multiple master password prompts with multiple accounts registered and prompt is ignored
Categories
(Thunderbird :: Security, defect)
Tracking
(Not tracked)
People
(Reporter: spam, Unassigned)
References
(Blocks 1 open bug)
Details
(Whiteboard: [workaround:comment 57][waiting on bug 177175])
Comment 1•14 years ago
|
||
Reporter | ||
Comment 2•14 years ago
|
||
Comment 3•14 years ago
|
||
Updated•14 years ago
|
Reporter | ||
Comment 4•14 years ago
|
||
Comment 5•14 years ago
|
||
Reporter | ||
Comment 6•14 years ago
|
||
Comment 7•14 years ago
|
||
Reporter | ||
Comment 8•14 years ago
|
||
Comment 10•14 years ago
|
||
Comment 11•14 years ago
|
||
Comment 12•14 years ago
|
||
Comment 13•14 years ago
|
||
Comment 14•14 years ago
|
||
Comment 15•14 years ago
|
||
Comment 16•13 years ago
|
||
Comment 17•13 years ago
|
||
Comment 18•13 years ago
|
||
Comment 19•13 years ago
|
||
Reporter | ||
Comment 20•13 years ago
|
||
Comment 21•13 years ago
|
||
Updated•13 years ago
|
Comment 22•13 years ago
|
||
Comment 23•11 years ago
|
||
Comment 24•11 years ago
|
||
Comment 25•11 years ago
|
||
Comment 26•11 years ago
|
||
Comment 27•11 years ago
|
||
Comment 28•11 years ago
|
||
Comment 29•11 years ago
|
||
Comment 30•10 years ago
|
||
Comment 31•10 years ago
|
||
Comment 32•10 years ago
|
||
Updated•9 years ago
|
Comment 33•9 years ago
|
||
Comment 34•9 years ago
|
||
Comment 35•9 years ago
|
||
Comment 36•9 years ago
|
||
Comment 37•9 years ago
|
||
Comment 38•9 years ago
|
||
Comment 40•8 years ago
|
||
Comment 41•8 years ago
|
||
Comment 42•8 years ago
|
||
Comment 43•7 years ago
|
||
Comment 44•7 years ago
|
||
Comment 45•7 years ago
|
||
Comment 47•7 years ago
|
||
Comment 48•7 years ago
|
||
Comment 49•7 years ago
|
||
Comment 50•7 years ago
|
||
Comment 51•7 years ago
|
||
Comment 52•7 years ago
|
||
Comment 53•7 years ago
|
||
Comment 55•7 years ago
|
||
Comment 56•7 years ago
|
||
Comment 57•7 years ago
|
||
workaround |
Updated•7 years ago
|
Comment 58•7 years ago
|
||
Comment 59•7 years ago
|
||
Comment 60•7 years ago
|
||
Comment 61•7 years ago
|
||
Comment 62•7 years ago
|
||
Comment 63•7 years ago
|
||
Comment 64•7 years ago
|
||
Comment 65•7 years ago
|
||
Comment 66•5 years ago
|
||
Same problem (4 prompts) with Thunderbird 60.6.1. MasterPassword+ seems to solve the problem. I'll test several days to be sure.
Comment 67•5 years ago
|
||
Same problem with Thunderbird 68.1.2. Unfortunately Master Password+ is not compatible so we can't have this as a workaround now.
Not sure how this has been swept aside for 9 years.
Comment 68•5 years ago
|
||
Same problem for my for Thunderbird 68.2.2.
Can masterPassword+ made suitable for Thunderbird 68 so that this will solve the problem?
Comment 69•5 years ago
|
||
Any other workaround now that Master Password+ is dead?
Could the Mozilla team finally take care of this problem?
Comment 70•5 years ago
|
||
(In reply to Stephaen from comment #69)
Any other workaround now that Master Password+ is dead?
Could the Mozilla team finally take care of this problem?
Just saw your comment above. Was somewhat surprised I'm still subscribed to the bug feed.
The Mozilla team has -- repeatedly -- flatly denied this is a problem and refused to deal with it.
"The user is wrong; we're right, now get over it."
I did. I no longer use Thunderbird, and was personally responsible for a certain organization withdrawing their support from the project because of this pervasive attitude. Do yourself a favor and find some replacement software built by a team that cares what their users think.
Comment 71•5 years ago
|
||
Alright, to add insult to injury, I'll close the bug to add some more denial :-( <-- That's actually irony, if you hadn't noticed, see below.
