Thank you Danny.
I see from the log that you were able to at least attempt login. None of my attempts from within D2L are in the log.
So, I suppose this means it is an issue specific to the D2L here at UNB. I will contact the D2L team here to see if they have any suggestions.
[Mon Aug 28 13:15:33 2017] LOGIN OK user_id=tim login_type=normal credential_source=params host=142.167.18.231 port=53156 UA=Mozilla/5.0 (Windows NT 10.0; WOW64; rv:55.0) Gecko/20100101 Firefox/55.0
[Mon Aug 28 18:39:46 2017] LOGIN FAILED OAuth verification failed. Check the Consumer Secret and that the URL in the LMS exactly matches the WeBWorK URL.dlglin - authentication failed: 0 user_id=dlglin login_type=normal credential_source=LTIAdvanced host=136.159.160.200 port=51958 UA=Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/603.3.8 (KHTML, like Gecko) Version/10.1.2 Safari/603.3.8
[Mon Aug 28 18:41:11 2017] LOGIN FAILED OAuth verification failed. Check the Consumer Secret and that the URL in the LMS exactly matches the WeBWorK URL.dlglin - authentication failed: 0 user_id=dlglin login_type=normal credential_source=LTIAdvanced host=136.159.160.200 port=51975 UA=Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/603.3.8 (KHTML, like Gecko) Version/10.1.2 Safari/603.3.8
[Mon Aug 28 18:42:44 2017] AUTH WWDB: password rejected user_id=admin login_type=normal credential_source=params host=136.159.160.200 port=52001 UA=Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/603.3.8 (KHTML, like Gecko) Version/10.1.2 Safari/603.3.8
[Mon Aug 28 18:42:44 2017] LOGIN FAILED authentication failed user_id=admin login_type=normal credential_source=params host=136.159.160.200 port=52001 UA=Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/603.3.8 (KHTML, like Gecko) Version/10.1.2 Safari/603.3.8
[Mon Aug 28 18:42:47 2017] LOGIN FAILED user unknown user_id=prof login_type=normal credential_source=params host=136.159.160.200 port=52001 UA=Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/603.3.8 (KHTML, like Gecko) Version/10.1.2 Safari/603.3.8
[Mon Aug 28 19:34:32 2017] AUTH WWDB: password accepted user_id=tim login_type=normal credential_source=params host=142.167.18.231 port=55014 UA=Mozilla/5.0 (Windows NT 10.0; WOW64; rv:55.0) Gecko/20100101 Firefox/55.0
I've attached a screenshot of the settings I used for that connection. I'm assuming that you didn't include your actual shared secret in your previous post, which should be why I wasn't able to successfully authenticate.
At least I got something different this time. I had been using the Tool Provider settings.
Now, using the setup you used I get the following error:
WeBWorK error
An error occured while processing your request. For help, please send mail to this site's webmaster (webmaster@localhost), including all of the following information as well as what what you were doing when the error occured.
Tue Aug 29 14:29:18 2017
Warning messages
===== parameters received ======= oauth_consumer_key => webworkunbSJ lis_person_contact_email_primary => TIM@UNB.CA tool_consumer_info_product_family_code => desire2learn oauth_signature => +9cjs6OjizGzVnFmCogmwTnHtG8= tool_consumer_instance_description => Webwork For Math 1003 Online tool_consumer_instance_name => Webwork Exercises For Math 1003 Online oauth_callback => about:blank context_id => 134068 oauth_version => 1.0 oauth_signature_method => HMAC-SHA1 resource_link_description => roles => urn:lti:instrole:ims/lis/Faculty,Faculty,urn:lti:instrole:ims/lis/Member,Member,urn:lti:instrole:ims/lis/Instructor,Instructor,urn:lti:instrole:ims/lis/Mentor,Mentor,urn:lti:instrole:ims/lis/Staff,Staff,urn:lti:instrole:ims/lis/Alumni,Alumni,urn:lti:instrole:ims/lis/Observer,Observer lis_outcome_service_url => https://lms.unb.ca/d2l/le/lti/Outcome lis_person_name_full => Timothy Alderson ext_completion_url => tool_consumer_instance_guid => UNB context_label => MATH 1003 DEVELOPMENT ext_d2l_token_digest => 8NQgSJwG6jEHCqqWwGwaFPeoUR0= lis_result_sourcedid => da11e582-449e-44c4-983f-1dd0615e9905 lti_version => LTI-1p0 ext_d2l_tenantid => 4cf94592-d715-448e-9ad0-1cc42cb0b315 user_id => UNB_1164 ext_basiclti_submit => Launch Endpoint with BasicLTI Data oauth_timestamp => 1504027758 ext_d2l_token_id => 15662350 context_title => MATH 1003 DEVELOPMENT 2017 ext_d2l_link_id => 791 resource_link_title => Webwork Assignments second try oauth_nonce => a8c127dc-b68f-4421-a13a-3b6ece4dd1b7 tool_consumer_instance_contact_email => tim@unb.ca lti_message_type => basic-lti-launch-request ext_d2l_orgdefinedid => 3086934 tool_consumer_info_version => 10.7.4.0 ext_d2l_role => Student launch_presentation_locale => EN-CA lis_person_name_family => Alderson lis_person_name_given => Timothy ext_tc_profile_url => https://lms.unb.ca/d2l/api/ext/1.0/lti/tcservices ext_d2l_username => tim context_type => CourseOffering resource_link_id => 177311953 =========== summary ============ at /opt/webwork/webwork2/lib/WeBWorK/Authen/LTIAdvanced.pm line 206. User id is |TIM| User mail address is |TIM@UNB.CA| preferred_source_of_username is |lis_person_contact_email_primary| ================================ The following path was reconstructed by WeBWorK. It should match the path in the LMS: at /opt/webwork/webwork2/lib/WeBWorK/Authen/LTIAdvanced.pm line 371. http://webwork.unbsj.ca/webwork2/Math1003_CEL/ at /opt/webwork/webwork2/lib/WeBWorK/Authen/LTIAdvanced.pm line 372. The adjusted LTI roles defined for this user are: --Faculty --Faculty --Member --Member --Instructor --Instructor --Mentor --Mentor --Staff --Staff --Alumni --Alumni --Observer --Observer Any initial ^urn:lti:.*:ims/lis/ segments have been stripped off. The user will be assigned the highest role defined for them ======================== Use of uninitialized value in hash element at /opt/webwork/webwork2/lib/WeBWorK/Authen/LTIAdvanced.pm line 480.
Error messages
Cannot find a WeBWorK role that corresponds to the LMS role of Faculty. at /opt/webwork/webwork2/lib/WeBWorK.pm line 321. Call stack
The information below can help locate the source of the problem.
in Carp::croak called at line 480 of /opt/webwork/webwork2/lib/WeBWorK/Authen/LTIAdvanced.pmin WeBWorK::Authen::LTIAdvanced::create_user called at line 417 of /opt/webwork/webwork2/lib/WeBWorK/Authen/LTIAdvanced.pmin WeBWorK::Authen::LTIAdvanced::authenticate called at line 301 of /opt/webwork/webwork2/lib/WeBWorK/Authen/LTIAdvanced.pmin WeBWorK::Authen::LTIAdvanced::verify_normal_user called at line 306 of /opt/webwork/webwork2/lib/WeBWorK/Authen.pmin WeBWorK::Authen::do_verify called at line 216 of /opt/webwork/webwork2/lib/WeBWorK/Authen.pmin WeBWorK::Authen::verify called at line 321 of /opt/webwork/webwork2/lib/WeBWorK.pm
Request information
| Method | POST | ||||||||||||||||||||
| URI | /webwork2/Math1003_CEL/ | ||||||||||||||||||||
| HTTP Headers |
|
That one's an easy fix. WeBWorK doesn't know what WeBWorK role to match with your D2L role of "Faculty".
Add the following line to the %LMSrolesToWeBWorKroles hash:
"Faculty" => "professor",
It looks like this was a recent change in D2L to calling instructors "Faculty". I'll change this in authen_LTI.conf.dist so that it is automatically recognized in future versions of WeBWorK. I haven't checked if they changed the title of the student role. Once you get it up and running as an instructor, make sure that students are able to log in as well.
A couple of housekeeping things:
- You don't need to check all of the boxes under security settings. I tend to select them all when testing. I believe the ones required are
"Send user ID to tool provider"
"Send user email to tool provider"
"Send system role to tool provider" - You can work with your D2L team to set WeBWorK up as a tool provider for all of your courses. Then you will be able to use the tool provider settings. I created a wiki page with the instructions at http://webwork.maa.org/wiki/LTI-Advanced_Authentication_for_D2L. I just realized that there is no link to this from the main LTI wiki page. I'll update that this afternoon.
Thank you again. All seems to be resolved.
Now we will just have to see how it goes with the September rush!
Now we will just have to see how it goes with the September rush!
Tim,
Can you report what was wrong and how it was resolved -- in case someone else has a similar problem and needs to describe what to look for to their D2L IT people?
The cause/solution in our case was a combination of the following:
1. Add the following line to the %LMSrolesToWeBWorKroles hash: "Faculty" => "professor"
2. When choosing the Security Settings as detailed at http://webwork.maa.org/wiki/LTI-Advanced_Authentication_for_D2L#.WacknNGQyHA ),
"Send user ID to tool provider" does not appear in the list, instead select "Send LTI user ID and LTI role list to tool provider" (choosing system username or system Org Defined ID instead failed in our case).
So the minimal check boxes are:
Thanks.