Project

General

Profile

Actions
Copy link

Bug #91415

closed

After Update from 9.5.14 to 9.5.17 - backend and installer login are not working

Added by cosmoblonde GmbH almost 4 years ago. Updated almost 4 years ago.

Status:
Closed
Priority:
Should have
Assignee:
-
Category:
Authentication
Target version:
9.5.18 & 10.4.3
Start date:
2020-05-15
Due date:
% Done:

0%

Estimated time:
TYPO3 Version:
9
PHP Version:
7.3
Tags:
argon2, bcrypt
Complexity:
Is Regression:
Yes
Sprint Focus:

Description

We have a working site with TYPO3 9.5.14. Unfortunately the hosting provider does not support argon2. So we used the bcrypt algorithm as fallback password-hashing configuration so far like this:

$GLOBALS['TYPO3_CONF_VARS']['FE']['passwordHashing']['className'] = 'TYPO3\\CMS\\Core\\Crypto\\PasswordHashing\\BcryptPasswordHash';
$GLOBALS['TYPO3_CONF_VARS']['BE']['passwordHashing']['className'] = 'TYPO3\\CMS\\Core\\Crypto\\PasswordHashing\\BcryptPasswordHash';

After upgrading to 9.5.17 the backend login and the installer login ceased to work.
Login-Warning Mails came up with the message:

Login-attempt from x.x.x.x for username 'yyyy' with an empty password!

BE cache deletion (incl. Browser-Cache and Cookies) did not help.

After resetting the TYPO3 sources to 9.5.14 be login and installer login worked again.

Related issues 1 (0 open — 1 closed)

Is duplicate of TYPO3 Core - Bug #91385: JavaScript error for extensions overriding login formClosed2020-05-13

Actions
Actions
Copy link
 #1

Updated by Richard Haeser almost 4 years ago

  • Is duplicate of Bug #91396: Allow SSO authentication handlers to pass SSRF referrer checks added
Actions
Copy link
 #2

Updated by Richard Haeser almost 4 years ago

  • Is duplicate of deleted (Bug #91396: Allow SSO authentication handlers to pass SSRF referrer checks)
Actions
Copy link
 #3

Updated by Oliver Hader almost 4 years ago

Probably a custom Login.html template is used. Symptomatic empty passwords points to issue #91385

Actions
Copy link
 #4

Updated by Oliver Hader almost 4 years ago

  • Is duplicate of Bug #91385: JavaScript error for extensions overriding login form added
Actions
Copy link
 #5

Updated by Oliver Hader almost 4 years ago

  • Status changed from New to Needs Feedback
Actions
Copy link
 #6

Updated by Oliver Hader almost 4 years ago

Please report back whether v9.5 patch at https://review.typo3.org/c/Packages/TYPO3.CMS/+/64485 solves the problem in your scenario. The patch has been merged to 9.5.x Git branch already.

Actions
Copy link
 #7

Updated by Oliver Hader almost 4 years ago

Friendly reminder: Relevant changes have been merged to Git branches in between. Could you please give the TYPO3 v9.5 Git branch a try and report back in case there are additional problems? Thx in advance

Actions
Copy link
 #8

Updated by Oliver Hader almost 4 years ago

  • Status changed from Needs Feedback to Closed

Closing, most probably addressed in issue #91385

Actions
Copy link

Also available in: Atom PDF