121835 - Master Password Timeout problem

Status: VERIFIED DUPLICATE of bug 114895

(Core Graveyard :: Security: UI, defect)

Description

[Kai Engert [:KaiE:]]

I have the master password timeout set to "first time". I'm using the feature to
let Mozilla remember passwords for sites I log in to.

Expected behaviour. I'm only prompted for my master password once during a session.

Actual behaviour: I'm prompted every time.

Comment 1

[Andreas Huppert]

This feature worked for me for a while. After installing IE Patch 2, I also get
asked every time. I tried to reinstall Mozilla and also reset the certificate
(using Mozilla 0.97 on W2K).

Comment 2

[Andreas Huppert]

I found a workaround: manually set the line
  user_pref("signon.expireMasterPassword", false);
in file prefs.js in your user directory.

Comment 3

[Kai Engert [:KaiE:]]

Thanks, but I wonder why this workaround is necessary.

I looked into the code and my profile, and I have currently:

user_pref("signon.expireMasterPassword", true);
user_pref("security.password_lifetime", 60);
user_pref("security.ask_for_password", 2);

With this setting, I'm always asked to enter the password.
I never have modified those strings manually, so Mozilla must have done it.

Can we assume, that a temporarily horked Mozilla version changed this in my
profile some time ago, and can we assume no RTM version will have such a profile?

I was able to correcting the profile by modifying my master password timeout
setting in the gui and switching it back.

Comment 4

[Stephen P. Morse]

You probably ran into bug 114895 at one time, and that caused the pref to get 
changed in your profile.  That bug has since been fixed.

Comment 5

[Stephen P. Morse]

In fact, I would consider this to be a dup of the bug I just mentioned.

*** This bug has been marked as a duplicate of 114895 ***

Comment 6

[John Unruh]

Verified dupe.