308192 - "Store Passwords in Keychain" on = causes lockout from ECU account.

Status: VERIFIED INVALID

(Camino Graveyard :: General, defect)

Description

[George Bailey]

User-Agent:       Mozilla/5.0 (Macintosh; U; PPC Mac OS X Mach-O; en-US; rv:1.7.8) Gecko/20050427 Camino/0.8.4
Build Identifier: Camino/0.8.4

East Carolina University allows three failed attempts to enter a password before
locking a use out of his/her acount (requiring the account to be unlocked by the
help desk). With "Store Password in Keychain" turned on in Camino 0.8.4,
starting Camino causes password lockout to occur after a few minutes. ECU Tech
Support reports lockout due to failed attempts to enter password. No such
attempts need to take place for this to happen. With "Store Passowrds in
Keychain" turned off, running Camino does not cause this problem. I downloaded
Camino 8.4 this morning. Previously running 8.2, which did not cause this
problem when the "Store Passwords in Keychain" feature was turned on.

Reproducible: Always

Steps to Reproduce:
1. Turn on Camino 0.8.4.
2. Turn on "Store Password in Keychain" in Preferences, Privacy.
3. After a few minutes you will be locked out of any password protected ECU
applications, such as email, that you are running (one password for all ECU
items you are now locked out of). 
(4. I have tested this: You need not have entered a password on a webpage while
viewing the page in Camino for the above to happen. Just turn Camino on, check
"Store .. . " and the effect occurs.) 

Actual Results:  
Access to ECU password protected web pages and email is blocked.
Cannot use ECU password again until Help Desk "unlocks" account.

Expected Results:  
Stored password in keychair without causing the problem described above.

I downloaded 8.4. The first place I went was Cabellas.com website. I tried
creating an account with them. I was unable to do so. The account information
(mine) page kept repeating. I checked the keychain on function during that
process. I gave up on creating a Cabellas acount. Then my email, etc. stopped
working, as described above. I had it unlocked. It happened again. I had it
unlocked with Camino off. No problem until Camino ran. I had it unlocked again.
I unchecked "Store . . . " Ran Camino: no problem with "Store . . . disabled.
(BTW, I rebooted between each attempt to figure out the problem.)

Comment 1

[Simon Fraser [no longer active]]

We're going to need to get access to the site to test this, or at least to see
the HTML/JS for the page.

Comment 2

[George Bailey]

ECU's tech people report problems with the system caused by an external attack
on the system. Thery  cannot rule out that this is the cause of the problem I
described, not Camino 8.4. While it is a big coincidence if the problem is
caused by the attack on our system, that certainly is a possibility. I had
Camino off for two hours with no problems. Turned it on and within minutes I had
lost the use of my ECU password. But maybe it was just a coincidence (no one
sees how it could be otherwise at this end).

Comment 3

[Smokey Ardisson (offline for a while; not following bugs - do not email)]

Your trouble with Cabellas.com and your mail leads me to wonder if something
might be wrong/corrupted with your keychain.

Have you tried running Keychain First Aid on your keychain? 
http://docs.info.apple.com/article.html?artnum=152252

Comment 4

[George Bailey]

The problem now seems to not be caused by Camino. It seems to be a problem with
ECU's system.