This is a static dump of issues in the old "Flyspray" bugtracker for DokuWiki. Bugs and feature requests
are now tracked at the issue tracker at Github.
FS#1762 password longer than 8 characters inhibits permanent login
ACL & Authentication
Users with passwords longer than 8 characters are always logged out after auth_security_timeout seconds. This should not happen when 'remember me' was clicked at login. Even when 'Allow permanent login cookies (remember me)' is disabled users are automatically logged out.
Passwords are stored in cookies. When reconstructing from the cookie something goes wrong if the password consists of more than 8 characters. I use Firefox browser 3.5.3 on Win XP, Dokuwiki 2009-02-14b on SUSE Linux Enterprise Server 11, apache version 2.2.10-2.18 with php 5.2.6.
Annother strange thing is that 'remember me' doesn't work. With passwords not longer than 8 characters users never are logged out.
Sorry, that 'remember me' at login doesn't work is not true (variable $lang['remember']). The behavior is as follows:
If checkbox 'remember me' is clicked at login your session will not been closed when you close the browser. Starting the browser again (on the same client) lets you continue the session without new login. Even when the client was down in meantime.
(German translation: "Angemeldet bleiben").
I can not reproduce this but it might be related to FS#1437.
Sorry, I run in this problem on my very first steps with dokowiki. So I did not deal with dokuwiki any more.
Not reproducable, whatever password length or auth_security_timeout value (even 0). I only reproduced it by using an external authentication method. So either it was only DokuWiki and it is fixed since than, or it is an external authentication plugin problem and the issue should be reporter to the plugin author.