
                  require valid-user
               
       

and there are no errors in the /var/log/apache2/error.log file so this appears to be working ok ( plus that test file works, so again it's fine!)

 

However! when I go to http://moodle it still presents me with a login page, I've added http://moodle to the trusted sites so IE should still send the NTLM information but I'm at a loss as to why it's just not working now!

 

Bit more info:

NTLM SSO is enabled,

the subnet is 10.133.0.0/16

and IE fast path is off.

 

Does anyone have ANY idea as to why it's not doing the SSO, I think I'm going insane here!

 

Thanks

-Rob

[Guest monkeyx]

I last tried this with moodle 1.8 on a ubuntu server.

 

I hit the same issues as you, in that the it never seemed to redirect me, yet I proved that the ntlm module was working.

 

Recently upgraded to 1.9 so was planning to try again. Will be next week before I can test this so will let you know.

 

If you make any progress on this then please let me know. You could maybe try this via firefox after setting network.automatic-ntlm-auth.trusted-uris in the browser.

[glennda]

Sorry to drag up an old thread - did either of you get it working with 1.9?

 

I know NTLM works as i'm using the same box for squid which auths fine.

 

Any ideas?