Closed Bug 114895 Opened 23 years ago Closed 23 years ago

keeps asking for master password when filling out online login forms

Categories

(SeaMonkey :: Passwords & Permissions, defect)

x86
Windows NT
defect
Not set
major

Tracking

(Not tracked)

VERIFIED FIXED
mozilla0.9.8

People

(Reporter: Peter, Assigned: morse)

References

()

Details

(Keywords: ecommerce, regression)

Attachments

(1 file)

Mozilla/5.0 (Windows; U; WinNT4.0; en-US; rv:0.9.6+) Gecko/20011211 Mozilla keeps asking for master password when filling out online login forms. What makes this unacceptable, is that the login fails, even if the UN and PW of the site are entered correctly. Here's an example link: https://www.gamespyid.com/login.asp?siteid=6&returl=http%3A%2F%2Fwww%2Efileplanet%2Ecom%2Findex%2Easp%3Ffile%3D62951%26download%3D1&cobrandid=filep
adding KW ecommerce because I imagine this is preventing anyone from logging in to a commerce site. PS, this was a fresh install and i created a new profile, and then copied my mail, bookmarks and addresses over.
Could you please give a detailed step-by-step procedure of exactly what you did to demonstrate the failure. I'll need that to determine if this is a bug or simply expected behavior. For example, if you have your saved data encrypted, and you go to visit a login site for the first time in a session, this is expected behavior.
RE. Comment #2: Yes I have my MPW encrypted. No, I had already entered my MPW when I checked my mail. P.S. This could (or could not) be related to bug 115019.
*** Bug 115019 has been marked as a duplicate of this bug. ***
Migrating comments from duped bug... Can no longer log into any websites!!!! - I go to the website above and enter my ID and PW - moz asks to remember it. I say yes. - the *same* page is loaded asking to log in (I therefore have no access) - The next time i load the page, moz wants my master PW (it even asks for it TWICE), even though I had *already* entered my MPW previously in mail/news to read my mail!! There seem to be 2 related issues: 1. cannot log into web sites 2. Mozilla repeatedly asks for MPW, even though it had previously been entered (to read mail).
Summary: keeps asking for master password when filling out online login forms → keeps asking for master password when filling out online login forms AND cannot log into any websites
again, comments from another dupe bug 114988 : ------------------------------------------------ Win98SE, moz trunk build 2001121203 Steps 1. Launch mozilla, using encryption for your sensitive data 2. GO to http://bugzilla.mozilla.org/enter_bug.cgi 3. You should be asked your email address and your password for bugzila's account. Enter them and let the PSM remember them. 4. Log out, close mozilla and relaunch mozilla 5. Return to http://bugzilla.mozilla.org/enter_bug.cgi 6. You should be asked your master password. Enter it and your e-mail address and password will be automatically filled. 7. Press the login button 8. The prompt asking for the master passwork appears again. Actual result : The prompt asking for the master passwork appears before filling your login info and when submitting the login info. Expected result : I should only need to enter the master password once. Additional info: I think this regressed in 20011210 build. With that particular build, the problem was even worse. In addition to the problem mentioned above, the mailnews component was asking me the master password for each of my pop3 mail accounts, when normally, entering the master password once took care of each of my mail accounts logins. With today's build, however, mailnews acts as it should, but the problem in the web site logins persists ------------------------------------------------------
*** Bug 114988 has been marked as a duplicate of this bug. ***
There is only one issue here -- the fact that the master password is being requested multiple times. And that I can confirm. The other issue -- being unable to log in -- is covered in bug 114988. I have removed that bug as being a dup of this one. And that behavior I am unable to reproduce.
Status: UNCONFIRMED → ASSIGNED
Ever confirmed: true
Target Milestone: --- → mozilla0.9.8
I'm seeing a similar issue with 12-13-13 w2k build on bugzilla, keeps telling me my username and password are invalid, but I can login bugzilla using 12-10 build just fine. possible form submittion problem again? This problem is probably not really related to Password manager, but more like form submittion and correct input.
If I could check to see the debug setting mozilla is sending the server on form submission, maybe API (maybe this is just a string issue) changed in Mozilla cause the input that is submitted do be different then what is actually typed in.