The facts are: The master password problem was actually fixed in bug 1176399 and for Calendar in bug 682474. Those were fixed in shipped at some stage in TB 60 and should definitely be fixed in TB 68. I personally ran a profile for a while with a master password and close to 10 IMAP accounts. I never saw a multiple MP prompt.
That said, there might be some issues still left which occur under certain circumstances. I had a long conversation about that in bug 1523120, from about bug 1523120 comment #26. That was related to a chat password. But in the end, no action was taken and the original reporter declared the bug fixed.
I'll declare this FIXED by bug 1176399.
Now, the project actually does care about its users, but we can't fix what we can't reproduce. There's also not much point of discussing this at comment #71 of a bug report. So PLEASE: If you have a reproducible case of multiple master passwords that you can reproduce on a fresh profile, please file a new bug with the absolute exact steps to reproduce. It's no good saying that it happens on a profile from 1999 that came from Netscape and was migrated various times over the last 20 years.
Comment 72•5 years ago
|
||
As one of the people previously affected by this, I can confirm that I stopped getting multiple password prompts quite some time ago.
Comment 73•5 years ago
|
||
I find this incredibly easy to reproduce.
- Add multiple IMAP accounts.
- Have them all "check for new messages on start up"
- Have them all "check for messages every 5 minutes" (The time doesn't really matter. I don't think this setting really matters, but I always have it on.)
- Optional: Edit some of the IMAP folders to enable "When getting new messages for this account, always check this folder".
The age of the profile doesn't seem to have any relevance.
So far to date the best workaround I've come across is switching off "check for new messages on start up" on all accounts.
Comment 74•5 years ago
|
||
Well, as I said in comment #71: I personally ran a profile for a while with a master password and close to 10 IMAP accounts. I never saw a multiple MP prompt.
Yes, and by default that was set to checking at startup and checking every five minutes or so.
Comment 75•5 years ago
|
||
(In reply to Adam Reece from comment #73)
I find this incredibly easy to reproduce.
- Add multiple IMAP accounts.
- Have them all "check for new messages on start up"
- Have them all "check for messages every 5 minutes" (The time doesn't really matter. I don't think this setting really matters, but I always have it on.)
- Optional: Edit some of the IMAP folders to enable "When getting new messages for this account, always check this folder".
The age of the profile doesn't seem to have any relevance.
So far to date the best workaround I've come across is switching off "check for new messages on start up" on all accounts.
Although it doesn't seem like it should matter, could this be an IMAP v POP3 issue?
I had this problem with my POP3 addresses (I have no IMAP addresses). My work-around was to not check for new messages from any of these accounts, and check every 5 minutes after that. That stopped the multiple master password word prompts. Later, when this bug was claimed to be fixed, I reverted to to check for new messages on startup, and, as claimed, the problem had been fixed for me.
Comment 76•5 years ago
|
||
OK, I checked this again. 9 IMAP accounts, all checking at startup, then every three minutes. I enter the MP once at startup, the end. I see no more prompts. As I said: Please set up maybe two of your IMAP accounts on a new profile.
Comment 77•5 years ago
|
||
(In reply to Jorg K (GMT+1) (PTO to 5th Jan 2020, sporadically reading bugmail) from comment #74)
Well, as I said in comment #71: I personally ran a profile for a while with a master password and close to 10 IMAP accounts. I never saw a multiple MP prompt.
Yes, and by default that was set to checking at startup and checking every five minutes or so.
Jorg, my post collided with yours, so I did not see your post about this working for you with close to 10 IMAP accounts. So, clearly not a IMAP v POP3 issue.
Comment 78•5 years ago
|
||
(In reply to Jorg K (GMT+1) (PTO to 5th Jan 2020, sporadically reading bugmail) from comment #71)
we can't fix what we can't reproduce.
Fair enough.
If you have a reproducible case of multiple master passwords that you can reproduce on a fresh profile, please file a new bug with the absolute exact steps to reproduce. It's no good saying that it happens on a profile from 1999 that came from Netscape and was migrated various times over the last 20 years.
Hey Jorg, is there an easy way to see how old a profile is? I think mine is max. ~3 years old, but not 100% certain.
