Closed Bug 596661 Opened 15 years ago Closed 15 years ago

Thunderbird attempts password 3 times on the mail server - Which locks out the account

Categories

(Thunderbird :: General, defect)

Product:
Thunderbird
Component:
General
Platform:
x86
Windows XP
Type:
defect
Priority:
Not set
Severity:
major

Tracking

(Not tracked)

Status:
RESOLVED INVALID

People

(Reporter: yoon, Unassigned)

Details

User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.6; en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6 Build Identifier: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.6; en-US; rv:1.9.2.8) Gecko/20100802 Thunderbird/3.1.2 When launching thunderbird, The mail client attempts authentication 3 times to our mail server in clear text. Why is this happening! If a password is incorrect, it shouldn't re-attempt to login. Instead it should fail and just re-prompt you for the password. This needs to be fixed. Last time you guys had it try twice, now its 3 times! This is unacceptable! 10:28:58.263 1 EXTAUTH yoon@cgdev.aerovironment.com(IMAP) plain password is incorrect 10:29:00.369 1 EXTAUTH yoon@cgdev.aerovironment.com(IMAP) plain password is incorrect 10:29:02.484 1 EXTAUTH yoon@test.aerovironment.com(IMAP) plain password is incorrect I see that you have SSL/TLS set into effect as one. Can we disable certain methods inside of thunderbird altogether from even trying? Reproducible: Always Steps to Reproduce: 1. uncheck save password 2. start thunderbird which prompts for password & try login with bad password 3. Account is locked out on server because of 3 attempts from Thunderbird client. Actual Results: The account gets locked out on Active directory. Expected Results: We expect the password prompt to show up on the first failure. We only announce that Plain text auth is available over SSL. But we continue to see the TLS messages showing up, which our servers authentication method doesnt support. 10:28:58.263 1 EXTAUTH yoon@cgdev.aerovironment.com(IMAP) plain password is incorrect 10:28:58.263 1 ACCOUNT(yoon@test.com) login(IMAP) from [192.168.13.221]:50795(TLS) failed. Error Code=incorrect password 10:29:00.369 1 EXTAUTH yoon@test.com(IMAP) plain password is incorrect 10:29:00.369 1 ACCOUNT(yoon@test.com) login(IMAP) from [192.168.13.221]:50795(TLS) failed. Error Code=incorrect password 10:29:02.484 1 EXTAUTH yoon@test.com(IMAP) plain password is incorrect 10:29:02.484 1 ACCOUNT(yoon@test.com) login(IMAP) from [192.168.13.221]:50795(TLS) failed. Error Code=incorrect password 10:30:49.702 3 IMAP-000023([192.168.13.221]) read failed. Error Code=TLS connection is being closed by peer
Even when I use non-ssl connection over plain imap 143 I see 3 password attempts. When using other mail clients I only see one password attempt and then the password prompt shows up. Why are you guys the only one that tries to login 3 times? If it fails, it should just be that one failure.
Severity: normal → major
Status: UNCONFIRMED → RESOLVED
Closed: 15 years ago
Resolution: --- → INVALID
You need to log in before you can comment on or make changes to this bug.