Backend LDAP users with admin-flag can't access admin-modules with user password

xperseguers / t3ext-ig_ldap_sso_auth

TYPO3 Extension ig_ldap_sso_auth. This extension provides LDAP and SSO support for TYPO3.

https://extensions.typo3.org/extension/ig_ldap_sso_auth

27 stars 62 forks source link

Backend LDAP users with admin-flag can't access admin-modules with user password #148

Open jkkauhan opened 1 year ago

jkkauhan commented 1 year ago

We are authenticating backend users with ig_ldap_sso_auth and some users have their admin-flag set. When trying to access admin modules in the backend, TYPO3 v10 requests the user password again for extra security. LDAP authenticated users get message that their password is not correct, where local TYPO3 users get access to admin modules. Workaround is to use install tool password.

jpmschuler commented 1 year ago

I can confirm that for 10LTS and additionally for 11LTS using the extension in v3.7.0 - be aware that this additional re-auth is only necessary in PRODUCTION context, in DEVELOPMENT context it is skipped and you don't need to re-auth

pi-phi commented 4 months ago

Confirmation for TYPO3 11.5.35 and ig_ldap_sso_auth 3.7.1. in the log I can find: Login-attempt from 10.100.123.123, username 'pi_phi', no suitable hash method found!