Feature #18039
closedIntegration of kb_md5fepw into SysExt felogin
0%
Description
Throughout discussion in core list I integrated superchallenged functionality of kb_md5fepw into the new sysext felogin.
As Ingmar Schlecht asked for I created own thread to easier keep track of the issue to integrate and test the patch.
The patch depends on the Bugfix in RFC #18009, which fixes that authservice misses to set security level correctly, so that md5 superchallenged additions come into use.
Please connect to issue #18009, #18009 and #18009
(issue imported from #M7241)
Files
Updated by Steffen Ritter almost 17 years ago
Added diff against current trunk... T3X file is related to older trunk version of felogin.
Updated by Steffen Ritter almost 17 years ago
Core List asked for version without Auth-Service.
So this is the adapted version, needed changes in t3lib_userauth is done in patch update #7189
Updated by Benni Mack over 16 years ago
Hey, I put this issue to Target version 4.3.0 so we don't forget about this. We really should get this in this version!
Updated by Steffen Kamper over 16 years ago
I agree, as bernhard never finished a core integration
Updated by Christian Clemens almost 16 years ago
I don't know, if this is the right place for my questions: Seems that kb_md5fepw will be integrated in TYPO 4.3.0.
But what about srfeuserregister: this extension uses kb_md5fepw, too - in order to md5-hash entered passwords in registration process. Does the new version of felogin (with integrated kb_md5fepw) support this extension, too?
And another question: with the old kb_md5fepw it is not possible to login with a username with german umlauts in it (see #9927). Will this be fixed in the new version of felogin. Or does this bug concern another developer of TYPO3 core?
Updated by Steffen Kamper almost 16 years ago
I'm willing to add md5-support direct in felogin.
If there is a bug with umlauts, please search for and describe where it fails.
Updated by Christian Clemens almost 16 years ago
@Steffen: Thank you for you answer and sorry for the late reply. A description of the mentioned "umlauts-bug" could be found in my bug report 0009927. Or what do you mean with "please search for"?
Updated by Ralf Hettinger almost 16 years ago
also, #254 is related when it comes to umlauts.
Updated by Steffen Kamper almost 16 years ago
For the moment i suggest instead of md5 the t3sec_saltedpw extension, which support salted md5-hashes and doesn't use JS. It should work with any umlauts and any charsets.
Updated by Oliver Hader almost 15 years ago
This is solved by integrating saltedpasswords as system extension into TYPO3 4.3.