Mantis Active Directory Authentication

Mantis is a well developed and supported web based bug tracking system. The benefit of Active Directory Authenticaion is obvious but there is the added benefit that it can pull in the primary email address from Active Directory therefore ensuring the email address will allways correct for accounts that you have in mantis.

First Mantis needs php5-ldap installed

apt-get install php5-ldap

Then we need to modify /var/www/config_inc.php to add the LDAP authentication settings.

 # --- AD Auth ---
$g_login_method = LDAP;
$g_ldap_server = "ldap://domaincontroller1";
$g_ldap_port = 389;
$g_ldap_root_dn = "OU=Users,DC=Domain,DC=local";
$g_ldap_bind_dn = "CN=Mantis Service Account,OU=Service Accounts,DC=Domain,DC=local";
$g_ldap_bind_passwd ="*********";
$g_ldap_organization = "";
$g_ldap_protocol_version = 3;
$g_ldap_uid_field = "sAMAccountName";

The setting that pulls in the emails from Active Directory is:

$g_use_ldap_email = ON;

Accounts are still manually created in Mantis but it uses LDAP for authentication. Therefore the usernames need to match up correctly. When a member of staff leaves you can simply disable / delete the Active Directory account but the details will still be availible in Mantis.