1269188 - Master password must be entered for each email account in the profile

Status: RESOLVED DUPLICATE of bug 1180374

(Thunderbird :: Account Manager, defect)

Description

[David Bourguignon]

User Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:45.0) Gecko/20100101 Firefox/45.0
Build ID: 20160407164938

Steps to reproduce:

I opened Thunderbid with a profile containing four email accounts (two for Gmail).


Actual results:

I was asked for the master password four times, once for each account... Painful! :-)


Expected results:

I should have entered the master password only once for all the accounts.

Comment 1

[Corey 'linuxmodder' Sheldon]

While painful how does this make it a  security bug?  Master passwords are  generally per account or  keyring  security done right should prompt  for  separate instances.  i.e. login.keyring  defaul.keyring  johndoe.keyring would all require a new input  yes  thunderbird should only ask once  for itself to access the main keystore but  depending on your  gmail and other  emails' settings login requests on  refresh operations  may (and in my  opinion should) ask for separate instance use.

Comment 2

[David Bourguignon]

Hi Corey, you are right: I was not sure how to tag this one, so I guessed it was "Security" since it was dealing with passwords... My apologies.

However, I do not agree with your second point: the master password is not defined per email account but per Thunderbird profile. You can have several email accounts (ie. addresses) managed in the same profile.

IMHO this "feature" is a bug because it makes no sense: the master password of a Thunderbird profile is used for storing other passwords, and specifically the email accounts passwords, so why asking several times for the same password?

Thanks to you all for your time and consideration!

Comment 3

[Javi Rueda :javirid]

Hi David. Could you please test if setting different timeframes for the mail retrieval for every account makes this problem disappear?

I believe this could be a dupe of bug 177175.

Comment 4

[David Bourguignon]

Javi, I have very good news for you: recently, my Thunderbird apparently switched to "nightly builds" and at the same time the problem disappeared... Currently, it is back to the normal behavior: I am asked for the master password only once. Please do not hesitate to ask me for more details.

Comment 5

[Wayne Mery (:wsmwk)]

should be a duplicate of bug 1180374