[FLOW3-general] Authentication after database migration

Thomas Plessis t.plessis at totemnumerique.com
Tue Jul 10 17:41:45 CEST 2012


Ok, we've found the solution : The EncryptionKey file stores in "Data/Persistent" was not the same. How that key was generated?

Thomas Plessis
Développeur multimédia
--
TOTEMnumerique
9, Place St Étienne
31000 Toulouse
T. 05 61 14 64 54
F. 05 61 14 64 55

Le 10 juil. 2012 à 14:13, Thomas Plessis a écrit :

> No, i'm using FLOW3 1.0.4 and the encryption algorithm used is Pbkdf2. In the validatePassword method of Pbkdf2HashingStrategy class, the $derivedKey and the \TYPO3\FLOW3\Security\Cryptography\Algorithms::pbkdf2 result are not the same. And it's the same password, i'm sure of that. So what's could be wrong?
> 
> 
> 
> Thomas Plessis
> Développeur multimédia
> --
> TOTEMnumerique
> 9, Place St Étienne
> 31000 Toulouse
> T. 05 61 14 64 54
> F. 05 61 14 64 55
> 
> Le 10 juil. 2012 à 12:35, Robert Lemke a écrit :
> 
>> Hi Thomas,
>> 
>> On 10.07.2012, at 10:29, Thomas Plessis <t.plessis at totemnumerique.com> wrote:
>> 
>>> Since i've done a database migration, authentication of account is broken. It seems there was trouble with password hash. Maybe a wrong encoding in the database? What did you expect to do for a database migration?
>> 
>> 
>> the default hash algorithm has changed - maybe this is what you're looking for?
>> 
>> http://wiki.typo3.org/FLOW3_1.0.0_beta1#Password_hashing
>> 
>> Cheers,
>> Robert
>> 
>> -- 
>> Robert Lemke
>> Lead Developer TYPO3 Phoenix and FLOW3
>> Co-Founder TYPO3 Association
>> 
>> Blog: robertlemke.de/blog
>> Get involved: typo3.org – flow3.org
>> 
>> 
>> 
>> _______________________________________________
>> FLOW3-general mailing list
>> FLOW3-general at lists.typo3.org
>> http://lists.typo3.org/cgi-bin/mailman/listinfo/flow3-general
> 
> _______________________________________________
> FLOW3-general mailing list
> FLOW3-general at lists.typo3.org
> http://lists.typo3.org/cgi-bin/mailman/listinfo/flow3-general



More information about the FLOW3-general mailing list