1905549 - Bad password management in newsgroups

Status: RESOLVED DUPLICATE of bug 1905480

(Thunderbird :: Untriaged, defect)

Description

[Miguel J]

Steps to reproduce:

There are several symptoms but I think it is better to group them into the same bug.

1. Not prompting for a new password when the current one is rejected

• WHAT I DID:
  • check "Always request authentication when connecting to this server" in Account Settings / the News account / Server Settings
  • using password manager, set a bad password for the News account
  • restart Thunderbird
  • try to access the News account
• WHAT HAPPENED
  • Thunderbird sends the bad password (verified by Wireshark)
  • the News server answers "502 news-4.free.fr: Access denied to your node - [e-mail]"
  • Thunderbird displays a message box:
    "Alert"
    "A News (NNTP) error occurred: news-4.free.fr: Access denied to your node - [e-mail]"
    "OK"
• WHAT SHOULD HAVE HAPPENED:
  • The message should not propose "OK", but 3 choices, the same as for e-mail accounts in IMAP configuration (note that the behavior is buggy also for POP3 accounts):
    "Enter New Password" / "Cancel" / "Retry"

2. GUI/usability: no easy way to set the login and password for a News account

• WHAT THERE IS:
  • there is a checkbox "Always request authentication when connecting to this server" in Account Settings / the News account / Server Settings
  • the login and password can be seen and modified in the password manager only
• WHAT THERE SHOULD BE:
  • in Account Settings / the News account / Server Settings: have an input field "User Name" for the login, as for the IMAP and POP3 accounts

3. When the News password is modified or deleted, the old one is still used until Thunderbird is restarted:

• WHAT I DID:
  • check "Always request authentication when connecting to this server" and enter the News password
  • use the password manager and delete the News password
  • access the News account
• WHAT HAPPENED:
  • Thunderbird still sends the password that I have just deleted (verified by Wireshark)
• WHAT SHOULD HAVE HAPPENED:
  • Thunderbird should not send any password (but request a new one)

4. When no password at startup, double password request

• WHAT I DID:
  • check "Always request authentication when connecting to this server"
  • using the password manager, delete the News password line
  • restart Thunderbird
  • access the News account
• WHAT HAPPENED:
  • Thunderbird displays TWO identical and superimposed message boxes asking for the Username and the Password
  • The message box above works normally: filling it is sufficient (the message box below can then be cancelled and the password will still be saved)
  • The message box below does not work (while the above one is displayed): I can fill the "Username" and the "Password" fields, but the checkbox "Use Password Manager to remember this password", the "OK" and the "Cancel" buttons, are inactive (not greyed out but with no effect)
• WHAT SHOULD HAVE HAPPENED:
  • just one message box should be displayed

5. Old password stored for a Newsgroups ("News") account [Not serious / not confirmed / possible bug from an old Thunderbird version but solved in current version]

• WHAT I DID:
  • I used several e-mail accounts for many years, sometimes changing the passwords
  • I configured a News account many years ago, without ever using any password
  • today, I checked "Always request authentication when connecting to this server"
• WHAT HAPPENED:
  • Thunderbird tried to connect to the News server using the ID of my first e-mail account, and an old password of this account (modified 6 months ago) (verified by Wireshark)
• WHAT SHOULD HAVE HAPPENED:
  • Thunderbird should have asked for an ID and a password
  • it should not have remembered the password of an e-mail account at any time

Actual results:

see above

Expected results:

see above