Closed Bug 696995 Opened 13 years ago Closed 13 years ago

7.0.1.0 Issue : Users must have different usernames and passwords for email and newsgroups

Categories

(Thunderbird :: Security, defect)

7 Branch
x86
Windows XP
defect
Not set
normal

Tracking

(Not tracked)

RESOLVED DUPLICATE of bug 437930

People

(Reporter: lionslair, Unassigned)

Details

Attachments

(2 files)

User Agent: Mozilla/5.0 (Windows NT 5.1; rv:7.0.1) Gecko/20100101 Firefox/7.0.1 Build ID: 20110928134238 Steps to reproduce: Installed 7.0.1 when it was just announced and ready. I was sent the update. I shut down my tool - and made sure the process was dead. Installed the new version - and started up the new program once it finished installing. It seemed to work at that time, it was when at a much later time that MS installed more software fix and forced a reboot. It was therefore after a boot and a re-load : next box ::: Actual results: I brought up Thunderbird and began to read my email. That evening I tried the news groups - those are not from my ISP who canceled newsgroups. Usenet comes from a third party server - who provided me with a computer generated username and a computer generated password. That pair, not my email pair is required. Expected results: I was denied access to a single news server file. They load ok, I just can't select one without providing a password. A password for the wrong username. What you have done is have a single username / password that is used for all accounts. In doing this, you send my username and my password for my mail account to this third party. That is a security error. I should have been able to select a news feed just like email and read that group. Then advance to the next news feed. SEE BUG 566098 for details, files that were not written correctly and loss of paid services.
How do you know we are sending your email password to your newsprovider ? In tools -> options -> security -> saved passwords what are the passwords saved for the news account ?
Please look at the other bug - it show a lot of detail - I was appending it. The passwords for Imap and smtp are only stored there. News isn't. I think it was at one time. The tool(s) that show those and define those don't have places for separate username. The tool/option/security/saved passwords - are for the email username. and email user accounts. The other bug shows the file structure and two external files contains the data that was lost. It wasn't written to when exiting. So loading it can't use it. I found this information from an account - prior computer crash - in my other username account under windows. please view the last half - new stuff - in bug 566098. Look from comment 7. especially 11 & 12 IIRC. The exit write the config programs (several) writes a common username and password for all accounts. This is a program generated file. It was correct in 7.0 but 7.0.1 has a bug in it that other than one username is not allowed or used. Martin
I don't see in the creation / how it is / tools that unique username and passwords are even present. I can't just add my name and get it working. I've been out of the news server usage for some time since 7.0.1 was re-started after exiting. I'm paying for a service that I can't get to and you are sending private username/password to their site. This happened before and was resolved. But 7.0.1 raised the issue once again. Martin
I tried to ADD a new account with the account Wizard from Account Settings. I got as far as "Newsgroup Server:" which is : news60.forteinc.com When I type it all in except for the last letter (m) the next button is ready. When I enter the last letter - the m of the .com - the next goes glank. It forbids a .com as a news server. Your example is a .net. My news server is a .com and my username is a apnNUMBER@forteinc.com I can't read mail since you pass my email username and I can't add a 'new' account because your tool forbids .com as a news server. I want to know when I can get this fixed. This is getting out of hand as it costs me money and it spoils my evenings. Martin
(In reply to Martin H. Eastburn from comment #4) > When I enter the last letter - the m of the .com - the next goes glank. > It forbids a .com as a news server. Your example is a .net. > My news server is a .com and my username is a apnNUMBER@forteinc.com The reason that the server name is being rejected is because you already have an account on that server. Judging from this bug and the previous bug, it sounds like the problem is that the saved username/password combination is borked; Tools -> Options -> Security -> Passwords -> Saved passwords should show you the saved data; if you delete all entities like news://news60.forteinc.com, that should clear out all saved authentication data and let you reenter the values.
