I disagree here.
The comment of function trustExternal in DokuWiki reads:

• The function will be called with or without a set
• username. If the Username is given it was called
• from the login form and the given credentials might
• need to be checked. If no username was given it
• the function needs to check if the user is logged in
• by other means (cookie, environment).

which means this function should be able to do a login by calling Mantis' auth_attempt_login().

I went deep into it today but only reached partial solution:
Login (and logout!) is possible from wiki BUT after login I still see the login page of wiki. I have to manually change to e.g. index page to see that I'm successfully logged in.

Find the modified code in the wiki of this issue (because still being worked on)

I'm not allowed to create an wiki entry for this issue :-(

So here's a first attempt to optimise it (new lines marked with a +)

function auth_mantis(){
$this->cando['external'] = true;

• $this->cando['logoff'] = true;
  }

  /**

  • Authenticates the user using Mantis APIs.
    */
    function trustExternal($user,$pass,$sticky=false){
    global $USERINFO;
    global $conf;

• if (!empty($pass))
  auth_attempt_login($user,$pass,false);

oh sorry, I'm talking about: mantis.class.php

Maybe someone else finds the clue, why a reload is nessecary to make the login page disappear after login in.

This is working for me:
(mantis is in /mantis and dokuwiki in /mantiswiki)

RewriteCond %{QUERY_STRING} do=login
RewriteCond %{QUERY_STRING} (id=.)
RewriteRule . /mantis/login_page.php?return=/mantiswiki/doku.php?%1 [R,L]

RewriteCond %{QUERY_STRING} do=logout
RewriteRule .* /mantis/logout_page.php [R,L]

After hitting login, I can login via the mantis-login and after that I am logged in in my wiki. No reload needed. Logout also works. No wiki-login-page appears.

i agree with pluntke that this should be handled in the integration.

the htaccess solution is just a kludge (but a nice one!)

I also agree. I run Mantis on a Windows server and rewrites like the above don't work without some drama.

I can't reproduce the problem in mantis 1.1.0.
I still use the code modification mentioned in 0008277:0016008.

Can anyone else please check if this issue is solved?

... with or without my small addition?

Making these changes:

function auth_mantis(){
$this->cando['external'] = true;
$this->cando['logoff' ] = true; // module has a logoff method
}

/**

• Authenticates the user using Mantis APIs.
  */
  function trustExternal ( $user, $pass, $sticky = false )
  {
  global $USERINFO;
  global $conf;

  $ValidUser = false;

  // Has a user name been provided?
  if ( !empty ( $user ) )
  {
  // User name provided, so login via form in progress...
  // Are the specified user name and password valid?
  if ( auth_attempt_login ( $user, $pass, $sticky ) )
  {
  // Credential accepted...
  $_SERVER['REMOTE_USER'] = $user; // Set the user name (makes things work...)
  $ValidUser = true; // Report success.
  }
  else
  {
  // Invalid credentials
  if ( !$silent )
  {
  msg ( $lang [ 'badlogin' ], -1 );
  }

  $ValidUser = false;

  }
  }
  else
  {
  // No user name provided.
  // Is a user already logged in?
  if ( auth_is_user_authenticated ( ) )
  {
  // Yes, a user is logged in, so set the globals...

  $t_project_name        = getNS                    ( getID ( )       );
  $t_project_id          = project_get_id_by_name   ( $t_project_name );
  $t_access_level        = access_get_project_level ( $t_project_id   );
  $t_access_level_string = strtoupper ( get_enum_to_string ( config_get ( 'access_levels_enum_string' ),  $t_access_level ) );
  
  $USERINFO[ 'pass' ] = current_user_get_field ( 'password'             );
  $USERINFO[ 'name' ] = current_user_get_field ( 'username'             );
  $USERINFO[ 'mail' ] = current_user_get_field ( 'email'                );
  $USERINFO[ 'grps' ] = array                  ( $t_access_level_string );
  
  $_SERVER[ 'REMOTE_USER' ]                        = $USERINFO[ 'name' ];
  $_SESSION[ $conf[ 'title' ]][ 'auth' ][ 'user' ] = $USERINFO[ 'name' ];
  $_SESSION[ $conf[ 'title' ]][ 'auth' ][ 'info' ] = $USERINFO;
  
  $ValidUser = true;

  }
  else
  {
  $ValidUser = false;
  }
  }

  // Is there a valid user login?
  if ( true != $ValidUser )
  {
  // No, so make sure any existing authentication is revoked.
  auth_logoff ( );
  }

  return $ValidUser;
  }

seems to get login/logout working as expected.

trustExternal has more changes in than needed - I like a single point of exit :-) Basic change is to login if a user name is provided and set REMOTE_USER if that succeeds.

Using Apache mod_rewrite is no longer necessary.