[TYPO3-project-4-3] Using OpenID in combination with rsaauth and saltedpasswords

[Dmitry Dulepov]

Hi!

Marcus Krause wrote:
> I was trying to test recent OpenID patch and therefore enabled OpenID
> sysext.
> 
> As I'm working on saltedpasswords too, openid, rsaauth and
> saltedpasswords are installed and loaded.
> In addition loginSecurityLevel for FE and BE is set to rsa.
> 
> With above mentioned combination (considered to be not an unusal one),
> I'm unable to authenticate with OpenID. There's no forwarding to the
> OpenID provider and login forms simply complain about wrong credentials.
> 
> The service priorities seem to be valid.

There is an explanation:
1. OpenID has no passwords, therefore rsaauth makes no sense there.
2. RSAAuth has higher priority than OpenID, therefore it will run first and fail due to the empty password
3. saltedpw does not work with RSAAuth because it checks for the login method to be "basic" (or something like that) while with RSA it is "rsa" (or similar, do not remember). At least it was the reason when I tested it months ago.

-- 
Dmitry Dulepov
Facebook: http://www.facebook.com/dmitryd
Twitter: http://twitter.com/dmitryd
Skype: liels_bugs