View Issue Details

IDProjectCategoryView StatusLast Update
0022398mantisbtauthenticationpublic2017-02-17 06:27
ReporterarrfabAssigned To 
PrioritynormalSeverityminorReproducibilityhave not tried
Status newResolutionopen 
Product Version2.1.0 
Target VersionFixed in Version 
Summary0022398: HTTP_AUTH not working
Description

Was trying to force HTTP_AUTH for mantisbt, (as https://www.mantisbt.org/docs/master-1.3.x/en-US/Admin_Guide/html-desktop/#admin.config.auth)
but it doesn't seem to work
Then I realized that in the doc, there is a TODO (https://www.mantisbt.org/docs/master-1.3.x/en-US/Admin_Guide/html-desktop/#admin.auth.http)

Does that mean that it's not yet implemented ? Also the doc is still 1.3 while product is now 2.1.0 (needs another bug report ?)

In fact, we (CentOS Project) don't even want to rely on HTTP_AUTH, but rather on openid, but while I found some bug reports for that, it seems there is still nothing implemented.
So my "workaround" was at least to offload the auth to HTTP_AUTH, with apache using mod_auth_openid.
mod_auth_openid asks for user/pass and validates (as we use that for other web apps) but mantis doesn't seem to even use it.

Can we get clarification if that is supposed to work or not ? (while also waiting for openid plugin to work too)

Thanks a lot for your work !

TagsNo tags attached.

Activities

There are no notes attached to this issue.

Issue History

Date Modified Username Field Change
2017-02-17 06:27 arrfab New Issue