Maybe it's not really clear what my patch does.
It's not only for having either AD or LDAP authentication.
With this patch
you can configure for each user a particular authentication
method. So
please correct me if I'm wrong but as far as I know by now
bugtracker
supports only one method for all users.
My company has a bugtracker running for employees and
customers. Because our
customers must not have AD accounts we can't use AD/LDAP
authentication. So
every employee has to remember two logins and two passwords,
one for AD and
one for bugtracker.
So we'd be happy if we could configure AD authentication for
employees and
MySQL authentication for customers.
Each of our engineers has about five to seven accounts in
different internal
and external systems. It's part of the ISO certification to
get rid of too
many different passwords and logins.
So this is not about only AD or only LDAP, it's about AD,
MySQL, LDAP and
whatever you like together. My solution also is extensible.
So whatever
might come up in future for authentication you easily could
extend the
existing system. It only needs an API for this new auth
method and that's
it. This can also be done by local admins without loosing
support of new
bugtracker versions.
I personally think this could be a useful option due to the
fact that many
software developement companies give customers accounts to
their bugtracker
system.
By the way - I had a hard time getting bugtracker running
with our AD. I
finally got it running but - as I explained before - it's
not solving our
problem at all.
So think about it. I don't need AD authentication at all,
but I need LDAP
and MySQL running together in one and the same system.
Holger Kaufmann
------------------------------------------------------------
--
RA Consulting GmbH
Zeiloch 6a
D-76646 Bruchsal
Germany
Firma: +49 (72 51) 38 62 44
Fax: +49 (72 51) 38 62 11
eMail: h.kaufmann rac.de
Web: http://www.rac.de
Sitz der Gesellschaft: Bruchsal
Amtsgericht Mannheim HRB 231127
Geschäftsführer: Armin Rupalla, Heiko Bauer
------------------------------------------------------------
--
ORACLE Partner
---------------------------------------------------
DIN EN ISO 9001:2000 zertifiziert
-----Ursprüngliche Nachricht-----
Von: Richards, Paul [mailto:plrlatymer.co.uk]
Gesendet: Dienstag, 8. Mai 2007 12:15
An: developer discussions
Cc: Help with Mantis
Betreff: Re: [mantisbt-dev] Mantis 1.1.0a3 Released
I'm against that particular patch on the basis that Active
Directory and
LDAP are effectively the same thing so implementing a new
api/login method
called 'AD', such that for Active Directory you can either
use the LDAP or
AD login method sounds confusing - although, having said
that, we went
around this loop before, and I can vaguely remember the
reasoning for some
parts of the patch.
I fixed some mantis bugs last night, as well as emailing
victor a Database
API change last night. I might take a look at some of the
authentication
bugs today e.g: 7478, 7864, 6956, 5595, 7731, 7387, 7195,
6998, 6771, 4618,
4049
Paul
-----Original Message-----
From: mantisbt-dev-bounceslists.sourceforge.net
[mailto:mantisbt-dev-bounceslists.sourceforge.net] On
Behalf Of Roel
Vanhout
Sent: 08 May 2007 10:30
To: developer discussions
Cc: Help with Mantis
Subject: Re: [mantisbt-dev] Mantis 1.1.0a3 Released
Victor, do you think it would be possible to have the patch
in bug 7478
(http://
www.mantisbt.org/bugs/view.php?id=7478, 'MS Active
Directory
Authentication') included for 1.1? From the number of people
watching
the issue I'd say there is interest for it.
cheers,
roel
Victor Boctor wrote:
> Hi Everyone,
>
> This alpha release includes about 50 enhancements and
bug fixes. One
> of the major highlights of this release is the time
tracking feature.
> There is also enhanced management for custom fields,
support for URL
> to express filter criteria, and many others. Similar to
1.1.0a2, the
> upgrade path to non-English installations is not yet
implemented,
> hence, this alpha release SHOULD ONLY BE USED FOR
ENGLISH
> installations. This release implements database schema
changes and
> hence the install script will need to be run.
