Closed Bug 607935 Opened 14 years ago Closed 6 years ago

after an initial incorrect password, all subsequent login attempts produce a login failure message

Categories

(Thunderbird :: Security, defect)

x86
Windows XP
defect
Not set
minor

Tracking

(Not tracked)

RESOLVED DUPLICATE of bug 516464

People

(Reporter: anthony.l.campillo, Unassigned)

References

Details

(Whiteboard: dupeme?)

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.11) Gecko/20101012 Firefox/3.6.11 ( .NET CLR 3.5.30729) Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.12) Gecko/20101027 Thunderbird/3.1.6 after Thunderbird starts, if the inocorrect password is typed in, a window pops up saying "login to server xxx.xx.xx failed". If I press the button "enter new password" and enter the correct password, I get the same message. However, if after typing in the correct password and getting that message I click "cancel", when I click the "get mail" icon, it will successfully login and retrieve my messages from the server. Reproducible: Always Steps to Reproduce: 1.start tunderbird 2.type in incorrect password at login 3.click "enter new password" 4.type in correct password at prompt. Actual Results: the message "login to server xxx.xx.xx failed" appears. If I now click cancel, and then press the get mail icon, it logs in correctly without asking me for a new password and successfully downloads my mail. Expected Results: after pressing the "enter new password" option and typing the correct password into the prompt, the login should have succeeded and any new messages should have been downloaded from the server. server settings: IMAP server, SSL/TLS, normal password
if you do the same thing but start Thunderbird in -safe-mode (http://support.mozillamessaging.com/en-US/kb/Safe+Mode) does it helps ?
Component: General → Security
QA Contact: general → thunderbird
Summary: after an initial incorrect passowrd, all subsequent login attempts produce a login failure message → after an initial incorrect password, all subsequent login attempts produce a login failure message
(In reply to comment #1) > if you do the same thing but start Thunderbird in -safe-mode > (http://support.mozillamessaging.com/en-US/kb/Safe+Mode) does it helps ? No, the result is the same.
Do you check "When getting ..., always check this folder" of many IMAP folders(Folder Properties/General) or eable hidden option for new mail check of all IMAP folders? > However, if after typing in the correct password and getting that message I click "cancel", > when I click the "get mail" icon, it will successfully login and retrieve my messages from the server. How about "Retry" instead of "cancel" at second error dialog after correct password?
(In reply to comment #3) > Do you check "When getting ..., always check this folder" of many IMAP > folders(Folder Properties/General) This option is not available on my main folder (inbox) and is unchecked on the additional folders. > or eable hidden option for new mail check of > all IMAP folders? I was unable to find this option in folder options, account settings, or options. > > How about "Retry" instead of "cancel" at second error dialog after correct > password? This still resulted in the same login failed message.
I've been having the same problem for at least a year, hoping that it will be fixed in a subsequent release. All of my accounts are on IMAP. If I enter the wrong password, it returns the "Login to server [server name] failed." Retry / Enter new password / Cancel. If you hit "Enter new password", it just keeps coming back with the same "Login...failed" box even though the password entered is correct. Also, the dialog box is not clear or intuitive: If one doesn't know that they've typed the wrong password, they think to click "Retry" which just sends the wrong password again. "Retry" can also be interpreted as "Retry the login process again" instead of "Retry the same password I typed again". The text "Enter new password" confuses users because they think it means "Change my account password" instead of "Re-input the password again". It is also confusing because it doesn't initially tell you why the log in to the server failed, only that it did.
(Quoting rsx11m from bug 244111 comment #14) > It seems to depend on the account type. My SeaMonkey profile accesses a > Gmail account whereas my Thunderbird profile accesses a non-Gmail account > (both IMAP, as said). If I start SeaMonkey with a new profile and let it > import the Thunderbird profile it behaves exactly like Thunderbird, with > delayed response and the delayed recognition of the changed password. > Conversely, Letting Thunderbird import the SeaMonkey profile with the Gmail > settings now behaves as desired, reporting the wrong password back quickly > and immediately accepting the new password from the dialog. Weird. Neither account is set up for synchronization, in case it makes a difference.
Whiteboard: dupeme?
To me the title does not reflect the true severity of the issue. As you know, password changes are part of modern on-line life. A person who is forced to change an email account password is unable to modify an existing Thunderbird configuration to access the email account. I now have email accounts in Thunderbird where I am able to modify the incoming IMAP password, but not modify the SMTP setting. So the account receives email, but I cannot reply to it. (And the fix appears to be "easy" in that the dialog's button just needs to open the password dialog as it used to.)
Basically, if there is any type of network problem so the login fails, then Thunderbird permanently loses the password from the Saved Passwords list. This is a bug, plain & simple. Saved passwords should never be changed or deleted without explicit effort by the user.
Ollie, mjburns: This bug is about passwords /typed/ every time, not /stored/ to avoid having to type it in every time to start with. So, you are talking about a different issue not covered here in this specific bug report.
I have been seeing this problem in both Thunderbird and Seamonkey, dating back about a year. Logs from my own usage show: User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:24.0) Gecko/20100101 Firefox/24.0 SeaMonkey/2.21 Mozilla/5.0 (Windows NT 6.1; WOW64; rv:33.0) Gecko/20100101 Firefox/33.0 SeaMonkey/2.30 I don't have user agent settings, but I'm seeing the same behavior dating back to Thunderbird 3.0.11 in Windows 7/64, and with both POP and IMAP connections. I also see the same in Seamonkey (from version 24.0 to current), running X64 versions in Ubuntu Linux. Steps to reproduce, in both Thunderbird and Seamonkey 1) Click "Get Messages" 2) Enter wrong password 3) When notified that login failed, enter correct password, as prompted. 4) Wait for authentication to fail -or- abort connection, using Stop button 5) When notified that login failed, cancel connection 6) Click "Get Messages" again. When step 6) is done, there is no prompt for password; instead, the authentication is done correctly, and messages are downloaded. One additional thing that I've found is that the symptoms may be specific to individual servers, although I don't have enough information to tell whether it's a specific service that's having problems, or a particular server config. In my particular case, I'm seeing this problem on servers at fastmail.fm (and I don't know what server software they run). On the other hand, I'm seeing no problems at all with servers running Zimbra (more than one provider). With Zimbra, following a failed password submission, it's not a problem to merely enter the correct password, and then authenticate. I am also seeing this problem with both POP and IMAP connections. Although most of the reports in this thread are from Thunderbird users, I believe that this one would be better classified as a MailNews Core issue.

should be fixed by bug 516464. Please comment in the bug if you still see this problem in version 60

Status: UNCONFIRMED → RESOLVED
Closed: 6 years ago
Resolution: --- → DUPLICATE
You need to log in before you can comment on or make changes to this bug.