[Xerte] RE: LDAP/AD 2003 with techdis/infolio system

Thu Nov 11 14:18:16 GMT 2010

Hello,

No idea what that code is to be honest, it's not mine. It's structured a lot differently.

Can you check the database (logindetails table) to see if the details have been inserted?

Thanks

Pat

-----Original Message-----
From: xerte-bounces at lists.nottingham.ac.uk [mailto:xerte-bounces at lists.nottingham.ac.uk] On Behalf Of Andy Jackson
Sent: 11 November 2010 14:11
To: Xerte discussion list
Subject: RE: [Xerte] RE: LDAP/AD 2003 with techdis/infolio system

OK thanks for that Ron
Patrick. I think I've found where the problem is (woohoo!):
Its in the index.php file
In the version I've got with in-folio there's a section at about line
96:

/*
		* Password and username provided, so try to authenticate
		*/

		}else
if(($_POST["login"]!="")&&($_POST["password"]!="")){

		/*
		* See if the submitted values are valid logins
		*/

			$authenticated = false;

			function set_user_details($firstname, $surname){

				$_SESSION['toolkits_firstname'] =
$firstname;
				$_SESSION['toolkits_surname'] =
$surname;

			}

			switch($_POST["login"]){

				case "admin":
if($_POST["password"]=="54321"){ $authenticated = true;
set_user_details("Admin","User");}; break;
				default: $authenticated = false; break;

			}

			if($authenticated){

				/*
				* Give the session its own session id
				*/		

				$_SESSION['toolkits_sessionid'] =
$session_id; 

				include
$xerte_toolkits_site->php_library_path . "database_library.php";

				include
$xerte_toolkits_site->php_library_path . "user_library.php";

It may be something to do with setting up a default admin type user?
If I use the index.php from the zip LDAP authentication works, however
it won't display the logged-in users name

Cheers
AJ

-----Original Message-----
From: xerte-bounces at lists.nottingham.ac.uk
[mailto:xerte-bounces at lists.nottingham.ac.uk] On Behalf Of Ron Mitchell
Sent: 11 November 2010 13:44
To: 'Xerte discussion list'
Subject: RE: [Xerte] RE: LDAP/AD 2003 with techdis/infolio system

Hi Andy
sorry typed my previous message quickly while also being in a Skype call
- didn't mean to give the impression that I thought you meant anything
bad.
Just trying to clarify the problem and help.

Yes it won't redirect unless XOT is part of the Moodle directory but I
think that's just a safety precaution built-in to the Moodle code e.g.
not to redirect to something outside of Moodle. I'm sure than could be
changed but wanted the patch to work without any change to Moodle code.
However it shouldn't be necessary to launch toolkits in a new window.
e.g. add a link to toolkits in the Moodle header or footer which only
shows to logged-in users. This way users login to Moodle, follow the
link to toolkits and should simply see their workspace replacing the
Moodle window.
Management.php should work fine too although may require moodle login
with a normal account first.

HTH
Ron

-----Original Message-----
From: xerte-bounces at lists.nottingham.ac.uk
[mailto:xerte-bounces at lists.nottingham.ac.uk] On Behalf Of Andy Jackson
Sent: 11 November 2010 10:30
To: Xerte discussion list
Subject: RE: [Xerte] RE: LDAP/AD 2003 with techdis/infolio system

Ron,
I did not mean anything bad about the 'clunky' comment, it just that (as
you say) if Xerte is not installed into the moodle directory you have to
re -open Xerte in a new window after you've authenticated (our users are
pretty technophobic and get confused with multiple windows , they like
one-click answers!)

My LDAP setup is similar to yours (I've basically copied stuff from the
Working moodle settings)

Cheers
AJ

-----Original Message-----
From: xerte-bounces at lists.nottingham.ac.uk
[mailto:xerte-bounces at lists.nottingham.ac.uk] On Behalf Of Ron Mitchell
Sent: 11 November 2010 09:50
To: 'Xerte discussion list'
Subject: RE: [Xerte] RE: LDAP/AD 2003 with techdis/infolio system

> "I did  get authentication to work using the moodle patch mentioned in

> the
list.. but it's a bit clunky and gives me problems with  Xerte
management.php" <

Hi can you explain what you mean here by the moodlepatch being clunky -
I may be able to advise. I have this working on at least 5 different
servers without problem.

One thing not in the current readme is that setting a unique cookie
prefix in Moodle admin can help with some issues.

Also with the LDAP attached is a screenshot of settings that have worked
for me on a Win 2003 setup pointing to what I believe is referred to as
the global catalogue.

