problem with HTTP_AUTH

[knumskull]

hello,

iam trying to authenticate my users on mantis via HTTP_AUTH. I auth my complete site by apache.
Mantis did not recognize my authentication and always show me login-page.

I tried with existing and non-existing user.
Where can i find some information about my issue?

All notes on the web referencing to an older version. I am using 1.2.5

has someone an idea?
regards, K.

[istvanb]

Do you mean you can not log in at all with any users?

Not sure about your problem, but maybe its related to http://www.mantisbt.org/bugs/view.php?id=11535

If so then comment the crypt as its shown in the issue. Also wondering what is your PHP version.

[knumskull]

no, thats not my problem.

I want to do login like SSO over http_auth.
I don't find any configuration hints, what i have to do.

I added following line into config_inc.php

Code: Select all

$g_login_method = 'HTTP_AUTH';


When i connect to my mantis-installation, i get the login-mask for accessing the site, but the login-information is not redirected to mantis-installation.

i hope u understand my problem.
Regards.

[atrol]

I never used HTTP_AUTH myself, probably you have to remove the quotes

Code: Select all

$g_login_method = HTTP_AUTH;


[Lapinkiller]

Indeed, HTTP_AUTH is a constant :

# login methods
define( 'PLAIN', 0 );
define( 'CRYPT', 1 );
define( 'CRYPT_FULL_SALT', 2 );
define( 'MD5', 3 );
define( 'LDAP', 4 );
define( 'BASIC_AUTH', 5 );
define( 'HTTP_AUTH', 6 );

[knumskull]

What you mean with constant?

i had a mistake above.
surely i defined it following way ...

Code: Select all

$g_login_method = 'HTTP_AUTH';

Is this in my case the right solution?
I think i am authenticated via webserver and mantis has only to use this. So if iam logged in, mantis redirect me to the main-page of my user and not showing me the login-page.

every hint is welcome.
Regards

[atrol]

Seems you did not read my post.
You have to remove the quotes

[knumskull]

@atrol:

Sorry. You're right. I did not see your post.
After I removed the quotes, my browser asking me for username & password.

But now I can't login. Mantis did not know my usernames. It is also impossible to login, after I added user in mantis manually.
It seems mantis don't know about the login-information.

Userinformation for http_auth (in apache) is coming from Kerberos-Server.