YOUR software broke it. It worked when loading the new version and stayed that way for a few days - but when I was forced to reboot for MS update - the mail tool and new tool for me - had to be shut down. When it did, it saved the email username and password for all three - mail, local folders, news. When loaded, then the other 'tools' lost the news username and the news password - which are different in each due to being computer generated. The .com issue was on your software. THERE is no place in the news server to view settings on the news account. I was trying to add an account and found the .com issue. The IT STATES DEFAULT IDENTITY - not in a box but in the GUI itself. The "news account" "Settings" after a RMB provided a list of operations. Your exit software that saves the file onto disk only has a single username and password in the function. There is the bug. I can't start up a new version from scratch in order to add my user_name_forteinc and password_forteinc into the tool that keeps them for me. So I can't re-register due to the GUI and functions are hammered. This was fully functional for the past year - and including 7.0 running. It was the 7.0.1 version that killed my ability to read news group messages. And it has been a long time now since I have been able to help anyone there or see what is going on. This is a serious bug. I can provide the Tool saved files to a person - as they might be cleaned before going - changing usernames or passwords. I also have the same files from previous versions - due to O.S. crashing by an update - and my creating a new account - the other older versions are still here. Those could be useful. I provided data at the tail end of the other bug and noted that you look at specific ones. Those describe the files that were damaged by a bad function. This is a serious bug and security issue since you pass my email username and email password to third party vendor - forteinc.com I can't fix this my self due to a bug in your creation tool not accepting a .com and my disk files and thus GUI display of them were damaged upon save/exit. Martin Martin Martin
My saved passwords have only the following in the GUI : imap://mail.consolidated.net(imap://mail.consolidated.net) smtp://smtp.consolidated.net (smtp://smtp.consolidated.net) and the rest of the gui is clear. There Isn't a news one to be seen. And hasn't been one since I exited this Thunderbird version and reloaded it after rebooting. Martin
And you don't get prompted for username and password when you try to connect to your newsgroups ?
Sometimes I get a small box up that asks for a password. It ( Thunderbird) sent my username and it was rejected or was looking for a valid match. Then I get the popup. On rare occasions I would get one and would put in my valid user_name and ask it to use the saved ones - hoping it would save it - and then a password gui but then I'm denied. I got this set almost a year ago after the last bug hit me. Martin
It is well-known that NNTP forgets saved usernames and passwords on authentication failure; note that the protocol doesn't reliably distinguish between a failure due to incorrect credentials and a failure due to more transient issues (e.g., the current user has too many connections open right now). After reading both the bugs, I am incredibly confused as to the actual problem you are reporting. Is it: 1. You are always (100% of the time) unable to log on to the server. 2. You can log on to the server, but sometimes the credentials are forgotten. 3. The server never asks for your logon credentials. 4. Immediately after being asked for credentials, another dialog pops up asking for credentials again. Very useful here would be an NNTP log covering any failing authentication attempts (see <https://wiki.mozilla.org/MailNews:Logging>).
This file - name indicates mode - auto mode fails. This is when one opens up the news feeds - click the + and expand the list downward in the tool - each and every news feed - they all try to update and load new headers. Normally I start at the top and read the first group - then on to the next... I have another log file where I log in manually (ugh and time consuming) - and the interaction is shown - and the feeds are read. I'll try to supply it now - might be attached to another note inwards. This is like having 7 email accounts on your machine and each required a username and password given but all of them are the same - just a long task each and every time. Harassment by the software when it tries to update itself. Martin
Attachment #571051 - Flags: feedback+
This is a test log file that passes since the user is present and constantly feeds in username/password for the news groups requesting updates.
Attachment #571052 - Flags: feedback+
I also added a fail log file. The file names explain - and you can read within as well. Martin
Comment on attachment 571051 [details] A text log file that fails upon sending wrong username >2011-11-01 02:40:24.781000 UTC - 0[82e140]: (4d61e90) Next state: NNTP_BEGIN_AUTHORIZE >2011-11-01 02:40:24.781000 UTC - 0[82e140]: (4d61e90) ask for the news username >2011-11-01 02:40:33.718000 UTC - 0[82e140]: (4d61e90) Next state: NNTP_ERROR >2011-11-01 02:40:33.718000 UTC - 0[82e140]: (4d61e90) ClosingConnection >2011-11-01 02:40:33.718000 UTC - 0[82e140]: (4d61e90) Sending: QUIT This sequence indicates that the immediate cached value was not found (i.e., first auth of the session); given the timestamps, I suspect this caused the authentication dialog to pop up. Either an empty username or cancel was provided, as the AUTHINFO USER was never sent. So Thunderbird is never sending a wrong username. Judging from your other comment, it seems that the real cause of the problem here is that the use of multiple channels causes confusion about authentication prompts, which I don't think we serialize properly for news.
Attachment #571051 - Flags: feedback+
When it asks for the news username - it sends username that is the email one. When it sends the password - it doesn't show you that one either. The master file - see the other bug - has thee - Imap, local, nntp. All are assigned the symbol username. All are assigned the same password. Those are symbolic and are held back from you so you can't grab my username and password. When I manually enter the username from a GUI popup that shows up. The password doesn't. Your statements are confusing. The nntp was in the password section and was automatically sent when asked. News sent news_username. sent news_password. And that was working just fine for the past year - blowing up last year this time, and this time now. My username password set is for only Mail. The new software saved only mail and not news. Loading loads whatever was there. And the 7.0.1.0 did it - 7.0 worked just fine. See if you can find the differences between the two. Look at the other bug - it states the code. I have old versions that are done right for older versions. Martin
As I said, the file that you uploaded saying "it sent the wrong username" did not, at any point in time, send a username.