looks like bug 114339 fix is the problem because when I have password manager save my password on build 12-12 it spits it backout as one character length more than my password which has to be the '\n' character.. fix for 114339 strips this I think. PSM in build 12-13 never actually gets to saving the password correctly.
Looks like I goofed in my comment above. I referred to bug 114339 as being the one for not being able to log in to sites. Sorry, that one is a true dup of this one. I meant to say bug 115019. This bug has nothing to do with being unable to log in. Rather it has to do with repeated prompts for the master password. So comments #9 to #11 are for that bug and not this one. Revising the summary on this bug to clarify the issue.
Summary: keeps asking for master password when filling out online login forms AND cannot log into any websites → keeps asking for master password when filling out online login forms
Problem appears to be that the ask-for-master-password-every-time pref is getting stuck in the true state. See bug 87334. Still investigating to find out why.
Don't understand why yet, but what's happening is that the first time you open the master-password pref panel and click OK (even without changing any values), the ask-everytime pref is being set to true and written out to prefs.js that way. But future visits to the panel keep displaying it as false. Furthermore, if it is actually changed in the panel, the pref is not being updated although future visits to the panel will display the updated value. Basically, the pref that controls the behavior of the browser does not appear to be tied to the pref that is displayed in the pref panel.
OK, I got it. This is more belated fallout from the overall xul syntax change that hit the tree on the week-end of November 3. I was right about the problem being in the prefs panel. Indeed the ask-every-time pref for the master password was not being updated correctly when the pref panel was closed, and it was always looking like it was true, no matter how the user set it. Attaching patch to fix pref-masterpass.js so that it conforms to the new xul syntax. Also adding this pref to all.js just for completeness (not required for this bug fix).
cc'ing alecf and ssaux for reviews.
Comment on attachment 61833 [details] [diff] [review] modified for new xul syntax that was checked in on Nov 3 clean up the whitespace (i.e. add spacing in the ")true?false;" and sr=alecf
Attachment #61833 - Flags: superreview+
Still need a review on this. Have given up on ssaux (although I'll need somebody with security privileges in order to check this in). sgehani, please review.
Comment on attachment 61833 [details] [diff] [review] modified for new xul syntax that was checked in on Nov 3 r=sgehani
Attachment #61833 - Flags: review+
fix checked in.
Status: ASSIGNED → RESOLVED
Closed: 23 years ago
Resolution: --- → FIXED
I still see this on win98SE moz trunk builds 20011221 and 20011222. An example is when I try to log in my bugzilla account, I'm getting asked for the MPW before values are autpmatically filled in, and again when I press login
never mind my previous comment, I changed the pref I had for the MPW (I had it expire after a specific time) and put it back the way it was ans the problem is gone. Sorry for the spam.
*** Bug 114771 has been marked as a duplicate of this bug. ***
*** Bug 117260 has been marked as a duplicate of this bug. ***
*** Bug 117311 has been marked as a duplicate of this bug. ***
*** Bug 108377 has been marked as a duplicate of this bug. ***
*** Bug 117477 has been marked as a duplicate of this bug. ***
*** Bug 117200 has been marked as a duplicate of this bug. ***
*** Bug 117709 has been marked as a duplicate of this bug. ***
*** Bug 117741 has been marked as a duplicate of this bug. ***
*** Bug 117940 has been marked as a duplicate of this bug. ***
Bug "remains" at least up to build 2002010403 (which I currently run) untill masterpassword is reassigned (just assign the old password as new password): 1. Edit -> Preferences -> Prvacy & Security -> Master Passwords 2. Change Password 3. Enter your current masterpassword in all 3(!) fields. 4. Press Okay [5. Restart Browser - don't know if this really has to be done] 6. Be happy that everything works as expected
*** Bug 118573 has been marked as a duplicate of this bug. ***
Franz Graf: That's because the bug was causing a pref in your profile to get set incorrectly. So until you do something to correct your profile, you will continue to see the bug. I haven't analyzed it, but the steps you took might be one way to do so. An easier way is to reset the pref from the pref panel. Of course starting a new profile will also do it.
*** Bug 118803 has been marked as a duplicate of this bug. ***
Verified Fixed Win XP build 2002010803
Status: RESOLVED → VERIFIED
