Opencast + LDAP + Moodle

[Ravishel Naicker]

Hi

Currently instructors (lecturers) do not play any role with Opencast but they can only view videos on Opencast. They authenticate via Moodle LTI connection and just can view the videos. 

I would like now instructors to be able to ingest videos into opencast and as well login to Opencast UI and able to tag events to series they are instructors of. 

They get the role contextID_instructor from Moodle authentication and that role one Opencast has got read and write access to that particular series.

Needed advise as to how to do this. My understanding is as follow ( maybe wrong)

1- Instructors can first authenticate from Moodle and have their username and the contextID_instructor registered

2- They go to Opencast UI and authenticate via LDAP

3- Opencast after authentication via LDAP is able to show them UI and give them read/write role to contextID they have instructor role to ?

Regards

[Greg Logan]

Hi Ravishel,

I don't have an LDAP or Moodle server to test with, but that workflow sounds about right.  You're going to need to figure out which ROLE_UI_* are needed for the instructors to be able to ingest, and which are needed to be able to use the various bits of the admin UI but I don't see any reason why this would not work offhand.  This is not, however, a well tested code path so expect to find bugs along the way!

G

--
To unsubscribe from this group and stop receiving emails from it, send an email to users+un...@opencast.org.

[Afshan Amin]

Hi Ravishel,

would look forward for your solution. I am also interested to know if it works for you. 

Best 

--

[Ravishel Naicker]

Hi

I decided to use Moodle User Providers rather then LDAP as Moodle authenticates with LDAP. 

I have successfully done the following

- Installed Moodle Plugin

- Created a user required role and added to plugin

- created a token

Set up Opencast as per the guide for Moodle user provided. But when i try to login i get the following error in the logs

2020-01-15T15:12:47,522 | WARN  | (MoodleUserProviderInstance:540) - Exception loading Moodle user lecturer01 at https://XXX.XX.XX.XX/moodle/webservice/rest/server.php: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

To unsubscribe from this group and stop receiving emails from it, send an email to us...@opencast.org.

[Ravishel Naicker]

In the logs can see this as well as debug is on

2020-01-15T15:47:08,599 | DEBUG | (MoodleUserProviderInstance:389) - Return empty role set for api - not found in Moodle

2020-01-15T15:47:08,600 | DEBUG | (MoodleUserProviderInstance:270) - Returning null user from cache

2020-01-15T15:47:08,600 | DEBUG | (MoodleUserProviderInstance:389) - Return empty role set for api - not found in Moodle

2020-01-15T15:47:08,731 | DEBUG | (MoodleUserProviderInstance:270) - Returning null user from cache

2020-01-15T15:47:08,732 | DEBUG | (MoodleUserProviderInstance:389) - Return empty role set for api - not found in Moodle

2020-01-15T15:47:08,776 | DEBUG | (MoodleUserProviderInstance:270) - Returning null user from cache

2020-01-15T15:47:08,776 | DEBUG | (MoodleUserProviderInstance:389) - Return empty role set for api - not found in Moodle

2020-01-15T15:47:08,796 | DEBUG | (MoodleUserProviderInstance:270) - Returning null user from cache

[Greg Logan]

Hi Ravishel,

Does that server have a valid ssl certificate? It looks like you're addressing it directly via ip, does it have a cert for that ip? 

G

To unsubscribe from this group and stop receiving emails from it, send an email to users+un...@opencast.org.

[Ravishel Naicker]

Hi

Both the servers have valid ssl certificates. I have just used XX to hide my url.

Kind Regards
Ravishel Naicker

[Afshan Amin]

Ravishel,

What settings have you used for Opencast? I am getting "unable to connect to opencast server" error whenever i try to create any series or upload videos from Moodle.

Afshan

To unsubscribe from this group and stop receiving emails from it, send an email to users+un...@opencast.org.

[Ravishel Naicker]

Hi

Attached is certificate details from chrome

To unsubscribe from this group and stop receiving emails from it, send an email to us...@opencast.org.

[Ravishel Naicker]

Hi

We have written a custom script which creates series in Opencast as Moodle shells are created. this is via the Opencast rest api. We give necesary context_id for permissions as well.

For linking opencast and moodle we use LTI connections and give the series id as series parameter in custom parameters. I want to use this plugins just for the purpose of lecturers be able to login to Opencast admin UI and get the role they have in respective series and courses.

Regards

To unsubscribe from this group and stop receiving emails from it, send an email to us...@opencast.org.