7 Replies Latest reply: Jan 25, 2008 11:17 PM by donlaur
JASJ Level 1 Level 1 (0 points)
We are attempting to use the PHP scripts (version 1.1) designed by Aaron Axelsen of University of Wisconsin - Whitewater (http://omega1.uww.edu/itunesu) to help facilitate authentication to iTunes U. We're bouncing credentials off our AD via PHP and LDAP, and once the user is authenticated, we're attempting to authorize them with the appropriate level of permission to iTunes U. To start off we're keeping it really simple. We have three levels: admin, instructor, and student. The administrative login works, but when we attempt to authorize a student or instructor, it appears to work but then brings the student to a blank iTune Store page. It does not recognize the identity string. Here's the debug output:



+The destination string is valid and the corresponding destination item was found.+

+The identity string is valid and provides the following information:+
+Display Name Training Test01+
+Email Address testt@centenarycollege.edu+
+Username testt+
+User Identifier userid+

+The credential string is valid but contains no known credentials.+

+The credential string contains the following credential which is not used within iTunes U:+

+1. Student@urn:mace:itunesu.com:sites:centenarycollege.edu:uniquename_fromitunes+


At the end of the Student credential string there it says "uniquename_fromitunes" - what is suppose to be there and where/how do I obtain that data string?

I have emailed the developer of these scripts and am awaiting his reply, but was hoping someone here might be able to help. Any help would be extremely appreciated. I'm befuddled at the moment and suspect the answer is a simple one.


Other OS, RHEL AS 4 w/ Apache, PHP, MySQL
  • 1. Re: using PHP scripts to authenticate - "unique_name_from_itunes" ???
    Jacob L. Hackamack Level 1 Level 1 (25 points)
    The unique name that you are referring to usually contains the course numbers for authenticating users.
  • 2. Re: using PHP scripts to authenticate - "unique_name_from_itunes" ???
    JASJ Level 1 Level 1 (0 points)
    What do I use if I just want to give them general download/browse access across our iTunes U web site?
  • 3. Re: using PHP scripts to authenticate - "unique_name_from_itunes" ???
    Aaron Axelsen Level 1 Level 1 (15 points)
    Below is an example of what I'm passing:

    Destination uww.edu
    Identity "Username" <user@uww.edu> (username) [username]
    Credentials Instructor@urn:mace:uww.edu:classes:2077-fairhaven-series
    Time 1189626161

    2077-fairhaven-series is the unqiue name that I gave the iTunes U course when I created it.

    The student credential for that same course would simply be: Student@urn:mace:uww.edu:classes:2077-fairhaven-series
  • 4. Re: using PHP scripts to authenticate - "unique_name_from_itunes" ???
    Ken Newquist Level 1 Level 1 (45 points)
    It's been a while since I mucked around with credentials, and I'm doing this via Perl rather than PHP, but the principle is the same. To give students site-level browse capability within iTunes U, I've created a credential called "Student@urn:mace:lafayette.edu" and given it download rights within iTunes. When I connect a student to iTunes U, they're given that credential by default. I have similar credentials for Faculty and College (college being everyone who isn't a student or faculty member).

    If memory serves, iTunes U should automatically assign someone the "authenticated" role when they connect via your connection script, so if you setup content to be downloadable by "authenticated", then that should allow your students (and anyone else who properly authenticates) into the site. That allows for a quick and dirty separation of public vs. college content without mucking around with specific faculty/student/staff roles. If you want to go further, and restrict access to specific sections our courses, then you'll definitely want those sorts of focused roles, and make use of the ${IDENTIFIER} technique described in the access control documentation.

    Ken Newquist
    Lafayette College
  • 5. Re: using PHP scripts to authenticate - "unique_name_from_itunes" ???
    Duncan Bernhardt Level 3 Level 3 (870 points)
    I believe this problem can be solved by creating a credential in iTunes U as an admin with the exact credential you are creating.

    When logged in to your site as an Admin, click on the Edit Access page and add a credential with "Student@urn:mace:itunesu.com:sites:centenarycollege.edu:uniquename_fromitunes" as the name. This should authenticate the user correctly since that credential now exists on your iTunes U site.

    If you create a class in iTunes U with an identifier with the exact string "uniquename_fromitunes," the credential should also validate correctly, even if that exact credential is not in the list of approved credentials.

    I hope this helps.
  • 6. Re: using PHP scripts to authenticate - "unique_name_from_itunes" ???
    JASJ Level 1 Level 1 (0 points)
    Thanks, Duncan. That worked.

    Kind Regards,
  • 7. Re: using PHP scripts to authenticate - "unique_name_from_itunes" ???
    donlaur Level 1 Level 1 (0 points)
    Is there any way to get a copy of the authenicated script using PHP to connect to the LDAP-AD and login to iTunes U. I have one script I have used for connecting to AD for a while but it messes up from time to time when different colleges use different groups. I have a simple login script too but it would be helpful to get it all in one.