There was TWO files I uploaded. See my comments below: From the not functional - due to sending the default 'username' which is lionslair The issue is, there isn't a proper record and NOW in 7.0.1 - nothing for news in the password tool. It was there in 7.0 2011-11-01 02:40:24.546000 UTC - 0[82e140]: (4d61d20) Next state: NNTP_SEND_MODE_READER_RESPONSE 2011-11-01 02:40:24.546000 UTC - 0[82e140]: (4d61d20) Next state: SEND_FIRST_NNTP_COMMAND 2011-11-01 02:40:24.546000 UTC - 0[82e140]: (4d61d20) Sending: GROUP rec.guns 2011-11-01 02:40:24.781000 UTC - 0[82e140]: (4d61e90) Next state: NNTP_RESPONSE 2011-11-01 02:40:24.781000 UTC - 0[82e140]: (4d61e90) Receiving: 480 You must log in. 2011-11-01 02:40:24.781000 UTC - 0[82e140]: (4d61e90) Next state: NNTP_BEGIN_AUTHORIZE 2011-11-01 02:40:24.781000 UTC - 0[82e140]: (4d61e90) ask for the news username 2011-11-01 02:40:24.828000 UTC - 0[82e140]: (4d61d20) Next state: NNTP_RESPONSE 2011-11-01 02:40:24.828000 UTC - 0[82e140]: (4d61d20) Receiving: 480 You must log in. 2011-11-01 02:40:24.828000 UTC - 0[82e140]: (4d61d20) Next state: NNTP_BEGIN_AUTHORIZE *# the system - press return and let the email/news tool provide the value if different. The sysmbol of username is already assigned. 2011-11-01 02:40:24.828000 UTC - 0[82e140]: (4d61d20) ask for the news username 2011-11-01 02:40:32.687000 UTC - 0[82e140]: (4d61d20) Next state: NNTP_ERROR 2011-11-01 02:40:32.687000 UTC - 0[82e140]: (4d61d20) ClosingConnection 2011-11-01 02:40:32.687000 UTC - 0[82e140]: (4d61d20) Sending: QUIT 2011-11-01 02:40:32.687000 UTC - 0[82e140]: (4d61d20) ClosingSocket() 2011-11-01 02:40:32.687000 UTC - 0[82e140]: (4d61d20) CleanupAfterRunningUrl() 2011-11-01 02:40:32.703000 UTC - 0[82e140]: (4d61d20) setting busy to 0 *# from the working file - but only by passing each and every time username and password for apn *# This is the same process but I'm being prompted to answer username and password from gui popups - 2011-11-01 02:43:31.781000 UTC - 0[82e140]: (5f03f50) Next state: SEND_FIRST_NNTP_COMMAND 2011-11-01 02:43:31.781000 UTC - 0[82e140]: (5f03f50) Sending: GROUP rec.guns 2011-11-01 02:43:31.906000 UTC - 0[82e140]: (5f03540) Next state: NNTP_RESPONSE 2011-11-01 02:43:31.906000 UTC - 0[82e140]: (5f03540) Receiving: 480 You must log in. 2011-11-01 02:43:31.906000 UTC - 0[82e140]: (5f03540) Next state: NNTP_BEGIN_AUTHORIZE 2011-11-01 02:43:31.906000 UTC - 0[82e140]: (5f03540) ask for the news username 2011-11-01 02:43:31.953000 UTC - 0[82e140]: (5f03f50) Next state: NNTP_RESPONSE 2011-11-01 02:43:31.953000 UTC - 0[82e140]: (5f03f50) Receiving: 480 You must log in. 2011-11-01 02:43:31.953000 UTC - 0[82e140]: (5f03f50) Next state: NNTP_BEGIN_AUTHORIZE 2011-11-01 02:43:31.953000 UTC - 0[82e140]: (5f03f50) ask for the news username *# getting a responce from the popup and assigns apn97278 in place of lionslair as the username. 2011-11-01 02:43:56.453000 UTC - 0[82e140]: (5f03f50) use apn97278 as the username 2011-11-01 02:43:56.453000 UTC - 0[82e140]: (5f03f50) Sending: AUTHINFO user apn97278 2011-11-01 02:43:56.500000 UTC - 0[82e140]: (5f03f50) Next state: NNTP_RESPONSE 2011-11-01 02:43:56.500000 UTC - 0[82e140]: (5f03f50) Receiving: 381 More authentication needed 2011-11-01 02:43:56.500000 UTC - 0[82e140]: (5f03f50) Next state: NNTP_AUTHORIZE_RESPONSE 2011-11-01 02:43:56.500000 UTC - 0[82e140]: (5f03f50) ask for the news password 2011-11-01 02:44:16.796000 UTC - 0[82e140]: (5f03f50) Logging suppressed for this command (it probably contained authentication information) *# The password value - was suppressed for security. but worked and reading of the group works in manual mode. 2011-11-01 02:44:17.359000 UTC - 0[82e140]: (5f03f50) Next state: NNTP_RESPONSE 2011-11-01 02:44:17.359000 UTC - 0[82e140]: (5f03f50) Receiving: 281 Authenticated and ready 2011-11-01 02:44:17.359000 UTC - 0[82e140]: (5f03f50) Next state: NNTP_PASSWORD_RESPONSE 2011-11-01 02:44:17.359000 UTC - 0[82e140]: (5f03f50) Next state: SEND_FIRST_NNTP_COMMAND 2011-11-01 02:44:17.359000 UTC - 0[82e140]: (5f03f50) Sending: GROUP rec.guns 2011-11-01 02:44:17.453000 UTC - 0[82e140]: (5f03f50) Next state: NNTP_RESPONSE *# getting the news feed: 2011-11-01 02:44:17.453000 UTC - 0[82e140]: (5f03f50) Receiving: 211 6629 369059 375687 rec.guns 2011-11-01 02:44:17.453000 UTC - 0[82e140]: (5f03f50) Next state: SEND_FIRST_NNTP_COMMAND_RESPONSE 2011-11-01 02:44:17.453000 UTC - 0[82e140]: (5f03f50) Next state: SETUP_NEWS_STREAM 2011-11-01 02:44:17.453000 UTC - 0[82e140]: (5f03f50) Next state: NNTP_XOVER_BEGIN 2011-11-01 02:44:17.453000 UTC - 0[82e140]: (5f03f50) SetCurrentGroup to rec.guns 2011-11-01 02:44:17.468000 UTC - 0[82e140]: (5f03f50) Next state: NNTP_FIGURE_NEXT_CHUNK 