Welcome to the FogBugz Knowledge Exchange

Question

1

It looks like I found a bug with the optional "Forgot password" LDAP link.

I'm running FogBugz 8.1.4 (Unix) and authenticate with open-ldap. There is an optional field in the site configuration authentication tab to define a custom "Forgot password" link. It only actually replaces the link on the main landing page. If a user follows the upper-right "Login" link or fails to log in, they will be taken to an alternate login page with the original "Forgot password" link.

I would love a work around for this until a real fix can be released if possible.

flag	asked Jan 7 2011 at 15:53 Mike Caron 579●2●6

adambox · Answer 1 · 2011-01-18 21:38:45Z UTC

1

I just tested this out with Active Directory (I don't have an LDAP setup to test quickly) and what I see is the forgot password link takes you to the normal Fogbugz page which then gives you the custom link when you use it. Is that not what you're seeing?

Update: I'm setting up a FogBugz server and LDAP setup to test this out. I will update here with what I find.

edited Jan 18 2011 at 21:38

answered Jan 7 2011 at 16:47

adambox♦♦
21k●15●48

	No, that's not what I'm seeing. Did you follow the link on the second page? And are the two pages identical? When I first go to FogBugz (logged out), I see the default landing page: FogCreek Software link on left, "Welcome to FogBugz." in the center, and "Log on to FogBugz" box on the right with the "Forgot password" link underneath. If I click on the "Forgot password" link from here I am directed to the correct custom page. – Mike Caron Jan 7 2011 at 18:37
	(CONT.) However, if I click on the "Log on" button with an incorrect user/password (or "Log On" link in the header) I am redirected to a slightly different log on page with no "Welcome..." body. Instead the logon fields are in the middle of the page and "Incorrect password or username" is in bold red text. A "Forgot password" link is still underneath, but now if I click on THIS link I am directed to the FogBugz page: fogbugz/default.asp?pg=pgForgotPassword instead of my external page. This default page is asking for Email or Name. – Mike Caron Jan 7 2011 at 18:38
	I'm not seeing this behavior with Active Directory on a FogBugz 8.2.25 Windows install. The code looks like it should be the same for LDAP. Can you try upgrading to the latest version of FogBugz and let me know if the two links are still different? – adambox♦ Jan 12 2011 at 14:59
	This happens on versions 8.1.4 (Ubuntu) and 8.2.22 (Windows). Unfortunately, I just got my 8.2.22 Kiln sandbox up and running and am not really willing to upgrade again at this point before I do some testing. It doesn't seem like any of the minor fixes in the newer versions should affect my problem in this case. It looks like I also don't have a way to test the Active Directory tab. I do notice that the optional link is not filled in for me when I switch tabs though, so the LDAP and Active Directory fields appear to be different. I am pretty convinced that this is limited to the LDAP tab. – Mike Caron Jan 13 2011 at 16:53
	I am talking to QA now about getting an LDAP server I can test against – adambox♦ Jan 15 2011 at 15:09

show 1 more comment

Mike Caron · Answer 2 · 2011-01-10 14:26:12Z UTC

This is a related question:

In the user "Options" page there is a "Password: Check to set password now" check box. This doesn't make sense for the case where FogBugz is not managing the user's account and only serves to confuse the user. I feel that this should be disabled unless the authentication method is FogBugz.

LDAP custom “Forgot password” link Bug

2 Answers