Setup
TB 68.3.1 on macOS 10.14;
4 IMAP accounts
1 Chat account
3 Calendars
Current MPW prompts
- Password prompt #1 comes up and disappears
- #2 appears and sticks => entering pw and
enter
- #3 (#1?) appears => hit
esc
- #4 appears and disappears (likely for the chat in #5)
- #5 says it’s for Gmail (chat) => hit
esc
- #6 (#4?) appears => hit
esc
- open chat tab > click "Show chat status" and hit connect (no pw entry needed)
Test Case
If I uncheck "sign-on at startup" for the chat only steps 1 - 3 are required / show up.
Note: Contrary to Adam Reece's work-around above unchecking all "check for new messages on start up" had no additional effect, neither had switching off all calendars.
Comment 79•5 years ago
|
||
I am annoyed by this bug, too. I still see this bug, too. Jörg, I cannot confirm your claim that it's fixed. The trouble is that the fix isn't easy.
I just reproduced it in the following way:
- latest TB 68.x
- setup email account
- add XMPP chat account
- set master password
- restart
I get three prompts for the MP
Comment 80•5 years ago
|
||
Well, OK, that's bug 1199607. Please go and fix it over there.
Comment 81•5 years ago
|
||
This bug has never been fixed and is going worse. Here is my use case to reproduce it:
- My Mac (macOS 10.13 High Sierra) starts at 12:00 in the office and starts last Thunderbird for Mac
- I come in the office between 13:30 and 14:00
- There are between 10/15 Master Password prompts waiting for me
Notes:
- I just use 5 IMAP accounts and 3 local calendars, no XMPP chat account, or anything else
- Settings are "I sign-on and check all new messages at start-up and every minute"
- For about 1 or 2 years, I had only 2 MP prompts, now much more
- The only workaround is to force quit TB and restart it to only enter 1 or 2 MP
Comment 82•5 years ago
|
||
I was getting multiple password prompts and decided to create a new profile ( as I wasn't sure how old my prior one was ) and readded my mail accounts. With the new profile so far I am only getting a single MP prompt. So it does seem worthwhile reproducing from a brand new profile.
Comment 83•5 years ago
|
||
Thanks, Nick. Yes, "seasoned" profiles can contain detritus that can cause a lot of weird and "wonderful" stuff.
Comment 84•5 years ago
|
||
(In reply to Jorg K (GMT+1) (PTO to 5th Jan 2020, sporadically reading bugmail) from comment #83)
Thanks, Nick. Yes, "seasoned" profiles can contain detritus that can cause a lot of weird and "wonderful" stuff.
Is there any way of determining profile creation date out of curiosity?
Thanks!.
Comment 85•5 years ago
|
||
Not that I know. I have a pretty old one. The sad thing is that TB doesn't offer a "profile refresh" like Firefox. It would be easy to clean out the detritus from a profile without having to create a new one. That clean-out would reset all the preferences but maintain the account setup, stored mail and address books (and maybe other stuff I can't think of right now, this needs a proper design, of course).
Comment 86•5 years ago
|
||
(In reply to Jorg K (GMT+1) (PTO to 5th Jan 2020, sporadically reading bugmail) from comment #85)
Not that I know. I have a pretty old one. The sad thing is that TB doesn't offer a "profile refresh" like Firefox. It would be easy to clean out the detritus from a profile without having to create a new one. That clean-out would reset all the preferences but maintain the account setup, stored mail and address books (and maybe other stuff I can't think of right now, this needs a proper design, of course).
While very rough, some of the older files in my profile date from 2011 (!) This could well explain the detritus :-)
Having just gone through the transfer - I agree it would be pretty useful to have something like that. As I use IMAP allowing mail to redownload seemed the easiest method. You would also need to include filters and potentially addons.
Comment 87•5 years ago
|
||
I can confirm that multiple MP dialogs still do appear in TB 68. I have three different IMAP account. All are set to check for new messages at some interval. The profile is not brand new, but it's only a couple of years old and has not been migrated at any time.
What happens is that on TB start, there's a single MP dialog, which is a huge improvement compared with TB 60. But if left like that for a while, TB will keep opening new MP dialogs on top of the first one, presumably on every check for new messages.
Comment 88•5 years ago
|
||
Aha, finally a case I can reproduce. Yes, with multiple IMAP accounts that all check at startup and then after some time interval, not answering the first prompt leads to a second prompt when TB goes to check again. I only see one second prompt, not multiples. Filed as bug 1606711. Looking at bug 177175 comment #368, that states that the toolkit code should be fixed to avoid a situation like this.
