Moodle & LDAP

[ceebster]

Guys

 

Have moodle running on Ubuntu Server - using LAMP.

 

Managed to bind AD to moodle using LDAP.

 

Running the script auth_ldap_sync_users.php to import users.

 

I get the following error, but struggling to find and answers

 

PHP Deprecated: Comments starting with '#' are deprecated in /etc/php5/cli/conf.d/mcrypt.ini on line 1 in Unknown on line 0

Configuring temp table

Creating temp table mdl_extuser

Connecting to ldap...

Did not get any users from LDAP -- error? -- exiting

Just wondered if you guys can help?

 

Thanks

 

 

Chris

[ceebster]

Right

 

Got rid of that error by examing the file listed - just removed the #

 

now just have this

 

Configuring temp table

Creating temp table mdl_extuser

Connecting to ldap...

Did not get any users from LDAP -- error? -- exiting

 

is this because Moodle can't find my users?

 

 

Thanks

 

 

Chris

[clarky2k3]

Have you installed and enabled the php extension php_ldap?

[sister_annex]

can you login with an LDAP account without running the file??

[ceebster]

Have you installed and enabled the php extension php_ldap?

 

i thought i had - i have run phpinfo.php -

 

/etc/php5/apache2/conf.d/ldap.ini - this is listed in the Additional .ini files parsed

 

is this correct?

[ceebster]

can you login with an LDAP account without running the file??

 

no - so that makes me think back to clarky2k3 post about enabling the php extension

[sister_annex]

in your php.ini you need to uncomment the php_ldap extension then restart apache (unless you have already done this)

 

to check goto http:///admin/phpinfo.php then do a find for ldap and see if a) it is listed and b) the top row states enabled

[ceebster]

Thanks sister_annex

 

Would there me a reason why that php_ldap extension is missing from my PHP.ini file.

 

There is only one of these files on my server and that is in /etc/php5/apache2/

 

Thanks

 

Chris

[ceebster]

found this in my php.ini

 

ldap

LDAP Support enabled

RCS Version $Id: ldap.c 293036 2010-01-03 09:23:27Z sebastian $

Total Links 0/unlimited

API Version 3001

Vendor Name OpenLDAP

Vendor Version 20421

SASL Support Enabled

[sister_annex]

OK LDAP is enabled by the looks of it,

 

when you try to login to your moodle site (with an LDAP account) do you get an error and if so could you paste it here??

[ceebster]

Silly question coming up - i assume it would be one of my users that have put into the specific OU that i have added to the LDAP file config

 

or

 

Any AD user?

 

 

Chris

[sister_annex]

how have you setup your moodle LDAP Auth settings??

[ceebster]

is there a config file i can post - showing you my settings? if so not sure of the location

[ceebster]

http://www.arthurterry.bham.sch.uk/downloads/ICT/images/ldap.png

[sister_annex]

Try the settings in here just replace the relevant ones

 

for MSAD use the IP address of the LDAP Server also take note of the settings further down

 

on a windows computer do a run ldp.exe (from runn command) this should help with getting the distinguished names of the locations you want

LDAP S...pdf

[ceebster]

Well i have re run the script and it has imported some users - think i need to fine tune it now

[sister_annex]

Cool, was that file of any use??

[ceebster]

Yes - thanks

 

Just changed how my servers were entered, and i noticed that where some of my users were i had put the locations back to front, -

 

Would there be a reason why i only imported 1000 users? and should i have to import the users to login as a domain admin?

 

Thanks again

[sister_annex]

Would there be a reason why i only imported 1000 users? and should i have to import the users to login as a domain admin?

 

Once the LDAP settings are set, you should be able to log in without doing the import... or atleast thats how it worked for us. What i did here was login as the accounts I wish to be admins then login using the standard moodle admin. you can then assign the administrator permission to the users that have logged in

 

Not had use to run the import as users get created on the fly when they first log in