EXT: RSA authentication

Extension Key: rsaauth

Copyright © 2009, Dmitry Dulepov, <dmitry@typo3.org>

This document is published under the Open Content License

available from http://www.opencontent.org/opl.shtml

The content of this document is related to TYPO3

- a GNU/GPL CMS/Framework available from www.typo3.org

Table of Contents

EXT: RSA authentication	1

Introduction	3

What does it do?	3

Users manual	4

Administration	5

Requirements	5

Installation	5

Activation	5

Special notes about the Frontend authentication	5

ChangeLog	6

Introduction

What does it do?

This extension adds encrypted authentication for Frontend and Backend logins to TYPO3. It is safer than plain text Frontend authentication or superchallenged Backend authentication because it uses one time generated public and private key pair. The password is encypted with a new public key each time before it is transferred over the network. Next the password is decrypted on the server using one time generated private key.

Frontend RSA authentication works with the system extension felogin only.

The extension requires either an openssl PHP module or the openssl binary to be available to TYPO3.

This extension does not change how login forms look like. Thus no screenshots available.

Bugs for the extension should be submitted to the TYPO3 bug tracker at http://bugs.typo3.org/. Questions should be submitted to the TYPO3 mailing lists.

Users manual

The extension has no user configuration. All configuration is created and managed by the TYPO3 administrator.

Administration

The extension was developed for the TYPO3 4.3. It might work with older TYPO3 versions but the TYPO3 core team does not provide any support for RSA authentication in TYPO3 versions older than 4.3.

Requirements

The extension requires either an openssl PHP module or the openssl binary to be available to TYPO3. The extension will choose the first working solution with the preference being the PHP module. If neither PHP module, nor binary is available, the extension will refuse to continue and silently fail authentications.

Installation

To install the extension, install it using the TYPO3 Extension Manager. Create necessary database tables and provide a path to the temporary directory. This path is necessary only if the extension uses the openssl binary. The path should be outside of the web server root and it should not be accessible to anyone except the web server user. If using PHP open_basedir directive, make sure that this path is included into this directive (with the slash at the end of the path).

Activation

The extension supports both Frontend and Backend authentication using public/private key pair. Both Frontend and Backend authentication must be activated separately in order to work.

To activate the extension for Frontend and/or Backend, use the TYPO3 Install tool. Login to the Install tool and select the All configuration option. Next search for the [FE][loginSecurityLevel] setting for the Frontend or for the [BE][loginSecurityLevel] setting for the Backend authentication method. Enter rsa without spaces in the setting box. New settings will be activated immediately after saving. The next user will use RSA authentication for the Frontend and/or Backend.

Special notes about the Frontend authentication

Frontend RSA authentication is supported only for the felogin system extension. It will not work with the old login form.

Since a new key pair is generated each time for the authentication, it is necessary to set the felogin plugin to the USER_INT mode. It can be accomplished by the following piece of the TypoScript:

plugin.tx_felogin_pi1 = USER_INT

The RSA authentication will not work if the felogin plugin runs as USER.

ChangeLog

Please, consult the ChangeLog file in the extension's directory.

EXT: RSA authentication	ChangeLog

6

EXT: RSA authentication

Dmitry Dulepov

2009-04-13T13:10:50