MantisBT

View Issue Details Jump to Notes ] Wiki ] Related Changesets ] Issue History ] Print ]
IDProjectCategoryView StatusDate SubmittedLast Update
0012998mantisbtauthenticationpublic2011-05-14 12:282013-04-06 09:23
Reportertino 
Assigned Todhx 
PrioritynormalSeverityminorReproducibilityalways
StatusclosedResolutionfixed 
PlatformOSUbuntuOS Version10.4.2
Product Version1.2.5 
Target Version1.2.6Fixed in Version1.2.6 
Summary0012998: Reset Button with HTTP_AUTH authentication
DescriptionHello,

related to the Committed Patch at Bug ID 12534:
the Reset button is available by using HTTP_AUTH but the password can not reset be Mantis. I recommend to use the existing function "auth_can_change_password" by replacing at manage_user_edit_page.php Line 181:
- <?php if( !$t_ldap ) { ?>
+ <?php if ( helper_call_custom_function( 'auth_can_change_password', array() ) ) { ?>
This function is also used at account_page.php.

If this is not working, please check to Bug ID 12997.

Regards Tino
Steps To ReproduceConfigure HTTP_AUTH - authentication and you'll see the "reset password" button in the user management page (manage_user_edit_page.php). But Mantis is not able to change the password.
Tags2.0.x check, patch
Attached Files

- Relationships
related to 0015721new Functionality to consider porting to master-2.0.x 
related to 0012534closeddhx When using LDAP, the "Reset Password" function should be disabled 
related to 0013690closeddregad When using LDAP, administrator can't reset "failed_login_count" any more 

-  Notes
User avatar (0029141)
dhx (developer)
2011-07-12 05:38

Thanks Tino, I've committed the patch.
User avatar (0036393)
grangeway (developer)
2013-04-05 17:57

Marking as 'acknowledged' not resolved/closed to track that change gets ported to master-2.0.x branch

- Related Changesets
MantisBT: master aa48e0c7
Timestamp: 2011-07-12 09:34:42
Author: dhx
Details ] Diff ]
Fix 0012998: Password reset button should be hidden for HTTP_AUTH method

If MantisBT is configured with the HTTP_AUTH method for user
authentication, passwords cannot be reset by MantisBT. The passwords are
managed externally to MantisBT in this instance.

Therefore do not offer managers the ability to reset passwords when
HTTP_AUTH is set as the authentication mechanism.

Thanks to Tino Böhme for reporting this issue and providing a patch.
mod - manage_user_edit_page.php Diff ] File ]
mod - manage_user_reset.php Diff ] File ]
MantisBT: master-1.2.x 3eaa71f7
Timestamp: 2011-07-12 09:34:42
Author: dhx
Details ] Diff ]
Fix 0012998: Password reset button should be hidden for HTTP_AUTH method

If MantisBT is configured with the HTTP_AUTH method for user
authentication, passwords cannot be reset by MantisBT. The passwords are
managed externally to MantisBT in this instance.

Therefore do not offer managers the ability to reset passwords when
HTTP_AUTH is set as the authentication mechanism.

Thanks to Tino Böhme for reporting this issue and providing a patch.
mod - manage_user_reset.php Diff ] File ]
mod - manage_user_edit_page.php Diff ] File ]

- Issue History
Date Modified Username Field Change
2011-05-14 12:28 tino New Issue
2011-07-12 05:24 dhx Assigned To => dhx
2011-07-12 05:24 dhx Status new => assigned
2011-07-12 05:24 dhx Target Version => 1.2.6
2011-07-12 05:38 dhx Changeset attached => MantisBT master aa48e0c7
2011-07-12 05:38 dhx Changeset attached => MantisBT master-1.2.x 3eaa71f7
2011-07-12 05:38 dhx Resolution open => fixed
2011-07-12 05:38 dhx Fixed in Version => 1.2.6
2011-07-12 05:38 dhx Note Added: 0029141
2011-07-12 05:38 dhx Status assigned => resolved
2011-07-12 05:39 dhx Relationship added related to 0012534
2011-07-12 05:40 dhx Tag Attached: patch
2011-07-26 09:53 jreese Status resolved => closed
2011-12-19 09:43 dregad Relationship added related to 0013690
2013-04-05 17:57 grangeway Status closed => acknowledged
2013-04-05 17:57 grangeway Note Added: 0036393
2013-04-05 18:13 grangeway Relationship added related to 0015721
2013-04-06 03:43 dregad Status acknowledged => closed
2013-04-06 07:22 grangeway Status closed => acknowledged
2013-04-06 09:22 dregad Tag Attached: 2.0.x check
2013-04-06 09:23 dregad Status acknowledged => closed


MantisBT 1.2.16dev master-1.2.x-05091f5 [^]
Copyright © 2000 - 2013 MantisBT Team
Time: 0.0978 seconds.
memory usage: 2,847 KB
Powered by Mantis Bugtracker