After running into this problem _again_ (build 2001122108) I have found out how to cause it. 1. Save a password from a web site 2. Open preferences and look at saved password (the password is not here yet) 3. Quit mozilla 4. Restart mozilla 5. Open preferences and look at saved password (the url/password is now here), as well as the bug Also note that the "re-enter" 3 times the password thing did not work for me, I have had to edit the "pref.js" by hand to fix the problem. Would it be possible to be provided with a list of all possible entries there ("Ask", "true"...) for the relevant lines ?
For anyone using 0.9.7 = 2001122108 who does not wish to wait for a later build, the hinted-at manual workaround seems to be effective: shut down, open your ~/.mozilla/..../prefs.js, change user_pref("signon.expireMasterPassword", true); to user_pref("signon.expireMasterPassword", false); and restart. Working for me so far.
This bug was just recently fixed so I would expect these older builds to still have the bug. So you could either use Jesse's suggested workaround (thanks Jesse) or grab a newer build.
And if you use the work-around, then don't go opening up the pref panel, otherwise you'll get your prefs destroyed again.
*** Bug 119188 has been marked as a duplicate of this bug. ***
*** Bug 118258 has been marked as a duplicate of this bug. ***
*** Bug 118655 has been marked as a duplicate of this bug. ***
*** Bug 121356 has been marked as a duplicate of this bug. ***
*** Bug 121835 has been marked as a duplicate of this bug. ***
I wouldn't consider this 'CLOSED'! It first appeared on my box with this build: Mozilla 0.9.7 Mozilla/5.0 (X11; U; Linux i686; en-US; rv:0.9.7) Gecko/20020121 [debian] Mozilla Debian Package 2:0.9.7-5 ...which is the most recent I was able to get for Debian 3.0
Status: VERIFIED → REOPENED
Resolution: FIXED → ---
Pohl, the bug is fixed in the most recent builds. That's what closing it out as fixed means. We do not normally go back and apply the patch to all older builds unless there was a pressing reason to do so. Therefore I'm marking this as fixed once again. Please do not reopen.
Status: REOPENED → RESOLVED
Closed: 23 years ago23 years ago
Resolution: --- → FIXED
*** Bug 122381 has been marked as a duplicate of this bug. ***
Verified Fixed Win XP build 2002012903
Status: RESOLVED → VERIFIED
Stephen, I'll refrain from reopening but consider the following: Terri Preston wrote in comment #40 (http://bugzilla.mozilla.org/show_bug.cgi?id=114895#c40) on 2002-01-08 that this bug was recently fixed. My latest build where the bug first occured was 2002-01-21 -- obviously more recent. Maybe there are even more recent fixes for this bug but I just wanted to point out that any of those before 2002-01-21 where useless for the Linux build.
*** Bug 124671 has been marked as a duplicate of this bug. ***
*** Bug 127667 has been marked as a duplicate of this bug. ***
morse@netscape.com 2002-02-25 08:13 wrote on bug #127667 > This problem has been fixed. However, once it started happening, it horked > your preferences, so you will keep seeing it even with later builds. Start > a new profile and the problem will go away. See comment 35 in bug 114895. Thank you for pointing me to the resolution, and I'm sorry I didn't locate it in bugzilla; that must have been because the default query doesn't search for VERIFIED FIXED status bugs. I found that if I simply re-set the master password to empty and then set it again to my desired password it started working.
*** Bug 127896 has been marked as a duplicate of this bug. ***
*** Bug 133943 has been marked as a duplicate of this bug. ***
Product: Browser → Seamonkey
> Win98SE, moz trunk build 2001121203 > > Steps > 1. Launch mozilla, using encryption for your sensitive data > 2. GO to http://bugzilla.mozilla.org/enter_bug.cgi > 3. You should be asked your email address and your password for bugzila's > account. Enter them and let the PSM remember them. > 4. Log out, close mozilla and relaunch mozilla > 5. Return to http://bugzilla.mozilla.org/enter_bug.cgi > 6. You should be asked your master password. Enter it and your e-mail address > and password will be automatically filled. > 7. Press the login button > 8. The prompt asking for the master passwork appears again. > > Actual result : The prompt asking for the master passwork appears before filling > your login info and when submitting the login info. > > Expected result : I should only need to enter the master password once. > > Additional info: I think this regressed in 20011210 build. With that particular > build, the problem was even worse. In addition to the problem mentioned above, > the mailnews component was asking me the master password for each of my pop3 > mail accounts, when normally, entering the master password once took care of > each of my mail accounts logins. With today's build, however, mailnews acts as > it should, but the problem in the web site logins persists > > ------------------------------------------------------ Incredibly, this bug is alive and well in Moz 1.8a4
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: