View Issue Details

IDProjectCategoryView StatusLast Update
0007989mantisbtauthenticationpublic2008-07-24 16:51
Reporterlibregeek Assigned Tojreese  
PrioritynormalSeverityminorReproducibilityhave not tried
Status closedResolutionduplicate 
Product Version1.1.0a2 
Summary0007989: Multiple or Composite authentication mode for mantisbt
Description

The multiple authentication mode for mantisbt is on active discussion for some time. I have referred the forum and http://bugs.mantisbt.org and found the following links:
http://www.mantisbugtracker.com/forums/viewtopic.php?p=3514
http://bugs.mantisbt.org./view.php?id=6718
But all these threads lack the real feasible solution.

The basic idea of multiple/composite authentication mode is to try different user database(LDAP, HTTP_AUTH, MySQL, ...) and if a match is found from any of the backend, then login is permitted. This can be implemented in the following way:

  1. Define a new value to the variable $g_login_method, say for example MULTI_AUTH.(in config_inc.php)
  2. If the value of g_login_method is MULTI_AUTH, then another global variable of type array need to be defined, called g_multi_auth_pref. This variable defines in which order the backends should be tried, eg ,
    $g_multi_auth_pref = array('LDAP', 'MD5', 'BASIC_AUTH');

then there would be a function/method like auth_multi_auth() which will iterate over the g_multi_auth_pref array and then call the appropriate authentication function from core/api. In the above case the application will first try ldap, then md5 and then basic_auth. I hope that this method will keep the authenication modular and easy to configure.

If this make sense, then I can contribute to this feature. If somebody is working on a similar feature please post it here.

TagsNo tags attached.

Relationships

duplicate of 0004235 closedvboctor Support Generic Authentication through Plug-ins 
related to 0007791 closedatrol Allow custom login method 

Activities

ghm1014

ghm1014

2008-03-20 04:38

reporter   ~0017420

Is this feature on 1.1.1 Mantis version?
Where can I get this files (attachment are missing)

jreese

jreese

2008-03-20 08:33

reporter   ~0017422

See bug 0004235.

ghm1014

ghm1014

2008-03-28 14:55

reporter   ~0017485

Can anybody tell me how this bug is fixed? I want to use the multi login method but I don't see how. Do I need the patch posted on 0004235? Which file do I need to patch? Which g_login_method should I set?

jreese

jreese

2008-03-28 20:40

reporter   ~0017487

It's not fixed, it's just a duplicate request. I/others are working on extending authentication to use the new plugin system in 1.2.x. There is no current ability for Mantis to use multiple authentication methods at once.