2012-09-24

Moodle - Configuring LDAP authentication plugin with MS AD.


If you need moodle to authenticate users against Microsoft Active Directory there is a nice guide on moodle.org - http://docs.moodle.org/22/en/LDAP_authentication

However I did not succeed after reading it and had to make some additional forum browsing.
I lacked the actual example(s) of working configuration so here I will try to provide one.
This is how my working LDAP Authentication plugin configuration looks like (with SSO enabled):
LDAP server settings
Host URL: 10.1.1.1 (IP of domain controller)
Version: 3
LDAP encoding: utf-8
Bind settings
Hide passwords: yes
Distinguished name: CN=Administrator,OU=Special Accounts,OU=Admin Objects,DC=mydomain,DC=com (account with permission to read users in AD)
Password: password
User lookup settings
User type: MS ActiveDirectory
Contexts: DC=mydomain,DC=com
Search subcontexts: yes
Deference aliases: no
User attribute: samaccountname (the actual AD attribute to lookup for moodle username)
Course creator
Creators: cn=moodleteachers,ou=Users,dc=mydomain,dc=com
NTLM SSO
Enable: yes
Subnet: 10.0.0.0/8
MS IE fast path?: no
Authentication type: NTLM

2 comments:

  1. Anonymous14.4.14

    Thank you very much!

    I have been struggling with this some time. Works on 1.9 too :)

    Cheers,
    Luis

    ReplyDelete
  2. Is NTLM SSO required for this to work? I am running Moodle on Ubuntu Server.

    ReplyDelete