Linuxmuster and DiLer: What User Sync and Integration Actually Looks Like

Running Linuxmuster and DiLer Together: What the Integration Actually Looks Like

Both systems are built for German schools, but they tackle user management from completely different angles — and that gap is where most of the setup time goes.

What DiLer Is

DiLer (Digitale Lernumgebung) was developed for Gemeinschaftsschulen, the type of German community school that tracks student progress through Kompetenzraster — structured competency grids where students work toward defined learning goals rather than chasing grades alone. The platform is open-source under the AGPL and comes in two flavours: a free Community Edition and a Partner Edition with commercial support.

It is deliberately lean. Teachers assign learning materials, students submit work, and the platform tracks competency levels across subjects. One role called the DiLer Manager controls the entire backend — only that person can create and manage accounts, groups, and subjects. Everyone else uses the frontend.

How Linuxmuster Manages Users

Linuxmuster stores all user accounts in a Samba Active Directory, managed by a tool called sophomorix. Schools feed it a CSV file — usually exported from their administrative database — and sophomorix handles account creation, class promotions, and deletions. The result is a clean LDAP directory with structured attributes per user, including role markers like sophomorixRole=teacher or sophomorixRole=student.

For external services, the standard integration pattern is a dedicated read-only bind user:

sophomorix-admin --create-school-binduser diler-binduser --school default-school --random-passwd-save

Moodle, Nextcloud, and Aleksis all connect this way. The bind user gets the minimum access needed — read the directory, verify passwords — without requiring a full admin account. The auto-generated password is stored on the server; you never set it manually.

The User Sync Question

This is the real challenge when combining the two systems. Moodle has a mature LDAP authentication plugin that pulls users automatically from Linuxmuster’s AD. DiLer’s documentation does not describe an equivalent native LDAP connector. User management in DiLer appears to go through the DiLer Manager interface in the backend rather than from an external directory source.

DiLer is actively developed, and the public documentation does not necessarily cover every capability. Before building a custom sync script, check two things: whether the DiLer backend offers a CSV bulk-import option (a common alternative to live LDAP in self-hosted school platforms); and whether DiLer exposes any API that a lightweight script could use to create users drawn from sophomorix’s LDAP output.

A pragmatic first step: export a user list from Linuxmuster using sophomorix’s CSV output, map the fields into whatever format DiLer accepts for bulk user creation, and automate that import on a schedule. More manual than a live directory connection, but straightforward to debug when something goes wrong mid-term.

DiLer Administration Notes

A few things worth knowing before you go live:

• Decide early who holds the DiLer Manager role. Only this account reaches the backend. If that person leaves without a handover, recovery takes real planning.
• Groups and subjects must exist before users are enrolled. If your Linuxmuster class names do not map cleanly to DiLer group naming, settle on a convention now and apply it consistently.
• The Kompetenzraster columns are configurable — G/M/E, LFS1/LFS2, or a custom scheme. Set this up before teachers start entering any data, not after.
• The Community Edition has no commercial support channel. The DiLer documentation at docs.digitale-lernumgebung.de and the linuxmuster community forum are the main places to get answers.

FAQ

Does DiLer support LDAP authentication against Linuxmuster’s Active Directory?

Not in a documented way equivalent to Moodle’s LDAP plugin. DiLer manages users through its own backend interface. Whether it can authenticate against an external LDAP is not clearly stated in the public documentation, so check the current backend docs and the DiLer community before assuming it will behave like Moodle.

What is the DiLer Community Edition?

The free, open-source version, available after registration at digitale-lernumgebung.de. It covers the full Kompetenzraster and learning material features. The Partner Edition adds hosted infrastructure and commercial support.

How does the sophomorix bind-user pattern work for external services?

You create a low-privilege account in Linuxmuster’s Active Directory with sophomorix-admin, giving it read access to the directory. The external service uses that account to look up users and verify passwords — no admin credentials exposed, and if the bind-user password ever needs rotating, only that one service is affected.

Sources

• docs.linuxmuster.net
• docs.linuxmuster.net
• docs.linuxmuster.net
• digitale-lernumgebung.de
• docs.digitale-lernumgebung.de
• docs.digitale-lernumgebung.de
• docs.digitale-lernumgebung.de
• digitale-lernumgebung.de