Last Comment Bug 643265 - Multiple entry of master password required
: Multiple entry of master password required
Status: NEW
:
Product: Thunderbird
Classification: Client Software
Component: Security (show other bugs)
: 38 Branch
: All All
: -- normal with 11 votes (vote)
: ---
Assigned To: Nobody; OK to take it and work on it
:
:
Mentors:
: 673058 728654 1161937 (view as bug list)
Depends on:
Blocks: masterpassword 584014 653678 682474 1176399 1180374
  Show dependency treegraph
 
Reported: 2011-03-20 05:55 PDT by Thommie Rother
Modified: 2016-11-23 05:17 PST (History)
23 users (show)
See Also:
Crash Signature:
(edit)
QA Whiteboard:
Iteration: ---
Points: ---


Attachments

Description Thommie Rother 2011-03-20 05:55:41 PDT
Starting the TB 3.1.8, I need a three-fold entry of the master password. I tested in different situations

a) Nomal setup. Two imap accounts and three extensions: Deutsches Woerterbuch 2.0.2, Google Calendar Tab 3.5, Google Contacts 0.6.34
Result: three master password prompts

b) Two imap accounts and only one of the three extensions at a) activated
Result: two master password prompts

c) Two imap accounts and no  extensions
Result: one master password (correct behaviour)

It looks as if the extensions are requesting separate logins into the security module. The situation is the same, no matter which extension is active. Looks like a general bug in the extension integration, but on the side of TB, not on the extensions side ...
Comment 1 Ludovic Hirlimann [:Usul] 2011-03-21 05:31:42 PDT
So what extensions do trigger this ?
Comment 2 Thommie Rother 2011-03-21 11:46:48 PDT
These extensions are installed:
Deutsches Woerterbuch2.0.2, 
Google Calendar Tab 3.5, 
Google Contacts 0.6.34  https://addons.mozilla.org/de/thunderbird/addon/google-contacts/

I don't think that the "Wörterbuch" requests any authentfication. But the google extensions need to login into the google account. Google Contacts website shows no information abount login problems, I de-installed Google Calendar Tab 3.5 permanently now, but I still need three logins into the security module.I've seen similar bug reports for earlier tb releases, maybe this is a regression?

https://bugzilla.mozilla.org/show_bug.cgi?id=354658
https://bugzilla.mozilla.org/show_bug.cgi?id=549904
https://bugzilla.mozilla.org/show_bug.cgi?id=338549
https://bugzilla.mozilla.org/show_bug.cgi?id=349641
Comment 3 Ludovic Hirlimann [:Usul] 2011-03-22 06:25:58 PDT
Please contact the extensions authors as the bug ois present in their code and not in Thunderbird Core.
Comment 4 Jonathan Protzenko [:protz] 2011-04-04 07:26:45 PDT
Ludo, Google Calendar tab does nothing but open a content tab with Thunderbird's tabmail, and it's Thunderbird code that's responsible for restoring content tabs, so in a way, I guess we're responsible for this failure (which I'm experiencing too, hence my reopening this bug).

CCing standard8 and asuth who might have thoughts about this.
Comment 5 [:Aureliano Buendía] 2011-07-28 00:25:23 PDT
*** Bug 673058 has been marked as a duplicate of this bug. ***
Comment 6 James Rome 2011-12-29 07:00:39 PST
Thunderbird 9 Still has not fixed this issue which has been open for many many years now. And StartupMaster, which was a workaround is incompatible with TB9. Why not just put the StartupMaster code into Thunderbird and solve this once and for all?
Comment 7 Alexandre Bique 2012-02-22 13:34:42 PST
Hi,

I am forwarding my intervention from https://bugzilla.mozilla.org/show_bug.cgi?id=728654

aceman wrote:
> Alexandre, can you try to disable Google contact and Google Calendar?

I think that the point is (I don't know the source code) that every modules which requires an access to the security device call getSecurityInformation("key") -> "value";

And as the device is not yet opened, it opens many password prompt, you just have to make getSecurityInformation() a wrapper which checks:
 - if the security device is opened, then get the info
 - if the security device is being opened, then register to the "finished" event of the current password prompt
 - if the security device is not opened, then open it

I believe that it must be that simple. Anyway IMO it should not be possible to open many prompt at the same time to open the security device, because the security device API should do the necessary checks and synchronizations to prevent it.

So I think that I don't have to disable any add-on, because whatever the add-on I am going to install, I want my Mozilla products to prompt me 1 time at most.

Thanks.
Comment 8 James Rome 2012-02-22 13:47:27 PST
Why can't you just incorporate StartupMaster into TB. It solves the problem!  This has gone on too long, and a solution is at hand!
Comment 9 Alexandre Bique 2012-02-22 13:54:02 PST
(In reply to James Rome from comment #8)
> Why can't you just incorporate StartupMaster into TB. It solves the problem!
> This has gone on too long, and a solution is at hand!

James, I think we need to solve the problem at its root: the function which opens the security device, and I think that it could fix this bug for every Mozilla products at the same time.
Comment 10 Jonathan Protzenko [:protz] 2012-02-22 22:10:54 PST
Alexandre, I would be most happy to see you submit a patch since « [you] believe that it must be that simple. ». :-)

Thanks,

jonathan
Comment 11 Alexandre Bique 2012-02-23 00:38:35 PST
Jonathan Protzenko [:protz] from comment #10)
> Alexandre, I would be most happy to see you submit a patch since « [you]
> believe that it must be that simple. ». :-)

Jonathan, ok if you can give me a hint where this code is, I'll try to patch it.
Comment 12 Wayne Mery (:wsmwk, NI for questions) 2012-03-13 10:36:07 PDT
how is this different from bug 584014/bug 177175 ?
Comment 13 Wayne Mery (:wsmwk, NI for questions) 2013-02-13 13:16:41 PST
(In reply to Jonathan Protzenko [:protz] from comment #4)
> Ludo, Google Calendar tab does nothing but open a content tab with
> Thunderbird's tabmail, and it's Thunderbird code that's responsible for
> restoring content tabs, so in a way, I guess we're responsible for this
> failure (which I'm experiencing too, hence my reopening this bug).

then, is this not unlike bug 682474?
Comment 14 Jonathan Protzenko [:protz] 2013-02-24 07:00:29 PST
Double negation. Tricky.

Yes, it could be the same issue, but I don't think I'm qualified to be sure of that.
Comment 15 Thomas D. (needinfo?me) 2013-09-10 00:38:48 PDT
*** Bug 728654 has been marked as a duplicate of this bug. ***
Comment 16 Wayne Mery (:wsmwk, NI for questions) 2013-09-10 03:39:12 PDT
Is this bug / bug 682474 a regression?
Comment 17 shula 2013-10-28 01:15:46 PDT Comment hidden (me-too)
Comment 18 Gunnar Frenzel 2013-12-12 07:48:45 PST
I have this problem too with both Thunderbird v24.2.0 (Portable as well as "normal" standalone on a different PC).
I was running Thunderbird with 4 IMAP email accounts and never saw this problem. Then I added the following Addons (configured to connect to my gmail account for its Google calendar and contact sync):
Google Contacts v0.7.12
Inverse SOGo Connector v24.0.2
Lightning v2.6.4
Provider for Google Calendar v0.25
ThunderBirthDay v0.8.0
Since the addons are installed and active (configured to store the passwords for those that require passwords) I get 3 Master Password entering dialogs on each start of Thunderbirg (immediately after starting it, no time delay etc.)
Comment 19 Albert Scheiner [:alberts] 2015-04-10 16:05:49 PDT
Same here in TB 38 (current beta)
Comment 20 Albert Scheiner [:alberts] 2015-04-10 16:12:54 PDT
BTW, I am on OS X, not Linux
Comment 21 Thomas D. (needinfo?me) 2015-05-12 01:48:09 PDT
*** Bug 1161937 has been marked as a duplicate of this bug. ***
Comment 22 Markus Wernig 2015-08-28 11:22:29 PDT
Was fixed in 31.x, reappeared in 38.x.
Seems like a regression.
Comment 23 Felipe Micaroni Lalli 2015-09-08 11:16:54 PDT
In my case Thunderbird asks at least 4 times the master password in the begin. Also, it asks for my Google Contacts password always even I marking "remember".
Comment 24 plecto 2015-10-22 05:56:56 PDT
I'm using Thunderbird 38.3.0 on Mac OS X 10.10 and this problem has now appeared to me too. When starting Thunderbird, it asks me three times the Master Password before actually checking my email addresses. I have to add that I have just installed the Provider for Google Calendar plugin (version 1.0.4) and configured the Calendar in Thunderbird to synchronize to my Google Calendar.
Comment 25 Markus Wernig 2015-10-22 06:01:42 PDT
Just for completeness: I'n not using any of the abovementioned plugins.
Comment 26 Neustradamus 2016-05-05 04:18:04 PDT Comment hidden (me-too)
Comment 27 Kent James (:rkent) 2016-05-05 09:20:08 PDT
There has been no work done on this issue. Patches welcome.
Comment 28 Konstantin Kivi 2016-10-17 12:34:27 PDT
How can I help? I have this issue for several years. I can run debug version on my computer.

Note You need to log in before you can comment on or make changes to this bug.