Open Bug 1652230 Opened 2 years ago Updated 25 days ago

After changing user name in account settings, password manager saves stale username (account's email address) for POP account and seems to use that

Categories

(Thunderbird :: Preferences, defect)

defect

Tracking

(Not tracked)

People

(Reporter: fernm, Unassigned)

References

Details

Attachments

(5 files)

User Agent: Mozilla/5.0 (X11; Linux x86_64; rv:68.0) Gecko/20100101 Firefox/68.0

Steps to reproduce:

  • Setup an mail account at a provider where the usernames are the mail addresses, and create an mail alias in the account, so you have two mail addresses (the main address and one alias address), which you can use both for POP3 access at the provider with the same password. (e.g. provider gmx.de)

  • Setup TB mail account with the alias address as account name and default identity mail address

-Setup additional identity with the providers main mail address

  • in account settings -> Server settings -> Server Type: POP Mail Server -> User Name set the main mail address (so, it differs from the account name and default identity mail address, which is the alias address)

  • right click on the mail account -> get messages (via POP3) for the account. TB opens a prompt titled "Enter your password for <main address>

  • enter the password and check "Use Password manager to remember this password"

Actual results:

The password that was given is stored in the password manager not with the username that was set as POP username in the mail account, and also stated in the password prompt (the main address), but with the alias address as username.

Expected results:

The username in the password store should be the one that was prompted for and that is set in the account setting as POP username.

Additional test:
If you now change the username in the password manager from the alias address to the main address and fetch messages again via POP3, the password prompt opens again like stated above, saying it would ask the password for the main address, but this is stored already in the password manager (since we renamed the username there), so that is a prove that not the username set in the account is used (as stated in the password prompt), but either the account name or the mail address of the default identity is used (which in both cases is the alias address)

OS: Unspecified → Linux
Hardware: Unspecified → x86_64

This worked in previous versions?

Walt, is this perhaps a Duplicate?

Flags: needinfo?(bugzilla0248)

I don't know if this worked in previous versions, did not use account creation since years.

Flags: needinfo?(bugzilla0248)

(In reply to Wayne Mery (:wsmwk) from comment #1)

This worked in previous versions?

Walt, is this perhaps a Duplicate?

Maybe Bug 1539828?

https://mzl.la/38SGZsv

Couldn't find any mentioning passwords for aliases or identities.

I tried to reproduce the bug with creation of a dummy account (advanced mode -> continue without testing real pop connection) with login2@example.com as default identity and login1@example.com as additional identity, and login1@example.com as pop username for the account, but that worked as expected, only login1@example.com was stored in the password manager.

Blocks: tb78found

(In reply to bugzilla0248 from comment #4)

I tried to reproduce the bug with creation of a dummy account (advanced mode -> continue without testing real pop connection) with login2@example.com as default identity and login1@example.com as additional identity, and login1@example.com as pop username for the account, but that worked as expected, only login1@example.com was stored in the password manager.

So are you saying it's the bug is not reproducible?

I said I could not reproduce it with dummy account.

I just now reproduced it with a real GMX mail provider account that I created only for this bug to reproduce, with the steps in my OP. See screenshots.
(GMX main account: mozillamain@gmx.de account alias address: mozillasecond@gmx.de)

Something to mention: I initially setup the TB mail account with the alias address moziallsecond@gmx.de and the wizard. Therefore the POP username was initially also moziallsecond@gmx.de.

Then I changed in the account setting the POP username from moziallsecond@gmx.de to mozillamain@gmx.de. When leaving the account preference, TB opens a message window saying "You have changed your POP settings, you maybe have to change mail address, too" or something like that, and then TB freezes. After 30 seconds I killed it. But the change had taken effect. So, there is also a crash bug.

Now I deleted the former stored moziallsecond@gmx.de user/password in the password manager.

And now the bug is there: prompt for mozillamain@gmx.de, but stored as moziallsecond@gmx.de, and that is also used, instead of the configured user name mozillamain@gmx.de.

Every time now I change the POP username in the account setting and leave the tab (see last screenshot of POP settings), the message window is shown and then TB crashes. But the username is changed afterwards.

P.S. Reproduced with TB Version 78.1.1

Attached image account identities
Flags: needinfo?(bugzilla2007)

Confirming exactly as described in comment 0 and comment 6, except for freeze/hang.

Simplified STR

  1. Have email address johndoe824@gmx.de (primary), with an alias on mail server: johndoe824second@gmx.de (alias). On server, that's one account with one password and two email addresses / user names.
  2. Use TB account wiz to set up POP account for the alias: johndoe824second@gmx.de, do not Remember password (for existing TB account, delete all account passwords in pw manager).
  3. In Account settings > ... > Server Settings, change User Name to johndoe824@gmx.de (primary user name, now different from alias email address, which is default identity of the account).
  4. Press F5 to get messages, get Enter your password for johndoe824@gmx.de (do it!), check Use Password Manager to remember this password.
  5. Check out the actual user name saved in Options > ... > Saved Passwords

Actual Result:

Saved Passwords:

  • Provider: mailbox://pop.gmx.net (mailbox://pop.gmx.net)
  • Username: johndoe824second@gmx.de (stale user name because we changed that before saving password; is it using the email address?)

Expected Result:

Saved Passwords:

  • Username: johndoe824@gmx.de

Weirdly, when you actually change the username in Saved Passwords to match the user name used by the account, it will then ask for the password.

Flags: needinfo?(bugzilla2007)

More bugs/nits in this corner:

  • When you create POP account with "Remember password", it does not create two entries for POP and SMTP in saved passwords. I could swear it created SMTP only first time I tested, but trying to reproduce, now creating POP only. I have an existing SMTP on same server (gmx), but that shouldn't matter because it's with a different user name now.
  • Removing account does not offer to remove password.
  • Strings: User Name in acct manager, but Username in password manager.
  • Strings: Saved Passwords button in options brings up Saved Logins dialog - dialog title should match button caption either way.

Another bug:

  • change user name (server settings of account settings), don't tab out, switch to Inbox tab, get messages - it asks for the old username. Then absurdly, when you cancel that, it will apply the new user name after the fact and give you the message from accounts that you've changed username and might want to change email address.
Severity: -- → S2
Status: UNCONFIRMED → NEW
Ever confirmed: true
OS: Linux → All
Hardware: x86_64 → All
Summary: account mail addr is stored as POP username instead of given POP username → After changing user name in account settings, password manager saves stale username (account's email address) for POP account and seems to use that
Severity: S2 → S3
You need to log in before you can comment on or make changes to this bug.