Project

General

Profile

Actions

Bug #85321

closed

"Message too long for RSA" when submitting login with felogin

Added by Daniel Hettler almost 6 years ago. Updated almost 6 years ago.

Status:
Closed
Priority:
Must have
Assignee:
-
Category:
felogin
Target version:
-
Start date:
2018-06-20
Due date:
% Done:

100%

Estimated time:
TYPO3 Version:
7
PHP Version:
5.6
Tags:
Complexity:
Is Regression:
Sprint Focus:

Description

Hello everyone,

I'm using the TYPO3 sysext felogin for some protected TYPO3 sites.
Currently in all browsers the message "Message too long for RSA" is shown when submitting the login form. On second try I'm able to login the user.

I know there were some issues in IE in the past about this topic but there aren't any solutions:
https://forge.typo3.org/issues/41079 & https://forge.typo3.org/issues/67516

The attribute data-rsa-encryption="" is set to the password field.

Deactivating autocomplete (https://twitter.com/cybersmog/status/230323910778970113?lang=de) didn't work.

Did anyone face this behaviour or can confirm that this is bug in TYPO3 7.6?

Thanks in advance!
Daniel


Files

Actions #1

Updated by Georg Ringer almost 6 years ago

  • Status changed from New to Needs Feedback

are you using some large passwords (in combination with a password manager)?

in general you shouldn't use the rsauth ext anymore but use https which protects the user data better and you avoid those issues.

Actions #2

Updated by Daniel Hettler almost 6 years ago

  • % Done changed from 0 to 100

Hello again,

thank you Georg for answering. This bug (which is not a bug) can be set to done.

Thanks a lot!

Actions #3

Updated by Wouter Wolters almost 6 years ago

  • Status changed from Needs Feedback to Closed

Closed as requested.

Actions #4

Updated by Moritz Ahl almost 6 years ago

I ran into the same issue today. I deactivated ext:rsaauth but had the problem that users weren't able to log in anymore with their old passwords.

After some research I found out that in this case you also need to set [TYPO3_CONF_VARS][FE][loginSecurityLevel] and [TYPO3_CONF_VARS][BE][loginSecurityLevel] to 'normal'.

Maybe this is saving some headache for others.

Actions

Also available in: Atom PDF