2011-11-01 02:44:17.468000 UTC - 0[82e140]: (5f03f50) Next state: NEWS_PROCESS_XOVER 2011-11-01 02:44:17.484000 UTC - 0[82e140]: (5f03f50) Next state: NEWS_DONE 2011-11-01 02:44:17.484000 UTC - 0[82e140]: (5f03f50) Next state: NEWS_FREE 2011-11-01 02:44:17.484000 UTC - 0[82e140]: (5f03f50) CleanupAfterRunningUrl() Since the saving section of Thunderbird didn't save the NNTP records in the password area and blew away See comment/note 7. I looked at the help file"trouble shooting" - showing the configuration of my accounts. Account1 - imap mail.consolidated.net:143 authentication method : Normal Password and that is the same for account2 - (none) Local Folders and account3 (nntp) news60.forteinc.com:119 "Normal password". What I see is in the "Mail and NEws Accounts" NAME - are the imap, none, and nntp. I don't see a space for USERNAME for each account. And "Normal password" is used for all three accounts. and this : What I have discovered is there are missing elements - lines of code - in the "signon.sqlite" file. The current one has nothing for my news server. An old one has several lines for my news server. Since I was able to install and read - but once exited and reloaded, there was lost data - it points to a routine or function that points to signon.sqlite upon exit. That doesn't save like it used to. Hope this helps debug. A simple news feed account for debug is about $3.00 USD a year. Cheap tool to debug. Martin
After several days of asking it to save my work when giving username and password for each news group (8 each) and every time it went out for an update - was 20 minutes. I was able to get my username and password - saved in the tool - it took two lines in the tool -one each for username and another for password. While the mail was there and always there. (on one line). I have quit the tool and reloaded it. It continues to work. It would appear that the saving program might be ok after-all - it looks to be in the installation program - likely killed my old version off early or if it were doing some changes that messed it up. All three username accounts used the default password for mail. That was there. The signon.sqlite file - didn't have news group data within. Maybe a new one was installed but only inserted the mail sections. This has happened twice - on the last two updates and I was able to get it working myself. So please check the logic and proceedures on the install.
(In reply to Martin H. Eastburn from comment #18) > I was able to get my username and password - saved in the tool > - it took two lines in the tool -one each for username and another for password. > While the mail was there and always there. (on one line). It's mainly a result by NNTP's difference in protocol from mail's one, although it's wasting of password manager's resource. (a) As you already know by next post of bug 566098 comment #5 from Matt on 2010-10-08, > as I understand the NNTP implementation if you put your username@NNTP server name > as the server it will use the correct username and the saved password for this account. NNTP accepts username upon connection requst, or NNTP client like Tb extracts username before @ in server name specification and uses it in authentication. (b) Password in NNTP's authentication is optional. Password should passed only when NNTP server requests password by response code to passing of username. In contrast to it, mail's protocol requests both username & password and "password is optional" is perhaps implemented as "null password" usually. If multiple username of single news server environment, and if concurrent access to same news server with different username is required(different newsgroups if different username, charge relevant reason etc.), workaround by server name=username@news.server.name at Server Settings perhaps is almost mandatory if under current implementation of Tb. You opened bug 566098 and this bug for same or very similar problem on different Tb releases, and repetedly posted complaints and test results/check results/your observations. Does it mean that workaround of "server name=username@news.server.name" did never work if Thunderbird? > - it took two lines in the tool -one each for username and another for password. Probably "for username" when username is prompted and you requested to save it, and "for password" when password is prompted and you requested to save it. Does "for password" entry consist of next? key of the entry: "news server name" and "username", data of the entry: password. Anyway, current bug summary by you is apparently invalid, because, as proven by your testing and observations, Tb actually uses different username & password in news server access from ones in mail server access.
