Correct passwords weren't acceptet

VERIFIED WORKSFORME

Status

()

Core
Security: PSM
VERIFIED WORKSFORME
16 years ago
9 years ago

People

(Reporter: Lasse, Assigned: Stephane Saux)

Tracking

1.0 Branch
psm2.1
x86
Windows NT
Points:
---

Firefox Tracking Flags

(Not tracked)

Details

(Whiteboard: need reporter & engineer feedback)

(Reporter)

Description

16 years ago
From Bugzilla Helper:
User-Agent: Mozilla/5.0 (Windows; U; WinNT4.0; en-US; rv:0.9.3) Gecko/20010801
BuildID:    2001080110

The masterpassword-management accept passphraes,
which auto-login-sites doesen't accept.
So, a set password will not be acceptet, even it is
correct.

Reproducible: Always
Steps to Reproduce:
1. Set a new masterpasswort (passphrase), for example "this is the test phase".
2. Enter a website, which is in your stored-password-database.
3. Enter the passphrase. Mozilla will say, it's wrong.
4. Go the Masterpassword-Management and change that passwort.
Enter the old passphrase, and set a new, single-password now. However,
that will work.
5. Try to enter the website again, and then enter the new, single-password.

I don't know wether the component "daemon" is correct.
(Assignee)

Comment 1

16 years ago
tested with windows x86 Build Id 2001080904.
After setting my software security device password (master password) to "this is
a test" I was able to successfully visit a site with a stored password, and
enter the master password when prompted.

Try a newer build, or maybe you didn't enter the pwd correctly (according to
your account a pwd of "a a" should fail).

Marking works for me.
Status: UNCONFIRMED → RESOLVED
Last Resolved: 16 years ago
Resolution: --- → WORKSFORME

Comment 2

16 years ago
Reporter, I'm not sure I understand step #3:

Steps to Reproduce:
1. Set a new masterpasswort (passphrase), for example "this is the test phase".
2. Enter a website, which is in your stored-password-database.
3. Enter the passphrase. Mozilla will say, it's wrong.
4. Go the Masterpassword-Management and change that passwort.
Enter the old passphrase, and set a new, single-password now. However,
that will work.
5. Try to enter the website again, and then enter the new, single-password.

I get no such dialog asking for a master password.

St├ęphane, is that a new bug?  Should we be getting a master password dialog 
whenever a stored name/password combo is about to be submit in a form where it 
has prefilled said items?
Whiteboard: need reporter & engineer feedback
(Assignee)

Comment 3

16 years ago
Chris:
Make sure you have the taks->sec&priv->pwd mng->encrypt sensitive info set.
Then store some password.
Then change master pwd to some phrase.
Restart the application.
Go to the site, you'll get prompted to enter the master pwd, and you can enter
the passphrase which is accepted, and the site pwd is filled correctly.  I don't
see a bug here, although you are right that the steps to reproduce are wrong.
You don't get prompted.
(Assignee)

Comment 4

16 years ago
Assigning target of 2.1 to all bugs fixed in the 2.1 target timeframe whose
target was not 2.1
Target Milestone: --- → 2.1

Comment 5

16 years ago
verified to work on N6 2001091703 win2000
(Assignee)

Comment 6

16 years ago
marking as verified as per cfu's comments.
Status: RESOLVED → VERIFIED

Comment 7

16 years ago
I am going to retract the "verified" status.  I realized that the very first
time I've been asked to type in that master password, it never accepts it. 
Yesterday, I just assumed that I mistyped, but today, after several try, I am
pretty certain that it doesn't accept my "this is a xxx" password on first try.
Can somebody try this out too?

Comment 8

16 years ago
ok, verified again.  The symptom I saw has little to do with this bug.  Whether
it's a bug or feature, it should be a separate thread.

Updated

13 years ago
Component: Security: PSM → Security: PSM
Product: PSM → Core

Updated

9 years ago
Version: psm1.01 → 1.0 Branch
You need to log in before you can comment on or make changes to this bug.