Details
-
Type:
Bug
-
Status: Closed
-
Priority:
Minor
-
Resolution: Fixed
-
Affects Version/s: 2.5.1, 2.5.4, 2.6, 2.6.5, 2.7.2
-
Component/s: Enrolments
-
Environment:You need a LDAP server that has nested groups support. 99.9 % of the time this is Active Directory (Novell eDirectory also supports nested groups, but I haven't seen anyone using that feature).
-
Database:Any
-
Testing Instructions:
-
Affected Branches:MOODLE_25_STABLE, MOODLE_26_STABLE, MOODLE_27_STABLE
-
Fixed Branches:MOODLE_26_STABLE, MOODLE_27_STABLE
-
Pull from Repository:
-
Pull Master Branch:wip_master_mdl-43430
-
Pull Master Diff URL:
Description
When running the /enrol/ldap/cli/sync.php users are enroled to their correct courses.
As soon as a user logs on, who is a member of a group with parenthesis in it's name, all LDAP enrolments for that user are lost until the sync.php is run again reinstating the enrolment.
At present I have ldap enrolment set to never unenrol a user. This however means changes from LDAP are never reflected unless the change is reverted and the script run then set back to keep users.
I have only recently switched to LDAP enrolment but I know that I am experiencing this issue in 2.5 and 2.6.
Other users I have spoken to on the forums have indicated that 2.4 is also affected and enrolment with the same settings works in 2.3 I have been unable to verify this though.
Moodle forum link:
https://moodle.org/mod/forum/discuss.php?d=241404
and
https://moodle.org/mod/forum/discuss.php?d=243785
My LDAP settings can be seen here:
http://cdal.co.uk/2013/12/05/moodle-ldap-setup-for-ldap-auto-enrolment/
I'm pretty sure these are correct as enrolment initiated from the cli works fine but not when a user logs in.
Inaki gave me some code to run (in the above forum post) which shows that users logging on are seeing nothing returned in the LDAP enrolment. Is there any difference between the cli version of the code and what gets called when a user logs on?
An example group name that affects all members of the group would be: 'Student Name (Reg Group)'
Thanks,
Seb
Attachments
Issue Links
- is duplicated by
-
MDL-47514 LDAP Enrolments with nested groups fails when group names have ldap filter characters
-
- Closed
-