Because of next, servername becomes apnNUMBER@forteinc.com@news.forteinc.com like one in Tb's Server Settings if workaround is done. > My news server is a .com and my username is a apnNUMBER@forteinc.com It may produce Tb's problem, if Tb extracts username part from the string and use it in authentication.
FYI. To see what happens at NNTP protocol level, Tb's NNTP log with timestamp is usually useful. > https://wiki.mozilla.org/MailNews:Logging > SET NSPR_LOG_MODULES=timestamp,nntp:5 > See http://tools.ietf.org/html/rfc4643#section-2.3.3 for authentication in NNTP
I'm sick and tried of you people - your new software to delete and install the new aborted or deleted the news groups I had set up in the password section. You programmed a single username and password in all three sections. After I repeatedly entered my username and password many times it finally saved it. I quit the tool and brought it back up and it seems to be keeping the second username. The same thing happened last year at this time - see the other bug - I got it working once again. It seems no one ever figured out what did it last time and closed the bug. I hope someone in the install and stuff gets this figured out. Maybe someone has to have two usernames - one for mail and one for news in a Test Case in R&E engineering. (I'm a former R&E hardware and Software engineer (Sr. Scientist at the time) creating the department on a million line of code software. Our test cases were to the unit level and were extensive. It saved our business. I can read once again, but expect the same bug next year. martin
Two next log of same timestamp is seen in your log. > Receiving: 200 Welcome to Forte Premium. Please Authenticate. (en-nntp-11.dc1-J14N57) (Q1) Does it mean you define two news server accounts on same news server(different username required) in Tb? Or merely concurrent access of multiple newsgroups of single news server in Tb? If you touched/changed Server Name: field of Server Settings, mail.server.serverN.realhostname is created and used for server connection, and if you changed Server Name: field of Server Settings, content in mail.server.serverN.realhostname becomes different from mail.server.serverN.hostname. Because key used by password manager is mail.server.serverN.hostname, existence of realhostname often produces confusion in viewing/checking of saved password entries. (Q2) Can you open your news server settings to us, in list style, istead of statements? > Next entries in prefs.js, which has type=nntp attribute. > mail.server.serverN.name <= Account's label name > mail.server.serverN.hostname <= Initial Server Name: in Server Settings > Used as key of password manager > Used in server connection, if realhostname doesn't exist > mail.server.serverN.realhostname <= Server Name: in Server Settings > If Server Name: is touched/changed, realhostname is created > Used in server connection, if realhostname exists > mail.server.serverN.type = nntp You can see signons.sqlite content directly by Firefox & add-on of SQLite Manager. (1) Install SQLite Manager on Firefox. (2) Terminate Tb, copy signons.sqlite to appropriate directory. (3) Open(connect database) the copy of signons.sqlite. As seen in Table(moz_loins) in the DB, key for Tb in password data access is hostname and username(encryptedUsername column in moz_loins, this is not key of the table of SQLite). (i) hostname data is combination of <protocol> and <servername> in the Table. If news server, it's news://.... So, misuse of imap://..., mailbox://..., smtp://... entry for news server access is usually very hard to imagine. This "combination of <protocol> and <servername>" is reflected to Password Manager display correctly. It's main reason why I say your bug summary is invalid and misleading. (ii) Because there is no username information in news account definition in Tb, it's impossible to associate username to next news server access, unless association of last-used username and newsserver+newsgroup is held internally at somewehre, except when only one news account per one news server name is defined in Tb. (Q3) Can you show us what password manager displays, in list style, instead of statements? If possible, data when problem happens, and data when problem doesn't occur after your some actions, with detailed your actions/observations in list tyle, please. (string of username itself is not relevant. replace by random string with keeping string length, please. don't open password text, please. never open signons.sqlite file to public, please. even if cyphered by Tb, ecypher by cracker is never impossible.) I think password manager requests "SELECT ... for table in signons.sqlite" only once at open of password manager and doesn't automatically refresh display according to change of table by other process. (Q4) Did you