Difference between revisions of "Cool Solution - Install Moodle"

From Univention Wiki

Jump to: navigation, search
Line 235: Line 235:
== Further links ==
== Further links ==
* Moodle Installation - https://docs.moodle.org/28/en/Installing_Moodle_on_Debian_based_distributions
* Moodle Installation - https://docs.moodle.org/35/en/Installing_Moodle_on_Debian_based_distributions

Revision as of 09:31, 28 August 2018

Produktlogo UCS Version 4.2
Produktlogo UCS@School Version 4.2

Note: Cool Solutions are articles documenting additional functionality based on Univention products. Not all of the shown steps in the article are covered by Univention Support. For questions about your support coverage contact your contact person at Univention before you want to implement one of the shown steps.

Also regard the legal notes at Terms of Service.
Note: This article is not yet reviewed.

This article introduces you to the usage of Moodle. It covers the installation on a dedicated school server, as well as the users authentication with the LDAP. If further integration packages are needed, like loading classes from the LDAP or using the Microsoft Windows authentication for already logged in users, feel free to contact Univention for assistance.


It's important that every user, that should use Moodle, must have an e-mail address. If currently no user has an e-mail address, install the Mailserver component from the App center to manage an e-mail domain and assign e-mail addresses to users.


This section will cover the preparation and installation of Moodle on the system. Please make sure that every command is executed as root user.

To install necessary packages, execute the following command to install apache2, php5 and mysql

 apt-get install apache2 php5 mysql-server php5-mysql libapache2-mod-php5 php5-gd php5-curl php5-xmlrpc php5-intl php5-ldap

The MySQL database modules must be included in PHP. Add the following two lines into the /etc/php5/apache2/php.ini file:


To use Moodle effectively, it is recommended to raise the maximum size for uploads, e. g. 20 MB, to provide small programs to students. The changes must be done in the /etc/php5/apache2/php.ini file:

post_max_size = 20M
upload_max_filesize = 20M

For the changes to take effect, the Apache webserver must be restarted:

/etc/init.d/apache2 restart


This section handles the basic configuration and LDAP connection for Moodle and how to delete users in Moodle that are not in the LDAP anymore.

Basic configuration

Hint: It is recommended to create a Moodle user with appropriate privileges on the Moodle database.

To setup the MySQL Database, execute the following command:

mysql -u root -p

Enter your password

Create the Moodle database

mysql> CREATE DATABASE moodle;

Then ensure that the database is set to UTF8 which is required by later distributions of Moodle

mysql> ALTER DATABASE moodle charset=utf8;

Then exit the database

mysql> exit;

The next step is, to download Moodle from the following site [1] (latest Version: 2.9):

Unpack the file with the following command:

tar -zxvf <your-file>

The file will probably be located in your current folder. Move the 'Moodle' file to /var/www:

mv moodle /var/www

Switch to the correct directory

cd /var/www

Set ownership and permissions so that Apache can access the files

chown -R www-data:www-data moodle
chmod -R 755 moodle

Switch the directory again

cd /var/

Create a directory for user and course files

mkdir moodledata

Set ownership and permissions so that Apache can access the files

chown -R www-data:www-data moodledata

Now the Moodle service can be reached and configured by opening the web page in a webbrowser:

Starting with standard web configuration and MySQL standard Port: 3306 should be sufficient.

LDAP authentification

After the basic configuration is done, https should be activated in Site Administration -> Security -> HTTP security. Next, in Site Administration -> Plugin -> Authentication -> Manage authentication the option Email-based self-registration should be deactivated and LDAP server (pre installed Plugin) should be activated.

Next, a simple authentication account should be created using the UDM. This account can then be used for an authenticated bind. You may like to create such a user as described in the following link: [2]. To find the DN of the account issue the following command on the command line:

udm users/user list --filter username=<NAME of the account> | grep DN

Now the LDAP connection can be configured under Site Administration -> Plugin -> Authentication -> Manage authentication -> LDAP Server -> Settings. The table gives information which default settings must be changed:

Key Value
LDAP server settings
Host URL ldap://<school server's FQDN>:7389
Version 3
Bind settings
Distinguished Name <DN of the authentication account>
Password <Password of the authentication account>
User lookup settings
Contexts cn=users,ou=<school>,dc=<domain>,dc=<domain>
Search subcontexts Yes
User Attribute uid
Cron synchronization script
Removed ext user Full delete internal
Data mapping
Update local On Every Login
Update external Never
Lock value Locked

Hint: To obtain the LDAP basis, execute the following command on the school server:

ucr get ldap/base

Hint: To obtain the system's FQDN, execute the following command on the relevant system:

hostname -f

LDAP mapping

Furthermore, the following mapping applies for LDAP entries:

Key Value
First name givenName
Surname sn
Email address mailPrimaryAddress
Phone 1 telephoneNumber
Phone 2 homePhone
City/town l
Country c

Note: Some fields like Email address are mandatory for moodle, so you should make sure all moodle users have a valid email in UCS.

Cronjob for deleting users

In order for Moodle to remove users from its database that are deleted in the LDAP, a cronjob must be defined in the UDM.

chown -R www-data:www-data moodle \

ucr set cron/moodle/command='wget -q -O /dev/null http://localhost/moodle/admin/cron.php'\
cron/moodle/time='*/10 * * * *'


  1. OU: At this time it is not possible for Moodle to search for all users using the LDAP base DN.
  2. Class mapping: This article does not handle mappings between UCS@School classes and Moodle groups. If you need assistance to create the respective mapping or would like to have the setup packaged, feel free to contact Univention for an offer to create either.


Further links

Personal tools