HTH
Ron

-----Original Message-----
From: xerte-bounces at lists.nottingham.ac.uk
[mailto:xerte-bounces at lists.nottingham.ac.uk] On Behalf Of Andy Jackson
Sent: 11 November 2010 08:47
To: Xerte discussion list
Subject: RE: [Xerte] RE: LDAP/AD 2003 with techdis/infolio system

Sorry Patrick, those settings still don't work I've tried with our other
domain controller (both MS server 2003) and using IP addresses

AJ

-----Original Message-----
From: xerte-bounces at lists.nottingham.ac.uk
[mailto:xerte-bounces at lists.nottingham.ac.uk] On Behalf Of Patrick
Lockley
Sent: 10 November 2010 15:54
To: Xerte discussion list
Subject: RE: [Xerte] RE: LDAP/AD 2003 with techdis/infolio system

Looking at these

Ldap_host : technical.rnibvocoll.ac.uk
Ldap port : 389
Ldap_bind_dn : CN=xerteadmin,CN=Users,DC=rnibvocoll,DC=ac,DC=uk
Ldap_password : ......
Ldap_base_dn: OU=Technical,DC=rnibvocoll,DC=ac,DC=uk

Only enter one base_dn for now

Try this

Let me know

-----Original Message-----
From: xerte-bounces at lists.nottingham.ac.uk
[mailto:xerte-bounces at lists.nottingham.ac.uk] On Behalf Of Andy Jackson
Sent: 10 November 2010 14:27
To: Xerte discussion list
Subject: RE: [Xerte] RE: LDAP/AD 2003 with techdis/infolio system

OK Patrick here are the ones I use:
Moodle settings

LDAP server settings  
Host URL:     ldap://technical.rnibvocoll.ac.uk
Version :   3
LDAP encoding:  utf-8

Bind settings : 
Distinguished Name:   CN=xerteadmin,CN=Users,DC=rnibvocoll,DC=ac,DC=uk
Password :  Password for bind-user.  

User lookup settings  
Contexts   OU=Technical,DC=rnibvocoll,DC=ac,DC=uk;OU=Non
Technical,DC=rnibvocoll,DC=ac,DC=uk
Search subcontexts   Yes 

I did  get authentication to work using the moodle patch mentioned in
the list.. but it's a bit clunky and gives me problems with  Xerte
management.php 

Cheers
AJ

-----Original Message-----
From: xerte-bounces at lists.nottingham.ac.uk
[mailto:xerte-bounces at lists.nottingham.ac.uk] On Behalf Of Patrick
Lockley
Sent: 10 November 2010 13:42
To: Xerte discussion list
Subject: [Xerte] RE: LDAP/AD 2003 with techdis/infolio system

Ldap bind is usually the root of your AD, something like
dc=rnibcollege,dc=ac,dc=uk the password is usually used if you put an
LDAP string into the ldap bind.

If you post up your moodle settings, or send them to me, i can tell you
what to put where.

________________________________________
From: xerte-bounces at lists.nottingham.ac.uk
[xerte-bounces at lists.nottingham.ac.uk] On Behalf Of Andy Jackson
[ajackson at rnibcollege.ac.uk]
Sent: Wednesday, November 10, 2010 9:32 AM
To: xerte at lists.nottingham.ac.uk
Subject: [Xerte] LDAP/AD 2003 with techdis/infolio system

I'm not sure if you will have the answer to this, however.....
We've just received an Ubuntu-based server as part of the In-folio
project, and it has Xerte toolkits installed I'm trying to set up LDAP
authentication.. it seems fairly straight forward using management.php
BTW I've got LDAP/AD working in Moodle and on other Ubuntu servers with
Drupal and Moodle)

However, I can't log into the Xerte system with LDAP/Active directory
accounts Looking at recents posts to the list, I'm still confused about
the LDAP bind option Is this a user that needs basic read access to
Active directory, and should this have the corresponding password set in
'LDAP password' ?
Do I need to set up LDAP in another area of Xerte?

Cheers
Andy Jackson
RNIB College Loughborough
_______________________________________________
Xerte mailing list
Xerte at lists.nottingham.ac.uk
http://lists.nottingham.ac.uk/mailman/listinfo/xerte____________________
___________________________
Xerte mailing list
Xerte at lists.nottingham.ac.uk
http://lists.nottingham.ac.uk/mailman/listinfo/xerte
This message and any attachment are intended solely for the addressee
and may contain confidential information. If you have received this
message in error, please send it back to me, and immediately delete it.
Please do not use, copy or disclose the information contained in this
message or in any attachment.  Any views or opinions expressed by the
author of this email do not necessarily reflect the views of the
University of Nottingham.

This message has been checked for viruses but the contents of an
attachment may still contain software viruses which could damage your
computer system:
you are advised to perform your own checks. Email communications with
the University of Nottingham may be monitored as permitted by UK
legislation.
_______________________________________________
Xerte mailing list
Xerte at lists.nottingham.ac.uk
http://lists.nottingham.ac.uk/mailman/listinfo/xerte
_______________________________________________
Xerte mailing list
Xerte at lists.nottingham.ac.uk
http://lists.nottingham.ac.uk/mailman/listinfo/xerte
_______________________________________________
Xerte mailing list
Xerte at lists.nottingham.ac.uk
http://lists.nottingham.ac.uk/mailman/listinfo/xerte
_______________________________________________
Xerte mailing list
Xerte at lists.nottingham.ac.uk
http://lists.nottingham.ac.uk/mailman/listinfo/xerte

_______________________________________________
Xerte mailing list
Xerte at lists.nottingham.ac.uk
http://lists.nottingham.ac.uk/mailman/listinfo/xerte
_______________________________________________
Xerte mailing list
Xerte at lists.nottingham.ac.uk
http://lists.nottingham.ac.uk/mailman/listinfo/xerte