NTLM not working with moodle 3.4 and IIS 8.5

Re: NTLM not working with moodle 3.4 and IIS 8.5

by Leon Stringer -
Number of replies: 0
Picture of Core developers Picture of Particularly helpful Moodlers

Unfortunately I don't have a working environment to compare this with but the first four lines of the first excerpt indicate that the environment isn't configured in line with the documentation.

  1. Line 1 is a request on port 80 for the Moodle home page being rejected by IIS as unauthenticated with the response code 401 Unauthorized.
  2. Line 2 is IE automatically sending the NTLM authentication for its user and being redirected to port 443 for HTTPS access with response code 303 See Other.
  3. Line 3 is IE following that redirect to the HTTPS site but since HTTPS and HTTP count as different sites it again gets rejected by IIS as authenticated with 401 Unauthorized.
  4. Line 4 is IE again sending the NTLM authentication and finally getting the Moodle home page with a 200 OK response.

The Moodle documentation for NTLM single sign-on says to configure the file /auth/ldap/ntlmsso_magic.php for authenticated access but these lines indicate that access to /index.php has also been configured in this way, thus the unexpected 401 responses.

Maybe this is something you've done deliberately and maybe it doesn't actually affect the issue but it's worth looking into. You may have inadvertently configured the whole Moodle folder for authenticated access.

Average of ratings: Useful (1)