Restrict Mnet Roaming

Restrict Mnet Roaming

by Alan Cherwinski -
Number of replies: 4

Hello

I have three 2.3.1 servers with mnet successfully setup and working. I don't want every role to able to roam between the 3 servers. To get the Networked Servers Block to work I must enable Authenticated Users to roam.

My work around on one server was to place a permission restriction on the Network servers block on the Role of Student (this only hides the block). I've also prevented the Role of Students from roaming site wide.

The Student unfortunately are able to get into the other servers (2&3) using the "Log in using your account on:". I am surprised if the home server does not allow the student to roam that the networked server allows authentication.


Is there any practical way to restrict access to roaming between sites?

Thanks

Average of ratings: -
In reply to Alan Cherwinski

Re: Restrict Mnet Roaming

by Mary Cooch -
Picture of Documentation writers Picture of Moodle HQ Picture of Particularly helpful Moodlers Picture of Testers Picture of Translators

You don't have to allow authenticated users to roam for the network server block to appear. You can create a new role, give it the roaming capablitity and assign it sitewide to just those users you wish to be able to roam to other Moodles. Users without that role won't be able to roam. See also http://docs.moodle.org/en/MNet

In reply to Mary Cooch

Re: Restrict Mnet Roaming

by Alan Cherwinski -

Hi Mary, Thanks.

I think my confusion was the fact that as the full Site Administrator unless I enable authenticated user to Roam I cannot see the Full Network Servers Block without edit turned on. I thought everyone else could also not see it as well.

I switched back to a new system role and it all worked as you described. Any idea why the Network Servers Block is hidden from Admins?

In reply to Alan Cherwinski

Re: Restrict Mnet Roaming

by Ken Task -
Picture of Particularly helpful Moodlers

2 cent opinion/guess but maybe related to reason Network Servers Block hidden from Admins ...

Have used the same account on all MNetted servers.  After setting up MNetting and the Network Servers block I get in a hurry and as an Admin level user I try the block.  Well, that results in yet another account with the same user name (email address) on the other MNetted server.   When off into assigning users/etc. I see two accounts for me, but no real indication that one of them is the MNetted account. :|

'spirit of sharing', Ken

In reply to Ken Task

Re: Restrict Mnet Roaming

by Mary Cooch -
Picture of Documentation writers Picture of Moodle HQ Picture of Particularly helpful Moodlers Picture of Testers Picture of Translators

It used not to be hidden from admins  - I remember in 1.9 admins automatically had roaming rights and could see the network servers block, but I remember discovering and asking the question in 2 why admins did not have rights. Can't recall i if it was David M or Dan P who responded but basically -  not even admins in Moodle 2 have automatic roaming rights so you have to assign them to yourselves as well (ie to your admin role) as  well as to the other userssmile