[LON-CAPA-admin] Confirm self creation of user accounts

[Sebastian.Becker at hs-hannover.de]

Hi Stuart,

I am struggling right now with the LDAP configuration. Perhaps you can give me a hand?
My current settings are:

my $ldap_host_name = 'ldaps://*****.fh-hannover.de';
    my $ldap_ca_file_name = '';
    my $ldap_search_string = '(cn='.$username.')';
    my $ldap_dn = ''; 					
    my $ldap_bind_password = ''; 			
    my $ldap_search_base = 'o=fh-hannover'; 		

But this is not working. Is one requirement for LC to have a bind user and a passwort? Because my admin told me for authentication reasons a bind user is not required.

Best regards
Sebastian


-----Ursprüngliche Nachricht-----
Von: lon-capa-admin-bounces at mail.lon-capa.org [mailto:lon-capa-admin-bounces at mail.lon-capa.org] Im Auftrag von Stuart Raeburn
Gesendet: Mittwoch, 6. März 2013 19:39
An: lon-capa-admin at mail.lon-capa.org
Betreff: Re: [LON-CAPA-admin] Confirm self creation of user accounts

Hi,

> Isn't it possible to put account creation requests in a queue to be 
> confirmed by the Domain Coordinator instead of a direct creation? I 
> thought it is but I cannot find any setting in the domain configuration.

In 2.10.1, if self creation of a LON-CAPA user account with e-mail address as username is enabled for a domain, there is no facility to queue the request for approval by a Domain Coordinator. (Although other things - i.e., course creation requests, and course enrollment requests can be queued, pending approval).

The original implementation of self-creation of accounts was primarily intended for institutions which support institutional authentication (e.g., LDAP/Kerberos or SSO). In such circumstances users from a domain without an existing LON-CAPA account log-in with their institutional username/password, and if authenticated, can have an account created automatically.

> Any chance?

I filed an enhancement request:
http://bugs.loncapa.org/show_bug.cgi?id=6646
and added you as a CC.

Once the functionality is in place to queue new account requests, pending approval by a DC, the question then becomes what criteria does the Domain Coordinator use to make the decision to approve/reject the request - given that all that has possibly been provided is an e-mail address.

> If not, any other (simple) way how to allow self creation of accounts 
> but with confirmation?

LON-CAPA's "Contact Helpdesk" web form could be completed by someone needing an account to send a message to the domain's helpdesk to ask for an account to be created (the person's e-mail address is required when completing the web form).


Stuart Raeburn
LON-CAPA Academic Consortium


Quoting Stefan Bisitz <st.bisitz at ostfalia.de>:

> Hi,
>
> I have a LON-CAPA server which allows account creation by self 
> creation using an e-mail address. The server is running the current 
> official production release 2.10.1.
>
> Isn't it possible to put account creation requests in a queue to be 
> confirmed by the Domain Coordinator instead of a direct creation? I 
> thought it is but I cannot find any setting in the domain configuration.
>
> Any chance?
>
> If not, any other (simple) way how to allow self creation of accounts 
> but with confirmation?
>
> Thanks,
> Stefan Bisitz
> _______________________________________________
> LON-CAPA-admin mailing list
> LON-CAPA-admin at mail.lon-capa.org
> http://mail.lon-capa.org/mailman/listinfo/lon-capa-admin

_______________________________________________
LON-CAPA-admin mailing list
LON-CAPA-admin at mail.lon-capa.org
http://mail.lon-capa.org/mailman/listinfo/lon-capa-admin