re-open password manager panel after you typed username/password and request to save at prompt? I don't know about remembering of last used username by Tb. So I asked about username@servername format definition in Server Settings of Tb. (Q5) Have you tried it? For single news account of Tb per single news server case: You say two password manager entries, one for username prompt, one for password prompt, was created. If so, next two entries are produced by Tb. > (a) hostname=news://news.server.name, username=UserID, password=null > (b) hostname=news://news.server.name, username=UserID, password=Password you typed Tb doesn't request UNIQUE attribute for primary key of hostname in moz_login and Tb doesn't request UNIQUE attribute for hostname+username(encryptedUsername column) combination. So two entries of same hostname+username(encryptedUsername column) is not rejected by SQLite. SQLite perhaps returns entry (b), which is last added, first for SELECT request, and Tb perhaps uses entry (b). If entry (b) is somehow cleared(deleted by conection error etc.), entry (a) perhaps is used by next connection request. Because "null password" is required for some servers who requests null password when password is optional, Tb probably uses null password in entry of (a) in such case. And, Tb may use this entry (a) for all of automatic access to relevant newsgrops upon restart, and Tb may prompt for new password after the all automatic access fails, if Tb automatically prompts password after login failure using saved password(null in this case). Similar phenomenon was reported to IMAP account for "password change at server" case, and problem was resolved by "clear saved password upon first login failure" and "check 'password is cleared' status correctly in each server access". You are possibly looking similar phenomenon. And if so, it's independent from Tb release which you used/are using. This is also another reason why I asked you about workaround by username@servername format definition. And this kind of problem is major reason why question of "what happens if password entry is manually deleded" is asked by QA contributers many times.
Oh, next flow for successful login with username/password prompt was seen in second log. > Receiving: 480 You must log in. > ask for the news username <= Prompts for username by Tb > use <>?)'"'( as the username > Sending: AUTHINFO user <>?)'"'( > Receiving: 381 More authentication needed <= Server requests password, passward is not optional > ask for the news password <= Prompts for password by Tb > Logging suppressed for this command (it probably contained authentication information) > Receiving: 281 Authenticated and ready Following is authentication step in first log. > Receiving: 480 You must log in. > ask for the news username <= Prompt for username by Tb > Next state: NNTP_ERROR > ClosingConnection > Sending: QUIT If you typed correct username at username prompt, and if null password of entry I called (a) is used, Tb should generate log like next. > Receiving: 480 You must log in. > ask for the news username <= Prompt for username by Tb > use <>?)'"'( as the username > Sending: AUTHINFO user <>?)'"'( > Receiving: 381 More authentication needed <= Server requests password, passward is not optional > (use null password in entry (a)) > Logging suppressed for this command (it probably contained authentication information) > Receiving: xxx, which is reject of login due to incorrect password. It may be internal error due to wrong/unexpected entry like (a), after correct username is obtained by prompt for username due to deletion of entry I call (b). Can you check password manager entries after deletion of password entries for the news server from Password Manager of Tb, prompt for username/correct username/save username, prompt for password/correct password/save password, using Firefox/SQLite Manager?
As I said I have it working now. Here is the dump of the trouble shooting page. As far as the password manager - it only had Imap -mail and smtp in it. The referenced to my APN was deleted. I was able to get them added after many tries. It added differently - and when I look at troubleshooting - it shows odd results. It might be ok to you but invalid to me. I'll have to try to figure a different way if text isn't an option. It is only graphic - but contains line thusly : imap://mail.consolidated.net(same text) lionslair password news://news60forteinc.com(same /#username) blank area APNusername news://news60forteinc.com(same /#password) blank area APNpassword smtp://smtp.consolidated.net(same text) lionslair password Before this version wiped out the news:// it was a single line. Now after I was able to force saving - I have two news://... Here is the dump from troubleshooting page. : Application Basics Name: Thunderbird Version: 