414271 - after entering bad password access to trusted site appear as anonymous

Status: RESOLVED INCOMPLETE

(SeaMonkey :: Passwords & Permissions, defect)

Description

[Franta Hanzlik]

User-Agent:       Mozilla/5.0 (X11; U; Linux i686; rv:1.9b3pre) Gecko/2008012702 SeaMonkey/2.0a1pre
Build Identifier: Mozilla/5.0 (X11; U; Linux i686; rv:1.9b3pre) Gecko/2008012702 SeaMonkey/2.0a1pre

after trying access to ftp site with non-anonymous account (by typing URL eg.
ftp://[e-mail]/ , then seamonkey prompt for password. When I enter bad
passwd, then is no chance enter correct passwd for that user - URL transform
as without username (in this case from ftp://[e-mail]/ to ftp://site.com/
and no reload nor re-entering URL help. Only possibility is exit all SM suite.


Reproducible: Always

Steps to Reproduce:
1.
2.
3.

Comment 1

[Andrew Schultz]

does ftp://user:[e-mail]/  work?

Comment 2

[Franta Hanzlik]

It behaves similarly:

1] when I type login information right, then is all OK and SM display directory listing

2] when I type bad password, SM respond "530 Login incorrect.". But simply typing ENTER at URL window cause SM continue without error and display empty directory listing.

3] when I restart SM and type SAME wrong login as in 2), then SM write no error and display empty dirlist.

Login informations are evidently somewhere cached and reused, although were bad.
I must change login and/or password to something other - when to right login,
then SM login me and display dirlist, when to bad login, then SM response is
proper "530 Login incorrect." (but after I ACK it and type again ENTER at this
wrong URL, then SM continue without error messages, with empty dirlist.

Comment 3

[Tony Mechelynck [:tonymec]]

Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9pre) Gecko/2008042306 SeaMonkey/2.0a1pre

Here is what I see (similar to what the reporter says but maybe more detailed):
1. Right-click the URL link at top of this bug ( ftp://[e-mail]/pub/ ) then "Open link in new tab".
2. (A password-entry popup comes up.) Enter anything (I used azerty which is easy to type on my fr-BE keyboard). Uncheck the Password Manager checkbox. Then click OK.
3. (Popup with error 530 comes up [Note: not a XUL error page].) Click OK.
4. (Browser page is empty and grey, as if loading had stopped before getting any data.) Click the Go button, or Reload.
6. ("Empty" directory listing, with titles and all, but no data.) Repeat step 1.
7. (No password popup. Empty directory again.) Hit Ctrl-Shift-R.
8. (Password popup comes up again.)

Aha! What Sm is "remembering" is the "empty" dirlist from the cache. I believe this is "not a bug" (INVALID) but I'm not 100% sure. Andrew, I see your name on comment #1: what do you think?

Comment 4

[Andrew Schultz]

sounds reasonable to me.  Fanta, does reload resolve the problems you're seeing?

Comment 5

[Franta Hanzlik]

No, reload doesn't nothing. Whole sequence:
1. I type ftp://[e-mail]/ as desired URL
2. in "Password requreid" popup I enter some incorrect password
3. "Alert" window with "530 Login incorrect" will appear with "OK" button
4. After clicking at "OK" , tab has name "(Untitled)" and in URL remain
   ftp://[e-mail]/
5. Then clicking on "Reload" button have no effect
6. But when clicking at URL and pressing ENTER, tab name changes to
   "Index of ftp://[e-mail]/", URL changes to "ftp://hanzlici.cz/"
   and empty directory listing appear on screen.
7. At this time only chance to enter correct password is enter URL with other
  username than first was, and after acking incorrect login type original
  username again.

Comment 6

[Tony Mechelynck [:tonymec]]

(In reply to comment #5)
> No, reload doesn't nothing. Whole sequence:
> 1. I type ftp://[e-mail]/ as desired URL
> 2. in "Password requreid" popup I enter some incorrect password
> 3. "Alert" window with "530 Login incorrect" will appear with "OK" button
> 4. After clicking at "OK" , tab has name "(Untitled)" and in URL remain
>    ftp://[e-mail]/
> 5. Then clicking on "Reload" button have no effect
> 6. But when clicking at URL and pressing ENTER, tab name changes to
>    "Index of ftp://[e-mail]/", URL changes to "ftp://hanzlici.cz/"
>    and empty directory listing appear on screen.
> 7. At this time only chance to enter correct password is enter URL with other
>   username than first was, and after acking incorrect login type original
>   username again.
> 

Clicking on Reload button (or hitting Ctrl-R) reloads the main page but doesn't invalidate the cache. As said in comment #3 item 7, to get the password prompt again you should have hit Ctrl-Shift-R, which reloads the page and all its components without using the cache for any of them.

Comment 7

[Philip Chee]

The url provided seems to be non-accesible. Please reopen once a new working test case is provided. Thanks.