Mantis Logo
Mantis Manual
Manual
Customizing Mantis

Custom Fields
Enumerations
Email Notifications
Customizing Status Values
LDAP
Custom Functions


Partner Links


LDAP
Last Modified: August 24, 2004 16:08PM
(Any)
Description

Functionality is provided by using the php-ldap module (/usr/lib/php4/ldap.so). An extra login method is defined within core/user_API.php inside of function is_password_match $f_username, $p_test_password, $p_password ).

This has a simple, non encrypted (yet) test of the LDAP directory for that user by asking for an entry with uid=username and password=test_password, if this exists, it is presumed that the user should be granted access.

Configuration basics

the LDIF format that was tested is as follows:

dn: uid=tests, dc=test, dc=com, dc=au
department: testdep
organizationname: Testing Organization
cn: Test Smith
assignedgroup: users
givename: Test
sn: Smith
mail: tests@example.com.au
uid: tests
userPassword: password
objectclass: testPerson

The password may be in clear, taken from the /etc/passwd or /etc/shadow file, or simply encrypted and added using current LDAP tools.

There are some specialized software for replicating passwd to LDAP and inversely (eg. http://freshmeat.net/projects/cpu/).

Also setup the LDAP parameters explained in the Authentication section.

Don't forget to change your $g_login_method to LDAP.


Creating new accounts

There is still a bit of problem when you want to create a new user to Mantis using LDAP, you must create the LDIF entry to LDAP, and also sign up for a new account, if both of these line up correctly, authentication will proceed.


Email issues

Email address is queried from the LDAP database if the authentication is set to use LDAP instead of the user record in the database entry.


Credits

leighm@linuxbandwagon.com - Leigh Morresi
aspinei@yahoo.com - Adrian Spinei
rfoster@mountainvisions.com.au - Robert Foster

User Contributed Notes
LDAP
Add Notes About Notes
karl@designit.com.au
16-Dec-2003 20:11
#38
If LDAP is set up for anonymous access then a blank password will return TRUE.

See http://bugs.mantisbt.org/bug_view_page.php?bug_id=0003113
rfoster@mountainvisions.com.au
13-Sep-2005 19:15
#605
It appears that the description of the LDAP Authentication method is incorrect.

The actual method of authentication is as follows:

1. Get list of users matching uid=<loginname> (using designated bindcn and bindpwd)
2. Iterate through retrieved users
3. Try to authenticate by binding with the each account and the supplied password
4. If a bind is successful, then move on to retrieve the user details.
Add Notes About Notes
Last updated: Wed, 23 Jul 2008 - 15:40:26

Mantis @ SourceForge