Feature #18039
closed
Integration of kb_md5fepw into SysExt felogin
Added by Steffen Ritter almost 17 years ago.
Updated almost 15 years ago.
Description
Throughout discussion in core list I integrated superchallenged functionality of kb_md5fepw into the new sysext felogin.
As Ingmar Schlecht asked for I created own thread to easier keep track of the issue to integrate and test the patch.
The patch depends on the Bugfix in RFC #18009, which fixes that authservice misses to set security level correctly, so that md5 superchallenged additions come into use.
Please connect to issue #18009, #18009 and #18009
(issue imported from #M7241)
Files
Added diff against current trunk... T3X file is related to older trunk version of felogin.
Core List asked for version without Auth-Service.
So this is the adapted version, needed changes in t3lib_userauth is done in patch update #7189
Hey, I put this issue to Target version 4.3.0 so we don't forget about this. We really should get this in this version!
I agree, as bernhard never finished a core integration
I don't know, if this is the right place for my questions: Seems that kb_md5fepw will be integrated in TYPO 4.3.0.
But what about srfeuserregister: this extension uses kb_md5fepw, too - in order to md5-hash entered passwords in registration process. Does the new version of felogin (with integrated kb_md5fepw) support this extension, too?
And another question: with the old kb_md5fepw it is not possible to login with a username with german umlauts in it (see #9927). Will this be fixed in the new version of felogin. Or does this bug concern another developer of TYPO3 core?
I'm willing to add md5-support direct in felogin.
If there is a bug with umlauts, please search for and describe where it fails.
@Steffen: Thank you for you answer and sorry for the late reply. A description of the mentioned "umlauts-bug" could be found in my bug report 0009927. Or what do you mean with "please search for"?
also, #254 is related when it comes to umlauts.
For the moment i suggest instead of md5 the t3sec_saltedpw extension, which support salted md5-hashes and doesn't use JS. It should work with any umlauts and any charsets.
This is solved by integrating saltedpasswords as system extension into TYPO3 4.3.
Also available in: Atom
PDF