I don't know if this is the right forum to ask this, I apologise if not.
I am testing an installation of Moodle for my employer, we plan to couple it with our shibboleth system, so I use the shibboleth authentication.
I configured it as explained in auth/shibboleth/README.txt and I am then supposed to have access to the login form with a link to the shibboleth login. It does not work though.
What happens whenever I go to moodle, it redirects to login/index.php which redirects me to the shibboleth login.
My problem is that I cannot log in as admin, since admin is a local Moodle user.
Any idea on how to fix this?
It seems that you don't receive any Shibboleth attributes and are therefore redirected.
Are you sure that you have equiped your web server with Shibboleth? Protect another page with Shibboleth, do a <? print_r($_Server) ?> on that page and check if you see any Shibboleth attributes.
Are you sure that you protected the file shib-protected with Shibboleth?
Are you sure that the .htaccess is working in moodle/auth/shibboleth/ ? You may have to configure your web server to allow .htaccess files for that directory.
Everything is working fine with shibboleth, atrtributes, login and so on. The problem is that whenever I go to the homepage of my site and I am not logged in (with shibboleth), it redirects me to the shibboleth login, which works.
So, I never get the moodle login page and I am unable to login as "admin".
when I go to $MOODLE/login/index.php, it sends me to my shibboleth login page and gets back to moodle logged in as the shibboleth user.
Same, when I use the logout: $MOODLE/login/logout.php, it redirects again to the shibboleth page.
Well, this probably isn't directly related to the Shibboleth login. Can it be that you have choosen to force users to log in to access moodle?
Or check if you use the alternate login link provided by Moodle. This also may be the reason for your redirect.
I am runing into the same problem that you had before. Could you show me how you solved it? Thanks a lot.
Never mind, problem solved. Thanks.
Any chance you could explain how you solved the problem? We're considering implementing Shibboleth authentication (on Moodle 2.4) but are wondering about how to handle manual accounts.
Our solution was to create a block that would only be displayed on the frontpage, and only when the user was not authenticated. The block would contain a link to the protected Shibboleth resource (auth/shibboleth/index.php). Additionally our block would allow the user to select from a list of IdPs in our federation of campuses.
We do not use manual authentication for faculty, and students, so we remove (via the theme) the display of standard login link. Our admins and support type the URL to the standard login page when they need to get in, but other campuses put a link to it in the frontpage block as well, distinguishing it from the Shibboleth link.
The code for the block is on github: https://github.com/appalachianstate/moodle-block_shibblogin.git
We also make a couple changes to the shibboleth auth plugin to detect deep-link (course, activity, resources, etc.) access, that will take the user to the Shibboleth IdP rather than the manual login page. If you want those, lemme know and I'll put 'em up.