121356 - master password dialog pops up repeatedly

Status: VERIFIED DUPLICATE of bug 114895

(Core Graveyard :: Security: UI, defect, P2)

Description

[Christoph Pohl]

mozilla-psm seems to ignore the 'Master Password Timeout' setting in
Edit/Preferences/Privacy & Security/Master Passwords: I have checked 'The
first time it is needed' but especially the browser is behaving as if
switched to 'Every time it is needed'. 

Furthermore, I suspect that its not working anymore at all, because after
entering the master password and trying to submit data to a web site it pops
up again (sometimes several times) and the web site seems to receive
incorrect data, e.g. logins are rejected. 

I am using mozilla-psm 0.9.7-5 as it comes with Debian Linux 3.0 (Sid) and the
error seems to be present since 0.9.7-4, if that's of any help.

Regards, 
Christoph

Comment 1

[Christoph Pohl]

...maybe I should elaborate on this. I've played a bit more with the browser and
figured out the following:
1) Everytime I access the software security device, the master password dialog
pops up even though I configured it to 'first time'
2) Not entering the passwort (or the wrong one) doesn't give access.
3) The submitted values of stored web form fields aren't affected if access to
software security device is cancelled.
4) If the correct master password is given, stored field values are correctly
read from the software security device but the master password input dialog pops
up again (sometimes twice and even more often) after submitting these values.
Mozilla browser probably tries to store them again and has already forgotten the
master password again.

Maybe this has got to do with some broken settings but I'm not to keen on
re-creating my whole user profile!

Comment 2

[Carsten Buchenau]

- Same with Win32 Version (Mozilla/5.0 (Windows; U; Windows NT 5.0;
en-US; rv:0.9.7) Gecko/20011221)

- Applies also to configuration "It has not been used for n minutes or longer"

Comment 3

[Paul Dunbar]

I'm having the same problem under win2k, I noticed that when I turn off the
option for encrypting stored passwords, I get prompted for my password seemingly
according to my preferences.

Comment 4

[Stephane Saux]

I think this is a dupe fo 114895

Comment 5

[Christoph Pohl]

It really is a duplicate of #114895. Sorry, I did't check thoroughly before
reporting.

The following workaround worked for me (for details, see #114895):

~/.mozilla/..../prefs.js, change

user_pref("signon.expireMasterPassword", true);

to

user_pref("signon.expireMasterPassword", false);




*** This bug has been marked as a duplicate of 114895 ***

Comment 6

[John Unruh]

Verified dupe.