LDAP users can not to update their profiles

LDAP users can not to update their profiles

by Максим Зубов -
Number of replies: 5

hello! LDAP users can not to update their profiles (any fields),  but the password can be changed. 

Error: cannotupdateprofile.

Temporary solution. 

  1. Change profile type for "manual";
    2. Log in;
    3. Change any field;
    4. Change profile type for "LDAp";
    The user can change fields now. Fields changes also in LDAP.
    If only to replace type, then does not work

Version 3.6.1

Mail will not be sent to confirm. other fields are not editable, which is the same error. If you run the algorithm above, then everything works without problems in the future.

Previously, everything worked (in older versions). Permissions in AD are available. 

Explain in this case why users can update the fields after I change the profile type to manual and then, after they change the mail, for example, if I change the type to LDAP again, they can change All fields and these fields are updated in LDAP.

An error of "cannotupdateprofile", but not "cannotupdateuseronexauth". Even the local fields which are not mapped with LDAP are not updated. I recorded video which reproduces a mistake, watch, please, it attentively. The user Test148 can change the mail, after changes.
Video
Average of ratings: -
In reply to Максим Зубов

Re: LDAP users can not to update their profiles

by Visvanath Ratnaweera -
Picture of Particularly helpful Moodlers Picture of Translators
Do you really mean, your users can change the password in the LDAP through Moodle? So your bind user has write privileges on LDAP?

My understanding is that Moodle accesses LDAP read-only, also guaranteed by the read-only permissions of the bind user. Ref. https://docs.moodle.org/en/LDAP_authentication.

P.S. You will get targeted advice in the Authentication forum. Alternatively, you may request the moderator to move the discussion to that forum.

Average of ratings: -
In reply to Visvanath Ratnaweera

Re: LDAP users can not to update their profiles

by Максим Зубов -

User can change password in the LDAP through Moodle. Users can change field in the LDAP through Moodle  after the algorithm that I described in the message. How to ask a moderator? Previously, everything worked. On the side of LDAP, nothing has changed!

Average of ratings: -
In reply to Максим Зубов

Re: LDAP users can not to update their profiles

by Visvanath Ratnaweera -
Picture of Particularly helpful Moodlers Picture of Translators
No, I don't know the answer. Sorry!

What I meant about the moderator is that you are more likely to meet specialists on authentication in the Authentication forum.

BTW, last time I didn't see the video. But it doesn't play in my Firefox (Quantom 62.0.3, Debian Stretch). After 2 clicks it plays a couple of screens and then display an error, "Leider gab es ein Problem beim Abspielen des Videos.") Whatever, I don't think the helpers here will watch a full 8 min video for this!
Average of ratings: -
In reply to Visvanath Ratnaweera

Re: LDAP users can not to update their profiles

by Mary Cooch -
Picture of Documentation writers Picture of Moodle HQ Picture of Particularly helpful Moodlers Picture of Testers Picture of Translators

Just moving this to the Authentication forum....

Average of ratings: -