7.0.1 User Agent: Mozilla/5.0 (Windows NT 5.1; rv:7.0.1) Gecko/20110929 Thunderbird/7.0.1 Profile Directory: Open Containing Folder (Local drive) Application Build ID: 20110929044556 Enabled Plugins: about:plugins Build Configuration: about:buildconfig Mail and News Accounts account1: INCOMING: account1, , (imap) mail.consolidated.net:143, plain, passwordCleartext OUTGOING: smtp.consolidated.net:25, alwaysSTARTTLS, passwordCleartext, true account2: INCOMING: account2, , (none) Local Folders, plain, passwordCleartext account3: INCOMING: account3, , (nntp) news60.forteinc.com:119, plain, passwordCleartext OUTGOING: smtp.consolidated.net:25, alwaysSTARTTLS, passwordCleartext, true Extensions Lightning, 1.0b7, true, {e2fda1a4-762b-4020-b5ad-a41df1933103} Modified Preferences Name: Value extensions.lastAppVersion: 7.0.1 gfx.blacklist.direct2d: 2 gfx.blacklist.layers.direct3d10: 2 gfx.blacklist.layers.direct3d10-1: 2 mail.openMessageBehavior.version: 1 network.cookie.prefsMigrated: true places.database.lastMaintenance: 1320380191 places.history.expiration.transient_current_max_pages: 15928 print.print_printer: EPSON N10 N11 Series print.printer_EPSON_N10_N11_Series.print_bgcolor: false print.printer_EPSON_N10_N11_Series.print_bgimages: false print.printer_EPSON_N10_N11_Series.print_command: print.printer_EPSON_N10_N11_Series.print_downloadfonts: false print.printer_EPSON_N10_N11_Series.print_edge_bottom: 0 print.printer_EPSON_N10_N11_Series.print_edge_left: 0 print.printer_EPSON_N10_N11_Series.print_edge_right: 0 print.printer_EPSON_N10_N11_Series.print_edge_top: 0 print.printer_EPSON_N10_N11_Series.print_evenpages: true print.printer_EPSON_N10_N11_Series.print_footercenter: print.printer_EPSON_N10_N11_Series.print_footerleft: &PT print.printer_EPSON_N10_N11_Series.print_footerright: &D print.printer_EPSON_N10_N11_Series.print_headercenter: print.printer_EPSON_N10_N11_Series.print_headerleft: &T print.printer_EPSON_N10_N11_Series.print_headerright: &U print.printer_EPSON_N10_N11_Series.print_in_color: true print.printer_EPSON_N10_N11_Series.print_margin_bottom: 0.5 print.printer_EPSON_N10_N11_Series.print_margin_left: 0.5 print.printer_EPSON_N10_N11_Series.print_margin_right: 0.5 print.printer_EPSON_N10_N11_Series.print_margin_top: 0.5 print.printer_EPSON_N10_N11_Series.print_oddpages: true print.printer_EPSON_N10_N11_Series.print_orientation: 0 print.printer_EPSON_N10_N11_Series.print_page_delay: 50 print.printer_EPSON_N10_N11_Series.print_paper_data: 1 print.printer_EPSON_N10_N11_Series.print_paper_height: 11.00 print.printer_EPSON_N10_N11_Series.print_paper_size_type: 0 print.printer_EPSON_N10_N11_Series.print_paper_size_unit: 0 print.printer_EPSON_N10_N11_Series.print_paper_width: 8.50 print.printer_EPSON_N10_N11_Series.print_reversed: false print.printer_EPSON_N10_N11_Series.print_scaling: 1.00 print.printer_EPSON_N10_N11_Series.print_shrink_to_fit: true print.printer_EPSON_N10_N11_Series.print_to_file: false print.printer_EPSON_N10_N11_Series.print_unwriteable_margin_bottom: 0 print.printer_EPSON_N10_N11_Series.print_unwriteable_margin_left: 0 print.printer_EPSON_N10_N11_Series.print_unwriteable_margin_right: 0 print.printer_EPSON_N10_N11_Series.print_unwriteable_margin_top: 0 print.printer_HP_LaserJet_4V/4MV_PostScript.print_bgcolor: false print.printer_HP_LaserJet_4V/4MV_PostScript.print_bgimages: false print.printer_HP_LaserJet_4V/4MV_PostScript.print_command: print.printer_HP_LaserJet_4V/4MV_PostScript.print_downloadfonts: false print.printer_HP_LaserJet_4V/4MV_PostScript.print_edge_bottom: 0 print.printer_HP_LaserJet_4V/4MV_PostScript.print_edge_left: 0 print.printer_HP_LaserJet_4V/4MV_PostScript.print_edge_right: 0 print.printer_HP_LaserJet_4V/4MV_PostScript.print_edge_top: 0 print.printer_HP_LaserJet_4V/4MV_PostScript.print_evenpages: true print.printer_HP_LaserJet_4V/4MV_PostScript.print_footercenter: print.printer_HP_LaserJet_4V/4MV_PostScript.print_footerleft: &PT print.printer_HP_LaserJet_4V/4MV_PostScript.print_footerright: &D print.printer_HP_LaserJet_4V/4MV_PostScript.print_headercenter: print.printer_HP_LaserJet_4V/4MV_PostScript.print_headerleft: &T print.printer_HP_LaserJet_4V/4MV_PostScript.print_headerright: &U print.printer_HP_LaserJet_4V/4MV_PostScript.print_in_color: true print.printer_HP_LaserJet_4V/4MV_PostScript.print_margin_bottom: 0.5 print.printer_HP_LaserJet_4V/4MV_PostScript.print_margin_left: 0.5 print.printer_HP_LaserJet_4V/4MV_PostScript.print_margin_right: 0.5 print.printer_HP_LaserJet_4V/4MV_PostScript.print_margin_top: 0.5 print.printer_HP_LaserJet_4V/4MV_PostScript.print_oddpages: true print.printer_HP_LaserJet_4V/4MV_PostScript.print_orientation: 0 print.printer_HP_LaserJet_4V/4MV_PostScript.print_pagedelay: 500 print.printer_HP_LaserJet_4V/4MV_PostScript.print_paper_data: 1 