Closed Bug 724296 Opened 13 years ago Closed 3 years ago

Prompt for Master Password for every page in Nextcloud instance

Categories

(SeaMonkey :: Passwords & Permissions, defect)

Product:
SeaMonkey
Component:
Passwords & Permissions
Version:
SeaMonkey 2.7 Branch
Platform:
x86
macOS
Type:
defect
Priority:
Not set
Severity:
minor

Tracking

(Not tracked)

Status:
RESOLVED INCOMPLETE

People

(Reporter: srollin2, Unassigned)

Details

(Keywords: regression, regressionwindow-wanted)

User Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv:10.0) Gecko/20120129 Firefox/10.0 SeaMonkey/2.7 Build ID: 20120129110112 Steps to reproduce: Upgraded from SM 1.1.12 or thereabouts, throughout subsequent releases. Actual results: SM prompts for Master Password at a seemingly random interval into session even though Preference is set to "Ask the first time it is needed" and I have not navigated to a site which requires a Password, and/or without Mail or News Server authentication required. When this happens with a Download in progress SM freezes and I have to perform OS X Force Quit of SM, losing both the session and the download. Note - this behavior does not occur in a Profile which has no Master Password set. Expected results: SM should not request Master Password unless/as required in accord with user Preference selection.
I think I saw bugs related to this/similar issue...
Keywords: regression, regressionwindow-wanted
This is still happening under SM 2.7.2 and is becoming increasingly annoying! I've also tried the following, per suggestion - 1. Locate your profile folder. 2. Copy the lines below and paste them into a Notepad or Wordpad window: user_pref("signon.startup.prompt", false); // don't ask for master password until it's used, // bug #560793 3. Save the result as file user.js in the profile folder. 4. Terminate and then restart SeaMonkey. This has no effect - the bug still persists. I've also verified that all of these parameters are as above within the SM generated prefs.js file - thus I didn't expect it to resolve the issue, but have verified that it doesn't.
Severity: normal → major
This is still broken in SM 2.10 - in fact, it's worse in that is seems to be happening with increased frequency. Open a SM Profile with a Master Password set and sit back and wait - Master Password prompt appears for seemingly no reason. Still does not occur if no Master Password is set.
Is this possibly a duplicate of bug #560792?
(In reply to David E. Ross from comment #4) > Is this possibly a duplicate of bug #560792? I don't think so, because I get this even if I never open Mail/News during a session, and I don't require a password to use my outgoing SMTP server from my home net - i.e.; I can send but not retrieve mail without requiring a password. I've asked in the past if SM polls in the background without the user ever knowing about it, but I've never gotten a definitive answer to that question.
Still a problem in SM 2.11. SM 2.11 also freezes if a navigation pane to Attach a file to an e-mail is displayed and this occurs. Same use action is required to resolve - Force Quit SM and loose the session and all session changes/updates/progress.
Still a problem in SM 1.12.
(In reply to Rufus from comment #7) > Still a problem in SM 1.12. ...make that SM 2.12.
Still broken under SM 2.14, and now worse. In addition to the above, SM now freezes when a user menu is open (like Bookmarks) and the Master Password dialog appears without requirement - the Master Password prompt is not brought to front and remains obscured by the previous Dialog/Menu. In this case the user can click off SM to clear the obscuring Dialog and then select OK or Cancel, but has to do so without SM being in focus.
This is still broken in SM 2.15.
Still broken in SM 2.15.2.
Still broken in SM 2.16.
Is this strictly a Mac problem? Or does it also affect PCs with Windows? What about UNIX or Linux?
I'm pretty sure it's strictly a Mac problem, though I have observed that me Master Password Preference setting is also seemingly ignored in the Windows version as well. And this is still broken in SM 2.17.1.
Still broken in 2.26.1.
Still broken in 2.29.
Still broken with 2.33 or later?
Flags: needinfo?(srollin2)
Summary: SM 2.x Mac prompts for Master Password when seemingly not required → Prompt for Master Password when seemingly not required
Hard for me to tell at this point. This mostly occurs (or is most noticeable) when I have MailNews open - but my ISP has recently dropped my usenet access and I haven't found an alternative usenet provider as of yet. Once I do I can update observations. Had just updated to 2.33.1 just prior to losing my usenet access...had reverted to 2.26.1 to avoid other compounding bugs.
Flags: needinfo?(srollin2)
(In reply to Rufus from comment #18) So I will have to be patient for a while. a) May be you can gamble for a while with anews.mozilla.org> for a while? b) May be you can test some free usenet providers from <http://www.freeusenetnews.com/>, <http://www.dmoz.org/Computers/Usenet/Public_News_Servers/>, other sources? I did a quick test with <http://www.aioe.org/> an for me it looked usable. But I do not know what newsgroups you need and until now I did not test write access.
I have Master Password active since 2015-07-02, I also often work with Newsgroups, NOT reproducible with DE SeaMonkey 2.35(γ) (Windows NT 6.1; WOW64; rv:38.0 nightly by Adrian Kalla) Gecko/20100101 Build 20150616034436 (Classic Theme) on German WIN7 64bit (and some other Aurora and Trunk versions). Related to OS or User's configuration?
Hm, it MIGHT be that I also sometimes observe this problem. 1 or 2 times a week (or so) when I try to receive or send e-mail Master Password input message appears unexpectedly, although I am pretty sure that I already correctly gave the master password and already did operations requiring the master password. Unfortunately the effect appears rather seldom and I always am rather surprised, so that I never am 100% sure that I _really_ gave the MP correctly. I will continue observations, hoping to find a way to make the problem reproducible.
This generally happens to me when I'm trying to download something from a NG - I had been subscribed to a 3D artist's group and collecting 3D content, so unless I can gain access to a binary group(s) and have something to download at the rate I previously was I don't have a real way to monitor for this just now. So far with 2.33.1 in just navigating the net I don't seem to see this unless I cancel a legitimate prompt - in which case I'm told I should expect SM to continue to prompt...at some indeterminate interval, or when required. Still looking for a suitable usenet service provider...
I still see this problem every now and then, and still no way to make the problem reproducible.
(In reply to Rufus from comment #22) > Still looking for a suitable usenet service provider... We urgently need unified test conditions. Please contribute more precise information than "A 3D group", tell a NG name and NG service provider so that I can try to get a test account, if it's not free.
Flags: needinfo?(srollin2)
The NG I used to frequent and download from the most prior to losing my usenet access was alt.binaries.3d.poser, alt.binaries.3d.bryce is another. But that really doesn't matter - this happens in *any* case where there is a download in progress from a NG while using MailNews and the prompt for Master Password appears. In this case I have to Force Quit SM and lose the session - this is the most annoying case. My usenet provider was Mediacom (which is still my ISP, they just dropped usenet on me)...but I don't feel that's particularly relevant either. *OR* - I can just open the browser to any page, do nothing and walk away, and the eventually I will get a prompt for Master Password in the open Browser window - seemingly ignoring my Pref setting not to request unless needed for the first time. There is no time interval or action I can tie this to - hence "random". One thing I will add, I don't use MailNews for e-mail other than with usenet so in that light I have no idea if this could also occur when downloading an Attachment from an e-mail but I suspect it does/will. The biggest problem is making the "random" prompt occur, as you mention.
Flags: needinfo?(srollin2)
(In reply to Rufus from comment #25) "Download" means also lots of text only postings from a newsserver what needs authentication?
(In reply to Rainer Bielefeld from comment #26) > (In reply to Rufus from comment #25) > "Download" means also lots of text only postings from a newsserver what > needs authentication? What I mean is the download of an Attachment from the message - not of the message itself. Authenticated or not - if an Attachment download is in progress when one of these spurious Master Password requests happens, SM freezes and I have to force-quit, loosing the session.
Could set bug 432020 as a dependency as fixing it could maybe help identifying "who" is requesting the MP and narrowing down this bug!?

Still relevant for 70.0a1

On every page of Nextcloud master password prompt appears.
Maybe they have some hidden password input and Firefox is trying to fill it?

Well, it seems, that that problem only appears on some few particular pages?

May be you can create a Nexctcloud document in the cloud for testing?

Nope, it triggers password prompt on every page in Nextcloud instance, but you need to be logged in.
And it isn't triggered on shared folder, you can try here: https://cloud.zbin.eu/s/CAYLiRBXyzCWZde

(In reply to Revertron from comment #32)

Nope, it triggers password prompt on every page in Nextcloud instance, but you need to be logged in.
And it isn't triggered on shared folder, you can try here: https://cloud.zbin.eu/s/CAYLiRBXyzCWZde

Nextcloud pages are very few compared to the rest of the internet

Summary: Prompt for Master Password when seemingly not required → Prompt for Master Password for every page in Nextcloud instance

But we don't know that this problem exists only in Nextcloud.
Some other web-devs may use the same approach, like in NC.

Tested (In reply to Revertron from comment #32)

Nope, it triggers password prompt on every page in Nextcloud instance, but you need to be logged in.
And it isn't triggered on shared folder, you can try here: https://cloud.zbin.eu/s/CAYLiRBXyzCWZde

Sry Revertron, I quickly tested it with Nightly 70.0a1 (2019-08-16) on macOS 10.14.6 and wasn't able to reproduce it:

  1. Restarted my browser to trigger/reset MP
  2. Tried the provided link => no MP request
  3. went to another NC instance (version 15.latest) => no MP request
  4. updated the instance to 16.0.4 => no MP request

The MP prompt came eventually, I assume syncing kicked it off.

@Rainer, I would request that the subject of this ticket would be reset again to "Prompt for Master Password when seemingly not required". As described "The MP prompt came eventually, I assume syncing kicked it off."

That's what I subscribed 2 years ago for. If we want to boil it down to NC, then I would suggest to open a new ticket and link it to this one instead.

Flags: needinfo?(RainerBielefeldNG)

I will not

Severity reduced because it's unclear whether problem still does exist (due to Albert Scheiner [:alberts] Comment 35)
Without a clear step by step instruction how to reproduce the bug I won't do anything here.

Severity: major → minor
Flags: needinfo?(RainerBielefeldNG)

I've managed to find a usenet server that purports to be binary enabled, but doesn't seem to actually allow me to see any binary content, so I haven't been able to download anything and see if this is still a particular problem.

However, one thing I have noted - and I don't know just when/if this was "fixed" - is that Seamonkey no longer seems to ask for the Master Password at random intervals, which may actually be the "fix" in this case, as what was happening was that a random and unnecessary/uncalled prompt for Master Password was occurring with a download in progress from Mail/News and locking up Seamonkey. If the random prompt is no longer happening then this problem shouldn't happen either, I would think.

As an aside, I built a new Profile today and discovered that I no longer have the option to prompt for Master Password at startup or when first required. All of my legacy Profiles seem ask at first need properly now, as I had this Pref previously set. But the new one asks at startup and there appears to be no way to change that - the former User Pref setting for the choice is gone. Again, not sure exactly when this change occurred. or how it may have impacted this particular problem.

The option to ask for the master password at intervalls has been removed from Gecko so we dropped it too. I think because of this this bug also no longer occurs. If not please reopen.

Status: UNCONFIRMED → RESOLVED
Closed: 3 years ago
Resolution: --- → INCOMPLETE
You need to log in before you can comment on or make changes to this bug.