Project

General

Profile

Actions

Bug #77343

closed

loginSecurityLevel doesn't hold

Added by Roland Reichenauer over 7 years ago. Updated over 7 years ago.

Status:
Rejected
Priority:
Must have
Category:
Backend User Interface
Target version:
-
Start date:
2016-08-02
Due date:
% Done:

0%

Estimated time:
TYPO3 Version:
7
PHP Version:
5.5
Tags:
Complexity:
Is Regression:
No
Sprint Focus:

Description

By Login into the Install Tool the configuration variable [BE][loginSecurityLevel] is automaticly set to "rsa". Changing it to another value - for example "normal" - it will be automaticly reset by next Login into the Install Tool. I don't understand this behavour.
I set the priority to "must have" because setting this variable to "rsa" the login procedure strikes by entering the consisting Password after automatic system-logout from BE. Setting it to "normal" the login procedure give a more comprehensible bahaviour by relogin (related to Bug #75911).

My versions:
TYPO3: 7.6.10
PHP: 5.5.14


Related issues 2 (0 open2 closed)

Related to TYPO3 Core - Bug #75911: modal box to re-enter password after automatic system-logout from BE does not work - password is considered emptyClosed2016-04-25

Actions
Related to TYPO3 Core - Bug #77373: Refresh Login does not accept correct passwordClosed2016-08-03

Actions
Actions #1

Updated by Helmut Hummel over 7 years ago

  • Status changed from New to Needs Feedback

Changing it to another value - for example "normal" - it will be automaticly reset by next Login into the Install Tool. I don't understand this behavour.

This is intentionally triggered here, when rsaauth extension is loaded:

https://github.com/TYPO3/TYPO3.CMS/blob/master/typo3/sysext/install/Classes/Service/SilentConfigurationUpgradeService.php#L139-L157

I set the priority to "must have" because setting this variable to "rsa" the login procedure strikes by entering the consisting Password after automatic system-logout from BE. Setting it to "normal" the login procedure give a more comprehensible bahaviour by relogin

I don't understand this sentence. I have rsa enabled and login and re-login just works fine. So what exactly do you consider a bug? How can I reproduce what you consider a bug?

Actions #2

Updated by Helmut Hummel over 7 years ago

  • Status changed from Needs Feedback to Rejected

There is nothing to do here. Related bug was fixed, rsa config change is desired behaviour

Actions

Also available in: Atom PDF