LDAP authenticaction serves to authenticate users, that's it.
It is not meant to create users in your LDAP / AD,

From https://www.mantisbt.org/docs/master/en-US/Admin_Guide/html-desktop/#admin.auth.ldap

The user's ID and password is checked against the Directory; if the credentials are valid, then the user is allowed to login and their user account in MantisBT is created automatically.

Hi @atrol,

Apologies - my fault for not being sufficiently clear. I am referring to folks who are already LDAP-compliant users who want to sign up for their own MantisBT accounts. Not trying to provide a means of creating users in LDAP. As you noted, our MantisBT config only relies on LDAP for authentication.

Just looking to figure out how to give potential MantisBT users (who are already valid LDAP users) the opportunity to sign up for a MantisBT account themselves. The signup link/page is not available in spite of the $g_allow_signup setting being set to 'ON.' For now, we have been asking folks to make requests to administrators, who manually create the new user account after confirming that that are already in LDAP.

Please let me know if I can provide any further clarifications. Thanks very much for your help.

Ryan.

I don't use LDAP, so I might be wrong and there is a bug in MantisBT.

As I wrote before, according documentation

if the credentials are valid, then the user is allowed to login and their user account in MantisBT is created automatically.

So I would expect that users don't signup, but just login to MantisBT using their LDAP username and passwort.

Hi @atrol,

That's not our experience with the LDAP-compliant config. Users that have a valid username/password cannot login to MantisBT if they do not have an account created for them.
The login screen only shows a text box for the username and a login button. On the screen that follows, if the user does not successfully "Enter password for 'username'," he/she sees the message "Your account may be disabled or blocked or the username/password you entered it incorrect." A link that allows the user to sign up for their own MantisBT account is never presented.

For the screen shots provided, please assume that "username" is a valid LDAP user (but not yet a MantisBT one) and the password he/she provides matches that in LDAP.

Please let me know if I can provide anymore info.

Ryan.

mantisLoginPassword.PNG (25,617 bytes)   

mantisLoginPassword.PNG (25,617 bytes)   

mantisLoginGreet.PNG (20,337 bytes)   

mantisLoginGreet.PNG (20,337 bytes)   

mantisLoginFail.PNG (25,591 bytes)   

mantisLoginFail.PNG (25,591 bytes)   

Quick clarification on the second sentence of the last post:

Users that have a valid LDAP username/password cannot login to MantisBT if they do not have a MantisBT account created for them.

You are right, there is a known bug 0022331

Thanks, @atrol. I will post to the noted bug and look for updates there.

Ryan.