print.printer_HP_LaserJet_4V/4MV_PostScript.print_paper_height: 11.00 print.printer_HP_LaserJet_4V/4MV_PostScript.print_paper_size_type: 0 print.printer_HP_LaserJet_4V/4MV_PostScript.print_paper_size_unit: 0 print.printer_HP_LaserJet_4V/4MV_PostScript.print_paper_width: 8.50 print.printer_HP_LaserJet_4V/4MV_PostScript.print_reversed: false print.printer_HP_LaserJet_4V/4MV_PostScript.print_scaling: 1.00 print.printer_HP_LaserJet_4V/4MV_PostScript.print_shrink_to_fit: true print.printer_HP_LaserJet_4V/4MV_PostScript.print_to_file: false print.printer_HP_LaserJet_4V/4MV_PostScript.print_unwriteable_margin_bottom: 0 print.printer_HP_LaserJet_4V/4MV_PostScript.print_unwriteable_margin_left: 0 print.printer_HP_LaserJet_4V/4MV_PostScript.print_unwriteable_margin_right: 0 print.printer_HP_LaserJet_4V/4MV_PostScript.print_unwriteable_margin_top: 0 Graphics Adapter Description: Intel(R) 82845G/GL/GE/PE/GV Graphics Controller Vendor ID: 8086 Device ID: 2562 Adapter RAM: Unknown Adapter Drivers: ialmrnt5 Driver Version: 6.13.1.3485 Driver Date: 3-13-2003 WebGL Renderer: false GPU Accelerated Windows: 0/2
As near as I can figure out from your comments, your problem seems to essentially be bug 437930...
(In reply to Martin H. Eastburn from comment #25) > It is only graphic - but contains line thusly : >(snip) > news://news60forteinc.com(same /#username) blank area APNusername > news://news60forteinc.com(same /#password) blank area APNpassword >(snip) Can you send me your signons.sqlite file to me via mail? I surely promise you that I will never open your signons.sqlite file to public, and that I will never try to decypher cyphered username/password data in your signons.sqlite file(I have no skill to decypher cyphered username/password data by Tb in signons.sqlite file of Tb, so I can't decypher data). Anyway, please answer to my questions such as "only single news account definition for single news server in Tb, or not?". Please show us important data such as "your news server definition in Tb" in listing style, instead of lengthy/hard-to-read-or-understand statements. By the way, please never paste long data in comment of bug report at B.M.O(bugzilla.mozilla.org). If required, save data to file and attach the file to this bug, please, to keep your bug's readability. > Before this version wiped out the news:// it was a single line. > Now after I was able to force saving - I have two news://... It may be difference between (i) plain password data file(s...... file, password data is cyphred by Tb though) of older releases of Tb and (ii) signons.sqlite of SQLite of Tb 7. It may be a reason of differene in phenomena between this bug for Tb 7 and your bug 566098 for older Tb release(s).
I think you are confused. When the new 7.0.1.0 came in - Just before install - I had email and a news feed from APN. Each had their own username and password. After installing and loading - it worked. I had to reboot and it was then failing. The username and password in the password tool - was missing for news. I have and only want a Single News username/password. Only one feed. I had lost it. Single email. I wanted and had an email and a news feed. The installing or setting up program - somewhere some how did this. I can read, so the files point to the current status, not the old one.
I doubt it was the update that caused this to happen; more likely, it was a transient failure in authentication that happened to coincide with the update. Thunderbird presently forgets saved NNTP authentication credentials upon any authentication failure; this could account for the apparent deletion of the password. In lieu of any information to suggest that this was not the case, I am going to assume that this was the case.
It was. It happened last year also. The file listed in the other bug was set up for only email. Nothing for news. Another file had mail, local and news all set to the same parameters. The password tool - tools/options/security - had only mail and smtp only. It was fully functional since I fixed it last October when the other bug was issued. Something trashed it and not mail and smtp. One or two lines of data out of hundreds. Likely a loop counter or indexed function that makes a poor decision or step. Look at the tail end of the other bug - that what was entered this year and start reading downwards - you will begin to see some light. Martin
Status: UNCONFIRMED → RESOLVED
Closed: 13 years ago
Resolution: --- → DUPLICATE
I'll say it again and add a note. I was able to get my username and password saved after a number of tries. It now works after that. I just installed version 8.0 and it worked as it should. Nothing was broken. Thank you for who ever fixed the install program and possible other places. This is closed and thanks for the fix in 8.0. Martin
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: