Project

General

Profile

Actions

Bug #91415

closed

After Update from 9.5.14 to 9.5.17 - backend and installer login are not working

Added by cosmoblonde GmbH almost 4 years ago. Updated almost 4 years ago.

Status:
Closed
Priority:
Should have
Assignee:
-
Category:
Authentication
Target version:
Start date:
2020-05-15
Due date:
% Done:

0%

Estimated time:
TYPO3 Version:
9
PHP Version:
7.3
Tags:
argon2, bcrypt
Complexity:
Is Regression:
Yes
Sprint Focus:

Description

We have a working site with TYPO3 9.5.14. Unfortunately the hosting provider does not support argon2. So we used the bcrypt algorithm as fallback password-hashing configuration so far like this:

$GLOBALS['TYPO3_CONF_VARS']['FE']['passwordHashing']['className'] = 'TYPO3\\CMS\\Core\\Crypto\\PasswordHashing\\BcryptPasswordHash';
$GLOBALS['TYPO3_CONF_VARS']['BE']['passwordHashing']['className'] = 'TYPO3\\CMS\\Core\\Crypto\\PasswordHashing\\BcryptPasswordHash';

After upgrading to 9.5.17 the backend login and the installer login ceased to work.
Login-Warning Mails came up with the message:

Login-attempt from x.x.x.x for username 'yyyy' with an empty password!

BE cache deletion (incl. Browser-Cache and Cookies) did not help.

After resetting the TYPO3 sources to 9.5.14 be login and installer login worked again.


Related issues 1 (0 open1 closed)

Is duplicate of TYPO3 Core - Bug #91385: JavaScript error for extensions overriding login formClosed2020-05-13

Actions
Actions

Also available in: Atom PDF