Project

General

Profile

Actions

Bug #79876

closed

felogin: Authentication issue, password will be rehashed after saving user data

Added by Tabea David about 7 years ago. Updated about 7 years ago.

Status:
Closed
Priority:
Must have
Assignee:
-
Category:
felogin
Target version:
Start date:
2017-02-17
Due date:
% Done:

0%

Estimated time:
TYPO3 Version:
8
PHP Version:
7.0
Tags:
Complexity:
Is Regression:
No
Sprint Focus:

Description

If one changes something in an fe_user entry (it doesn't matter which property) the password will be rehashed and the user won't be able to login any further.

Steps to reproduce:

1. Create an fe_user, assign password (DB fe_users password: `$P$CN4GFleNMV4EWf9KDKpU1aNRdor51R.`)
2. user is able to login
3. Change First name or any other property and save it
4. have a look at the database, the password has been changed `$P$CLqlmIjC1.tEMYZLqDI1cCxgxdRbg7.`
5. the user is unable to login
6. change the password again (BE)
7. the user is able to login

Environment

- Extension rsaauth is installed
- `[FE][loginSecurityLevel] = rsa` (also tested `normal`, same issue here)
- tested on a fresh installation as well as a migrated one

One more problem:

If I disable the user, the user cannot login (password hash changed). BUT if I enter the password again (BE, edit user entry), the user is able to login even though the user is still disabled. Same counts for start- and endtime.

EDIT: The same occurs for be_users.


Files

v8felogin.jpg (43.7 KB) v8felogin.jpg Tabea David, 2017-02-17 12:37

Related issues 1 (0 open1 closed)

Is duplicate of TYPO3 Core - Bug #79714: Saving a backend user record without touching the password field, sets the password to '*********'Closed2017-02-09

Actions
Actions #1

Updated by Tabea David about 7 years ago

  • Description updated (diff)
Actions #2

Updated by Stephan Großberndt about 7 years ago

  • Status changed from New to Closed
Actions

Also available in: Atom PDF