View Issue Details

IDProjectCategoryView StatusLast Update
0024044mantisbtldappublic2024-12-27 09:48
Reporterraspopov Assigned Tocommunity  
PrioritynormalSeverityfeatureReproducibilityalways
Status assignedResolutionopen 
Product Version2.11.1 
Target Version2.28.0 
Summary0024044: Getting user name and email from LDAP without LDAP authentication
Description

It'll be nice to allow getting a user real name and email from LDAP without actual LDAP authentication i.e. when authentication set to HTTP_AUTH or anything else. In that case options $g_use_ldap_realname and $g_use_ldap_email set to 'ON' but $g_login_method is not a 'LDAP'.

Additional Information

PR for this: https://github.com/mantisbt/mantisbt/pull/1308

TagsNo tags attached.

Activities

raspopov

raspopov

2024-12-11 10:24

reporter   ~0069575

Last edited: 2024-12-11 10:41

Updated PR: https://github.com/mantisbt/mantisbt/pull/1308

I would like to point out that LDAP authentication and using LDAP as a user database are quite different things. But everywhere in the MantisBT code these concepts are unreasonably mixed together. This is especially important for authentication via Active Directory. In this case, it is convenient to verify users using the web server itself (Apache or IIS), and take user data (mail, name, avatar, etc.) directly from Active Directory via the LDAP interface.

This PR will complement my new plugin nicely when used with AD: https://github.com/raspopov/MantisExtAuth

dregad

dregad

2024-12-27 09:48

developer   ~0069615

@raspopov I'm sorry, this totally fell off the radar... I just noticed it today as I filtered on Issues you reported, to check whether I had processed all of your recent contributions.