>
> Access Mantis from your cell phone / PDA:
> http://www.future
ware.biz/mantiswap
>
> Access Mantis via Webservice from Java, .NET, Cocoa,
and others:
> http://www.fu
tureware.biz/mantisconnect
>
> Forums:
> http://www.mantisbt.o
rg/forums/
>
> Wiki:
> http://www.mantisbt.org
/wiki/
>
> Bug Tracker:
> http://www.mantisbt.org
/bugs/
>
> Mantis Demo:
> http://www.futu
reware.biz/mantisdemo/
>
> Following is the changelog for this release:
>
> - 0007794: [security] Port 7772: Email notifications
bypass security
> on custom fields (vboctor)
> - 0007514: [administration] wrong variable used in
user_api.php
(grangeway)
> - 0007545: [administration] config values are not
escaped (zakman)
> - 0007909: [administration] Implement auto-complete for
Platform, OS
> and OS Version (vboctor)
> - 0007468: [bugtracker] Mantis displays one bug 10
times in My View
> 'monitored by me' list (vboctor)
> - 0007631: [bugtracker] Notes appear in the wrong order
(vboctor)
> - 0007801: [bugtracker] Category field should be empty
and required
(vboctor)
> - 0007816: [bugtracker] Excel export needs
htmlspecialchars() on
> description, steps_to_reproduce, additional_info
(vboctor)
> - 0007901: [bugtracker] Implement the "Add
Note" group action (vboctor)
> - 0007914: [bugtracker] Can't download attachments with
IE over SSL
(grangeway)
> - 0007925: [bugtracker] Access level is displayed twice
in "login
> info" if realname is not set (grangeway)
> - 0007131: [change log] Skip Blank Changelogs
(grangeway)
> - 0007662: [change log] Support ability to set fixed in
version for
> multiple issues (vboctor)
> - 0007823: [change log] APPLICATION ERROR 1100 Issue 0
not found in
> change_log page with access-level 'reporter' (zakman)
> - 0007658: [custom fields] Adding the option to manage
the projects
> custum field will be added to. (vboctor)
> - 0007875: [custom fields] Port 7774: custom fields not
stored
> correctly in bug history (vboctor)
> - 0006830: [customization]
> custom_function_override_issue_delete_notify and
> custom_function_override_issue_update_notify are not
being triggered
> (vboctor)
> - 0007900: [customization] Provide an easy mechanism to
extend custom
> group actions (vboctor)
> - 0007758: [db mssql] Error 0000401 when trying to
view
> summary_page.php (grangeway)
> - 0007817: [db postgresql] text search with PostgreSQL
is always case
> sensitive (vboctor)
> - 0007521: [email] wrong Message-ID when "Mail
Queuing" is used. (vboctor)
> - 0007546: [email] patch allowing real name in From:
header (zakman)
> - 0007667: [feature] Use $_GET parameters instead of
$_POST for
> searches (vboctor)
> - 0006244: [filters] Filter table has a little
displacement in column
(zakman)
> - 0007008: [filters] "current project" in
advanced filters always
> displays empty list (vboctor)
> - 0007557: [filters] Dynamic filter selection
(XMLHTTPRequest) broken
> when using IE7 (vboctor)
> - 0007613: [filters] Advanced filters are not
implemented until moving
> back to simple filters. (vboctor)
> - 0007908: [filters] Support filtering by Platform, OS,
OS Version
(vboctor)
> - 0007770: [graphs] Antialias disable (grangeway)
> - 0007636: [installation] PHP requirements incorrect
(vboctor)
> - 0007645: [localization] [de] Translation for new
Roadmap feature
(achumakov)
> - 0007648: [localization] [de] Translation change from
"Wirklicher
> Name" to "Vollständiger Name"
(ryandesign)
> - 0007677: [localization] [ru] Russian language
translation patch
(achumakov)
> - 0007683: [localization] [it] Little fixes and update
of
> strings_italian.txt (achumakov)
> - 0007685: [localization] [de] Localization strings for
target release
> (achumakov)
> - 0007689: [localization] Little fixes and update of
> strings_italian.txt (achumakov)
> - 0007921: [localization] Add Greek UTF-8 translation
(vboctor)
> - 0007760: [other] Missing text.gif file (vboctor)
> - 0007811: [other] Reporter name is not crossed out for
disabled users
> on update pages (vboctor)
> - 0007813: [other] logging_api.php does not need the
require_once call
(zakman)
> - 0007885: [other] System logging constants (vboctor)
> - 0007653: [relationships] Html tags in issue title are
not escaped
> when shown in "relationship" area (vboctor)
> - 0007650: [roadmap] "Issues done" in roadmap
should be included for
> each release, not for each project. (vboctor)
> - 0007651: [roadmap] Support ability to set target
release for
> multiple issues (vboctor)
> - 0007682: [roadmap] Add progress bar to Roadmap
(vboctor)
> - 0007686: [roadmap] Update "target version"
in all entries field
> after changing the target version strings (vboctor)
> - 0007680: [signup] Successful Sign up should set login
count to 1
(vboctor)
> - 0007819: [sql] It works very slow (function
diskfile_is_name_unique)
(vboctor)
> - 0004428: [time tracking] Time Tracking
(davidnewcomb)
> - 0007936: [time tracking] Unnecessary
core/bugnote_stats_api.php
(grangeway)
> - 0007663: [upgrade] Add support for unattended
upgrades (vboctor)
>
> Regards,
> Victor.
>
>
------------------------------------------------------------
-------------
> This SF.net email is sponsored by DB2 Express
> Download DB2 Express C - the FREE version of DB2
express and take
> control of your XML. No limits. Just data. Click to get
it now.
> http://sourcefor
ge.net/powerbar/db2/
> _______________________________________________
> mantisbt-dev mailing list
> mantisbt-devlists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/mantisbt-d
ev
------------------------------------------------------------
-------------
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and
take
control of your XML. No limits. Just data. Click to get it
now.
http://sourcefor
ge.net/powerbar/db2/
_______________________________________________
mantisbt-dev mailing list
mantisbt-devlists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/mantisbt-d
ev
------------------------------------------------------------
-------------
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and
take
control of your XML. No limits. Just data. Click to get it
now.
http://sourcefor
ge.net/powerbar/db2/
_______________________________________________
mantisbt-dev mailing list
mantisbt-devlists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/mantisbt-d
ev
------------------------------------------------------------
-------------
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and
take
control of your XML. No limits. Just data. Click to get it
now.
http://sourcefor
ge.net/powerbar/db2/
_______________________________________________
mantisbt-dev mailing list
mantisbt-devlists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/mantisbt-d
ev
|