Bug #15435
closedThe user authentification Service fails after the user couldn't be authentificated with the first auth-method
0%
Description
The user authentification Service fails after the user couldn't be authentificated with the first auth-method. Additional Methods won't even be asked.
So I someone uses more than one authentification service the second, third, ... won't work.
File= t3lib/class.t3lib_userauth.php,
Method=checkAuthentication,
Line=392
This is caused by an wrong argument that breaks the current while - loop
if(!$this->svConfig['setup'][$this->loginType.'_fetchAllUsers']) {
break;
}
... should be...
if(!$this->svConfig['setup'][$this->loginType.'_alwaysFetchUser']) {
break;
}
... so the 'break' isn't executed, the loop goes on and additional services are called.
I have the Extensions
- LDAP_* and
- danp_sv_cryptauth
installed.
The goal is to authentificate some users against a corporate ldap directory, the other users against the Typo3 inbuild (FE) user database. The passwords aren't stored in plain text but md5 hashed.
So first the service LDAP_AUTH called. If the LDAP Authentification fails, the service danp_sv_cryptauth tries to authentificate against the inbuild user database.
The bug discribed above stops the authentification after the ldap authentification fails.
(issue imported from #M2297)