Comment 89•5 years ago
|
||
(In reply to Jorg K (GMT+1) (PTO to 19th Jan 2020, sporadically reading bugmail) from comment #85)
Not that I know. I have a pretty old one. The sad thing is that TB doesn't offer a "profile refresh" like Firefox. It would be easy to clean out the detritus from a profile without having to create a new one. That clean-out would reset all the preferences but maintain the account setup, stored mail and address books (and maybe other stuff I can't think of right now, this needs a proper design, of course).
Thank you Jorg & team for your patience on this thing. For me the multiple MP prompts problem was solved quite some time back, but I use exclusively POP for my 4 e-mail accounts, but also Lightning, with some means or other of synchronising Google Calendar. No chat.
I'm just posting to add a +1 for a profile clean-up tool. It seems to me that this is made even more necessary since the hard-line approach to TB / profile version compatibility which was introduced some time about 68.0. Gone are the days when you could wait out the solving of a bug in a new release by going back.
As you say, such a tool would need a lot of thought and proper design, but I think it would be worth it. <dream>Maybe it could provide a means of returning to a previous version of TB.</dream>
Comment 90•5 years ago
|
||
That dream won't come true since for some upgrades we irreversibly convert old internal data structures to new ones. We have a module that does this, see: https://searchfox.org/comm-central/rev/173cf2d391ef0874ab5bc9957f862de196c2f945/mail/base/modules/MailMigrator.jsm#116
You don't need to be a programmer to get the point. Also, between TB 68 and 72 we've migrated address books from the legacy Mork storage to Sqlite. There are also migrations happening in the underlying Mozilla platform databases, for example for security/passwords/certificates, history, etc.
Comment 91•5 years ago
|
||
Thanks for the info. I guessed as much.
All the more reason to get on to a profile clean-up tool!
Comment 92•5 years ago
|
||
Filed bug 1608031 for "refresh profile".
Comment 93•5 years ago
|
||
I can confirm that an old profile might cause the repetitive asking for a password. Mine was quite old (years at least, but so far no problems using the 32 bit TB, but changing to 64 bit and still using this old profile started the problem).
Just created a completely new profile in TB, added all my 13 imap accounts again and TB just asks for the manager password once.
Comment 94•5 years ago
|
||
Problem/Issue: Well, my problem is similar and, as stated by John (comment #89), it appears somewhere after the release of version 68. Today I run 68.5.0-64 bit (from release channel). I can confirm that it require one MP for each of my configured IMAP accounts (no request for the POP ones), reproducing the same behavior reported by Adam Reece (comment #73): at session start, I don't have to wait for the MP prompts, but they are required only once per session.
Environment: As add-ons I have Lightning (for Google calendar sync) and Google Calendar Provider (you guess it). If it matters (and I doubt it) it's a Brazilian "version".
Solution: ?
Comment 95•4 years ago
|
||
I've got the same problem in Thunderbird 78... The master password is required multiple times when starting up Thunderbird.. The old versions were able to run an add-on that fixed the problem (Master Password+), but as the add-on system has been changed there seems to be no working fix for this bug at the moment.
Comment 96•4 years ago
|
||
This was fixed for me for a long time and then it started appearing again, perhaps starting with version 78.
Comment 97•4 years ago
|
||
Updated to 78 today. It's now giving me two Master Password prompts. one before it opens and the other before login.
Comment 98•4 years ago
|
||
After I create a new profile and configured several imap accounts, all works fine everytime thunderbird is restarted: Thunderbird ask for Master Password only one time.
After install addon gContactSync Master Paswords ask for passwords two times even when gContactSync is not configured. If remove addon Thunderbird ask for password only one time when it is launched.
Thunderbird 68.10.0 (64-bit) on Kubununtu Linux 20.04 LTS
Comment 99•4 years ago
|
||
(In reply to Nigel from comment #97)
Updated to 78 today. It's now giving me two Master Password prompts. one before it opens and the other before login.
Are you using a Mac? Two prompts are expected on a Mac. (unresolved bug)
Comment 100•4 years ago
|
||
(In reply to Wayne Mery (:wsmwk) from comment #99)
(In reply to Nigel from comment #97)
Updated to 78 today. It's now giving me two Master Password prompts. one before it opens and the other before login.
Are you using a Mac? Two prompts are expected on a Mac. (unresolved bug)
Nope. Windows 10 pro.
Description
•