Question about passwords..

I have both my Joomla and Moodle set up with LDAP authentication. Joomdle is working great for logins and is taking the Joomla user and mapping them correctly to the LDAP user in Moodle.

What I am wondering is that with this set up, if I reset a password in Joomla - will it be sent over to Moodle which would actually update my LDAP server (I have this part working already)?

Failing that, is there a way to easily redirect the reset my password link to the Moodle side? And the profile page (the wrapper is not working for me right now (a domain issue maybe) so the Wrapper to Moodle Profile page does not work correctly) or do I just need to create links manually?

Passwords are not sent back and forth between Joomla and Moodle - only the sessions. If you have set Joomla as the Master then the password in managed by Joomla and a sessions established in Moodle using SSO. The opposite happens if you want Moodle to be the Master. As it relates to LDAP, which ever you create as the Master will need to manage the relationship with the LDAP server. Thus if Moodle connects to LDAP, Moodle will need to manage the passwords.

I have not done any testing with LDAP but you should be able to set up Joomla as your Master so it can SSO with Moodle and also configure Joomla to SSO with Open LDAP using the Joomla LDAP extensions. I believe if you search the forum other have done this or something similar.

If you use Joomdle, you would not use LDAP on Moodle.
You configure LDAP on Joomla, and all logins go through it: even if you go directly to Moodle to log in, process would be: moodle connects to joomla, joomla connects to ldap.

As Chris says, this setup has already been used wit no problems.

So, if I set it up this way, (we are using MS AD, not OpenLDAP), I am presuming that I would then have to set up Moodle to auto create users? I do not have this set right now so when the log in comes from Joomla, Moodle actually searches AD for the user and then logs them in as an LDAP user.

I actually like the setup I have but would let Joomla handle it all if I can get the profile and password updates on Joomla push over to my LDAP server. Currently this is not working but I also do not have LDAPS working yet and I know that I needed this on the Moodle side to allow profile updates. If I get the SSL part working, will Joomla automatically push the changes over?

You really need to look at from a process point of view and not a technical one. Where do you want your users to visit first / "call home"? If Joomla is your front door then you should connect Joomla to AD for authentication and have Joomdle manage the sessions with Moodle. If you want Moodle to be the front door then the opposite would be true.

Remember the primary objective of people wanting to use Joomdle is so that Joomla can be the house and Moodle a room within that house, in which case you would secure the front door (Joomla) and use whatever authentication you need. That said there are numerous authentication approaches in Joomla and we have not tested them all. We have tested a number of different Joomla logins, some facebook and google integration plugins and as mentioned in the forum, you will see some people have confirmed LDAP.

> If you want Moodle to be the front door then the opposite would be true.

Not really if you are using Joomdle. Joomdle has always Joomla as the password master, so if you use LDAP with Joomdle, it has to be on Joomla side.


As for pushing profile data: I have seen this working with the jmpamyldap plugin. I don't know about passwords.

Thanks for the input. I will play with ldaps and see what I can figure out for password changes from the Joomla side, then I can decide how I want people to access everything. It would be nice to use the Joomla side for primary access if I can get the password part working. If not, it would be great if Joomdle would have a variable builtin to link to the Moodle profile page from Joomla!