Authentication
There are various ways of managing user authentication:
- Email-based authentication
- Manual accounts only
- No authentication
- PAM (Pluggable Authentication Modules)
- Shibboleth
- Use a CAS server (SSO)
- Use a POP3 server
- Use an LDAP server
- Use NTLM/Integrated Authentication (3rd party plugin)
Закрытие областей профиля
To prevent users from altering some fields (e.g. students changing profile information to inappropriate or misleading information, the site administrator can lock profile fields.
- These fields are optional. You can choose to pre-fill some Moodle user fields with information from the LDAP fields that you specify here. If you leave these fields blank, then nothing will be transferred from LDAP and Moodle defaults will be used instead. In either case, the user will be able to edit all of these fields after they log in.
- Update local: If enabled, the field will be updated (from external auth) every time the user logs in or there is a user synchronization. Fields set to update locally should be locked.
- Lock value: If enabled, will prevent Moodle users and admins from editing the field directly. Use this option if you are maintaining this data in the external auth system.
- Update external: If enabled, the external auth will be updated when the user record is updated. Fields should be unlocked to allow edits. Note: Updating external LDAP data requires that you set binddn and bindpw to a bind-user with editing privileges to all the user records. It currently does not preserve multi-valued attributes, and will remove extra values on update.
If you are using a mixture of authentication types (such as IMAP and manual), then the fields you lock in the authentication options will only apply to the type of authentication indicated by the drop down box at the top of the screen. Remember to test the field locking by logging in with the proper type of account! If you test with a manual account but have set the field locking to apply to IMAP accounts, you will not be able to tell if it worked!
Customising the login page
Depending upon the authentication method (i.e. not applicable for email authentication) login instructions may be easily added. Alternatively, an alternate login URL may be added - please check the Using Moodle discussion Customising the log in page for further details.
