Authentication

I am establishing a new Moodle implementation where we want to employ single sign-on. We want the user accounts created in AD to be able to be used to log into Moodle without having to create and maintain moodle user accounts and passwords.

After configuring Moodle for LDAP Authentication, I am unable to log into Moodle using an Active Directory account.


The following is a description of my environment and settings. I would like to know if I've missed something, or if there are additional configuration steps not addressed.

Here is a list of the sources I've used thus far:
http://docs.moodle.org/26/en/LDAP_authentication
http://docs.moodle.org/24/en/Active_Directory
http://www.php.net/manual/en/function.ldap-bind.php


1. Environment:
Servers: Ubuntu 12.04LTS with Moodle 2.6+ (Build: 20131122); Windows Server 2008R2 Domain Controller
PHP: PHP Version 5.3.10-1ubuntu3.8 (http://myserver.mydomain.local/admin/phpinfo.php)
AD: Moodle Users are placed into a separate OU (moodleusers) directly below the domain root & this is a single domain in the forest.

2. Ldap bind account permissions = copy of default administrator (domain admin, enterprise admin, schema admin)
NOTE: I have tried 2 different tests using the bind acount with regular domain user permissions for one test & domain administrator permissions for the second test, the result is the same regardless of permission levels

3. Observation: on the LDAP server screen in Moodle, I receive the following message on screen:
"LDAP paged results not supported (either your PHP version lacks support or you have configured Moodle to use LDAP protocol version 2)"

4. LDAP server Settings:
Host URL: xxx.xxx.xxx.xxx
Version: 3
Use TLS: NO
LDAP encoding: utf-8
Page Size: 250
Hide Passwords: YES
Distinguised name: cn=ldap-bind-user,ou=moodleusers,dc=mydomain,dc=local
Search subcontexts: NO
Deference aliases: NO
user attribute: BLANK
member attribute: BLANK
member attribute uses dn: BLANK
object class: BLANK
Force Change password: NO
Use standard page for changing password: NO
Password format: Plain text

All remaining settings are left blank or default setting.

5. Manual test of PHP LDAP bind
I performed a manual test to confirm the ldap-user account would successfully bind using the following code from php.net:


<?php

// using ldap bind
$ldaprdn  = 'uname';     // ldap rdn or dn
$ldappass = 'password';  // associated password

// connect to ldap server
$ldapconn = ldap_connect("ldap.example.com")
    or die("Could not connect to LDAP server.");

if ($ldapconn) {

    // binding to ldap server
    $ldapbind = ldap_bind($ldapconn, $ldaprdn, $ldappass);

    // verify binding
    if ($ldapbind) {
        echo "LDAP bind successful...";
    } else {
        echo "LDAP bind failed...";
    }

}

?>

The test result was successful.

6. Moodle login results
When attempting to log into Moodle using an Active Directory user account, the result on screen is "Invalid login, please try again"

Please help.
Thank you.