Closed Bug 675834 Opened 14 years ago Closed 6 years ago

Password manager has stored the passwords, I can see them, but they are not inserted.

Categories

(Toolkit :: Password Manager, defect)

Product:
Toolkit
Component:
Password Manager
Type:
defect
Priority:
Not set
Severity:
major

Tracking

()

Status:
RESOLVED INACTIVE

People

(Reporter: steevo, Unassigned)

Details

User Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.18) Gecko/20110614 Firefox/3.6.18 ( .NET CLR 3.5.30729) Build ID: 20110614230723 Steps to reproduce: I am noticing more and more password manager failures. Where even though the password for the site url is stored it does not insert when I click on the box. It also often doesn't insert the pw when I type the username. Actual results: Test case: http://www.sce.com, or https://www.sce.com. I looked, and two entries exist for https://www.sce.com with valid usernames and password for two accounts. But neither username is inserted. I can login by typing the username and password but the browser does not offer to save the pw. Expected results: The username and pw is there, it should come out when I got to the site. That's the function of a pw manager, to insert the pw so I don't have to. There is another bug 667233 posted by me, in that I suggested the problem was a slight variation in the url, but it seems that is not the problem at all. The problem exists in much more cases than contemplated in that bug.
A debug log from the password manager would be helpful https://wiki.mozilla.org/Firefox:Password_Manager_Debugging
But even though the browser does not offer to save the pw, which is certainly a problem, this bug is about the pw manager not inserting the pw. There are stored two identical username/pw for this site but when I go to the site I have to type the pw. I am seeing this more and more.
This is happening more and more. Another test case. https://smb.att.com/ This exists in pw manager with a username and pw. The username is in the box but the pw is not inserted. This goes on all day now.
Kevin, I tried that, but I don't see how to export the log. Also, the log has no dates and times. I don't see how you can use that. Ridiculous. To test I just went to http://home.dailysteals.com/Default.aspx I clicked login. It says insert username or email. My username is already inserted, the pw is not. I typed the email. The pw is not inserted. The username/pw and the email/pw exist in the pw manager. But they are not inserted. This is broken.
Verified as WFM on: Mozilla/5.0 (Windows NT 5.1; rv:9.0a1) Gecko/20110829 Firefox/9.0a1 Mozilla/5.0 (Windows NT 6.1; rv:9.0a1) Gecko/20110825 Firefox/9.0a1 Mozilla/5.0 (X11; Linux i686 on x86_64; rv:9.0a1) Gecko/20110830 Firefox/9.0a1 Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv:9.0a1) Gecko/20110829 Firefox/9.0a1 I performed the following steps on http://home.dailysteals.com/Default.aspx, email web sites, social networking sites and shopping sites: Case1: 1. Save the credentials for a site that requires login. 2. Open the Login page from that site. Both the email/username and password were auto-completed in the corresponding text boxes. Case2: 1. Save the credentials for a site that requires login. 2. Open the Login page from that site. 3. Delete the auto-completed credentials. 4. Start typing in the email/username you saved the password for. 5. Select the email/username from the contextual drop-down. Both the email/username and password were auto-completed in the corresponding text boxes. Case3: 1. Save the credentials for a site that requires login. 2. Open the Login page from that site. 3. Delete the auto-completed credentials. 4. Type in manually the email/username you saved the password for. When finished, click outside the username text box. The password was auto-completed in the corresponding text box. When the credentials for more than one user were saved for the same web site, the log in text boxes were empty when first opening the Login page but when clicking on the username text box, a contextual menu with the saved users was displayed. When selecting a username, the corresponding password was auto-completed too. Cases 2 and 3 also worked fine for sites with multiple credentials saved.
I just tested the dailysteals site and the username and pw are indeed inserted, at least on this installation of firefox. I also tested on sce.com and the usernames and pws are not inserted on the main page. If however I insert them wrong I am taken to another sce.com page where the username and pw are indeed inserted. So: This page does not work with pw manager http://www.sce.com/ and http://www.sce.com/MySCEcom/LogOff/default.htm The both have login boxes. This page works with pw manager https://www.sce.com/sma/Auth/Login.aspx I got to that page by inserting an incorrect username and pw initially at sce.com. I still think this should always work, but someone who knows how can likely determine what's different between the two above pages.
Another test case, this one is a popup pw box that appears. http://www.ralphs.com/Pages/default.aspx Click signin below pharmacy. popover box appears says "Returning customers" I click the username and my email is inserted. Works. However the pw is not. I verified the credentials are in pw manager.
Severity: normal → major
I think the Firefox password manager is now completely broken. Not that it doesn't work sometimes, sure it does. But I find myself more and more going into the insecure password manager, reading the store username/pw for a site and having to type it manually. It just happened here, bugzilla.mozilla.org My username and pw were stored but were not inserted. Nothing I could do would insert them. I read the credentials from the pw manager and typed them and I was able to login. But the purpose of a password manager integrated to a browser is so I don't have to read them and type them. If I wanted to do that I would use a piece of paper. Hardly a solution. Broken. Completely. Now let me just say I have *many* passwords saved. It's possible it stops working in that case. Which might be why it's not working for me but it does for others.
I did some more on the debug log that Kevin suggested. www.speedtest.net : server does not support RFC 5746, see CVE-2009-3555 bugzilla.mozilla.org : server does not support RFC 5746, see CVE-2009-3555 statse.webtrendslive.com : server does not support RFC 5746, see CVE-2009-3555 wiki.mozilla.org : server does not support RFC 5746, see CVE-2009-3555 What's all that mean? Bogus errors, I suspect. I have three XP Pro systems all with the very latest version of Firefox that exhibit this behavior.
