View Issue Details

WikiRelated ChangesetsJump to Notes
IDProjectCategoryView StatusDate SubmittedLast Update
0027848mantisbtldappublic2021-01-07 07:272021-03-07 18:28
Reporterdregad Assigned Tocommunity  
PrioritynormalSeverityminorReproducibilityN/A
Status closedResolutionfixed 
Target Version2.25.0Fixed in Version2.25.0 
Summary0027848: Changed default $g_ldap_protocol_version from 0 to 3.
Description

Until now, the LDAP protocol version defaulted to 0, meaning that MantisBT would not set it and use the LDAP server's default.

Considering that LDAP version 3 was released in 1997 and that LDAPv2 was deprecated in 2003 by RFC3494, it make sense to default to v3, especially considering that

  • it is required to connect to Microsoft Active Directory, and
  • not using it has been known to cause issues, particularly with accented characters (e.g. 0020809, 0022655, forums)
TagsNo tags attached.

Relationships

related to 0020809 closedatrol Auth with AD KO when UTF-8 chars in password 
related to 0022655 closedatrol Login via LDAP is not working, error with special characters [APPLICATION ERROR 0000401] 

Activities

dregad

dregad

2021-01-07 07:28

developer   ~0064956

Part of PR https://github.com/mantisbt/mantisbt/pull/1727

Related Changesets

MantisBT: master 94462f8c

2021-01-04 12:29:54

Sean McBride


Committer: dregad Details Diff 		Review of LDAP code; added StartTLS support

- added StartTLS support for LDAP, based on illmnec's patch
(fixes 0015361).
- added new ldap_tls_protocol_min option to specify minimun TLS version.
- changed default $g_ldap_protocol_version from 0 to 3 (fixes 0027848).
- improved Admin Guide and config_defaults_inc.php PHPDoc comments
- corrected log output for ldap_connect, which, despite its name,
doesn't actually perform a network connection, according to its docs.
- added an Admin Check to ensure that ldap_server config option is in
URI form (fixes 0027849).

Signed-off-by: Damien Regad <dregad@mantisbt.org>

PR https://github.com/mantisbt/mantisbt/pull/1727		 Affected Issues
0015361, 0027848, 0027849
mod - admin/check/check_config_inc.php Diff File
mod - config_defaults_inc.php Diff File
mod - core/constant_inc.php Diff File
mod - core/ldap_api.php Diff File
mod - docbook/Admin_Guide/en-US/config/auth.xml Diff File
mod - lang/strings_english.txt Diff File