Closed Bug 623596 Opened 14 years ago Closed 6 years ago

Caching of incorrect password causes misbehavior

Categories

(Thunderbird :: Security, defect)

x86_64
Windows 7
defect
Not set
normal

Tracking

(Not tracked)

RESOLVED DUPLICATE of bug 516464

People

(Reporter: hawk, Unassigned)

Details

(Whiteboard: dupeme)

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101207 Thunderbird/3.1.7 After entering wrong password to mail account it is somehow cached. Lets say I've entered bad password. There are three things that shouldn't happen, but they do: 1. Thunderbird waits a bit too long before it displays "wrong password" dialog. I've done some testing with my mail server and while server responds in matter of seconds with "login failed" message to the client Thunderbird keeps waiting... and waiting... and waiting... doing nothing as nothing appears in mail server log files. It happens on all mail servers that I use, including gmail. 2. On "bad password" dialog we have three options: retry, enter new password, cancel. After choosing cancel our bad password is somehow cached and used again after clicking on any folder of account in question causing another waiting for "bad password" dialog. 3. Sometimes after choosing "enter new password" from "bad password" dialog Thunderbird keeps asking for new password despite we have entered correct one. Choosing cancel and accessing account again breaks that loop. Points 1 and 2 happens every time. Point 3 happens sometimes and I can't find way to reproduce it. Reproducible: Always Steps to Reproduce: 1. Enter bad password for mail account 2. Hit Cancel or Enter new password on "Bad password" dialog box. 3. Try to access account again. Actual Results: Thunderbird keeps as waiting despite that mail server has responded in blink of an eye. After hitting cancel and trying to access account again our bad password if used and no prompt for new password appears. Newly entered password sometimes isn't recognized by Thunderbird despite its correct one. Program keeps asking to enter new password while mail server logs shows it has logged in successfully. Expected Results: 1. Thunderbird should immediately process server response without waiting and doing nothing before displaying "bad password" dialog. 2. Thunderbird shouldn't cache bad password after choosing "Cancel" from "bad password" dialog. After hitting cancel and accessing account again Thunderbird shouldn't try connecting to mail server with bad password again but display "enter password" dialog instead. 3. Looks like something bad happens sometimes after re-entering correct password and Thunderbird doesn't see that login was successfull. It instead keeps asking to re-enter new passord. That shouldn't happen.
Status: UNCONFIRMED → NEW
Component: General → Security
Ever confirmed: true
QA Contact: general → thunderbird

should be fixed by bug 516464. Please comment in the bug if you still see this problem in version 60

Status: NEW → RESOLVED
Closed: 6 years ago
Resolution: --- → DUPLICATE
You need to log in before you can comment on or make changes to this bug.