This is a little interesting. http://support.mozilla.org/en-US/questions/746438 3876 people have this problem One of the servers I posted is this bugzilla one right here. Server does not support RFC 5746, see CVE-2009-3555 When accessing option: "Personal Banking" at "www.onlinesbi.com" Firefox 3.6.8 crashes. ERROR CONSOLE displays "www.onlinesbi.com : server does not support RFC 5746, see CVE-2009-3555". OS: Windows Vista Home Premium SP-2.
(In reply to Steve from comment #9) > I did some more on the debug log that Kevin suggested. > > www.speedtest.net : server does not support RFC 5746, see CVE-2009-3555 The CVE-2009-3555 warning are not related to the password manager. If you turned on debug logging for password manager using the instructions in comment 1 then you would see entries in the error console starting with "Login Manager:". Could you please attach the error console output showing these entries?
I did turn on that debugging, but I have no entries that reference password manager. I click tools/web developer/error console to access that log. I just cleared it. I just went to godaddy.com. My username was inserted but the pw was not. To determine what it was I read it from the password manager and typed it manually. It was not inserted. I just went to sce.com My username and pw were not inserted. They are listed in pw manager. I got a number of warnings on the warnings tab referencing sce.com, but nothing on the errors or messages tab of that log. Nothing that mentions login manager. I just checked in about:config. and signon.debug and javascript.options.showInConsole are both set to true Amd I doing something wrong? BTW, I have the saved password editor 2.5 extension installed.
I was at craigslist.org. I was already logged in with a cookie. I have a number of entries in error console Login Manager: observer notified for form submission. I exited craigslist. Went back, still logged in. I logged out. The pw box has my craigslist email in the pulldown. Not sure if it's coming from autocomplete or login manager. OK, I deleted the entries from the pw box pulldown. They were probably from autocomplete. Now when I click the box nothing happens. My credentials are listed in pw manager but they are not inserted. The only messages in error console are accounts.craigslist.org : server does not support RFC 5746, see CVE-2009-3555 and Login Manager: observer notified for form submission.
Steve, does the problem happen in safe mode? https://support.mozilla.com/kb/Safe+Mode
I restarted in safe mode and nothing has changed. I went to accounts.craigslist.org Neither username or PW is inserted. I have those same two error messages in the error console. BTW, I have 5 computers that have this same problem. PW manager is unreliable. I have a hard time believing I am the only one. All XP Pro.
So no difference after I started firefox in safe mode. Any other ideas? I would like firefox to work but there are so many problems. Most of which are not being addressed by the developers. One even argued with me about the pw manager thing, it was just ridiculous. If adblock plus were ever implemented on IE I would just use that.
OK, I just paid my bill at bankofamerica.com I looked and I read and had to type the credentials from the saved password editor extension pw window. They are there but not inserted. I got this in error console Login Manager: observer notified for form submission. Lots of other errors listed, Timestamp: 4/18/2012 7:10:14 PM Warning: Error in parsing value for 'filter'. Declaration dropped. Source File: https://safe.bankofamerica.com/pa/components/modules/ REDACTED Line: 9 Timestamp: 4/18/2012 7:10:17 PM Warning: An unbalanced tree was written using document.write() causing data from the network to be reparsed. For more information https://developer.mozilla.org/en/Optimizing_Your_Pages_for_Speculative_Parsing Source File: https://offers.bankofamerica.com/NonCard/Default.aspx?token=REDACTED Line: 126 Timestamp: 4/18/2012 7:10:17 PM Warning: Expected ',' or '{' but found 'html'. Ruleset ignored due to bad selector. Source File: https://offers.bankofamerica.com/NonCard/Default.aspx?token=REDACTED Line: 174
(In reply to Steve from comment #17) Unfortunately those errors are not related to this issue. What version of Firefox are you running? It's possible you have a corrupted install that could be fixed by doing a re-install.
I have 11.0 Someone must know how to troubleshoot this, and as I said I have 5 computers acting all the same. I can't be alone. If a reinstall would fix the problem and it might, but the problem is still there and later on over time will reoccur which is probably what happened. All these installations worked but over time they all stopped, wouldn't it be much better to find out what is corrupting this and causing failure? Rather that reinstalling which is a workaround. That said some sites work fine with pw manager. Amazon.com for instance, I have no problem with that. Something about the site architecture.
But this is. Login Manager: observer notified for form submission. Is that the source of the failure?
How about this one: I go to accounts.craigslist.org Click in the login box, the email address is in a dropdown, and is inserted. It might be coming from autocomplete. The pw is not inserted. I look in my passwords and it's there but not inserted. The error console contains many messages PwMgr cryptoSDR: SDR slot status is 5 One message PwMgr mozStorage: _getAllLogins: returning 701 logins. and 5 messages of bugzilla.mozilla.org : server does not support RFC 5746, see CVE-2009-3555 after that. No other entries in the log. No entries on the error tab. Entries in the warnings tab are all about bugzilla.mozilla.org
I guess this issue is still being ignored by the developers, as well as the 3,000 other similar ones.
I now have 12.0 and same problem. PW is there in pw manager but is not inserted.
does comment 6 case 1 describe your problem?
Flags: needinfo?(steevo)

We have and are improving at lot of these cases so closing this. See bug 1147563 and bug 589628 for upcoming fixes. We handled http: => https: changes years ago.

Status: UNCONFIRMED → RESOLVED
Closed: 6 years ago
Flags: needinfo?(steevo)
Resolution: --- → INACTIVE
You need to log in before you can comment on or make changes to this bug.