378302 - Allow wildcards & password management by IP

Status: RESOLVED DUPLICATE of bug 249115

(Toolkit :: Password Manager, enhancement)

Description

[Brendan Hide]

User-Agent:       Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.8.1.3) Gecko/20060601 Firefox/2.0.0.3 (Ubuntu-edgy)
Build Identifier: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.8.1.3) Gecko/20060601 Firefox/2.0.0.3 (Ubuntu-edgy)

I work for an ISP which which has thousands of domains on many servers. Each server has its own admin password for stats or mail interfaces (each server actually only hosts one web site but with many many hostname aliases). There is no way I can effectively use the password manager at present to keep track of the password. Using the ShowIP extension I can at least find out what server I'm accessing and then just type in the "known" hostname for that server.

It would be awesome if the password manager could use an IP address (or addresses) to identify the site.

Reproducible: Always

Steps to Reproduce:
log in to site with initial hostname mail.atestsite.co.za
save password
restart firefox
open site with initial hostname mail.atestsite.co.za
open same site with never-before-used-alias hostname mail.btestsite.co.za
Actual Results:  
mail.atestsite.co.za opens fine, logs in immediately without user intervention. mail.btestsite.co.za however, does not and requires that I enter the same credentials again.

Expected Results:  
Should be an option to allow the password that is entered to be IP-specific. Login to mail.btestsite.co.za should be seamless.

Not too sure on implementation requirements. Note bug #221534 and bug #249115 (Similar problems with possibilities that the solutions may be implemented as a single feature.

Comment 1

[u279076]

Brendan, could you possibly set up some sort of a test case that we can work off of?  Or point us to a server that uses two unique URLs for the same resource?

Thanks.

Comment 2

[Brendan Hide]

Hi Anthony

I created an email login on a spare domain of mine:
bugzillatest brendan za net
http://webmail.brendan.za.net/
http://webmail.roxanne.za.net/
http://mail02.glodns.net/

password is this bug number. :)

I've reduced the diskspace limits (normally infinite) in case of abuse.

Comment 3

[Justin Dolske [:Dolske]]

This probably will depend on moving password storage to SQLite, as the current fire format is rather inflexible and a pain to deal with.

I think there's really two things involved in this bug... One is the ability to link logins on separate sites, when the underlying authentication is shared [the bonus here is that is you change your password on site-a.com, pwmgr doesn't have a stale password stored for site-b.org]. The other thing here is having the ability to specify a wildcard/IP, as a convenience to not teaching Login Manager which individual sites are linked.

I think the former is definitely something to investigate, but I'm not sure how widely useful the latter would be. [Might be something to architect in way such that an extension could enable that functionality.]

Comment 4

[Justin Dolske [:Dolske]]

Duping to 249115, as the basic idea is the same.