Closed
Bug 696995
Opened 13 years ago
Closed 13 years ago
7.0.1.0 Issue : Users must have different usernames and passwords for email and newsgroups
Categories
(Thunderbird :: Security, defect)
Tracking
(Not tracked)
RESOLVED
DUPLICATE
of bug 437930
People
(Reporter: lionslair, Unassigned)
Details
Attachments
(2 files)
User Agent: Mozilla/5.0 (Windows NT 5.1; rv:7.0.1) Gecko/20100101 Firefox/7.0.1
Build ID: 20110928134238
Steps to reproduce:
Installed 7.0.1 when it was just announced and ready. I was sent the update. I shut
down my tool - and made sure the process was dead. Installed the new version -
and started up the new program once it finished installing. It seemed to work at that
time, it was when at a much later time that MS installed more software fix and forced a reboot. It was therefore after a boot and a re-load : next box :::
Actual results:
I brought up Thunderbird and began to read my email. That evening I tried the news groups - those are not from my ISP who canceled newsgroups. Usenet comes from
a third party server - who provided me with a computer generated username and a computer generated password. That pair, not my email pair is required.
Expected results:
I was denied access to a single news server file. They load ok, I just can't select
one without providing a password. A password for the wrong username. What you have done is have a single username / password that is used for all accounts. In doing
this, you send my username and my password for my mail account to this third party.
That is a security error. I should have been able to select a news feed just like email
and read that group. Then advance to the next news feed. SEE BUG 566098 for details, files that were not written correctly and loss of paid services.
Comment 1•13 years ago
|
||
How do you know we are sending your email password to your newsprovider ?
In tools -> options -> security -> saved passwords what are the passwords saved for the news account ?
Reporter | ||
Comment 2•13 years ago
|
||
Please look at the other bug - it show a lot of detail - I was appending it.
The passwords for Imap and smtp are only stored there. News isn't. I think
it was at one time. The tool(s) that show those and define those don't have places
for separate username. The tool/option/security/saved passwords - are for the
email username. and email user accounts.
The other bug shows the file structure and two external files contains the data
that was lost. It wasn't written to when exiting. So loading it can't use it.
I found this information from an account - prior computer crash - in my other username account under windows. please view the last half - new stuff -
in bug 566098. Look from comment 7. especially 11 & 12 IIRC. The exit write
the config programs (several) writes a common username and password for all accounts. This is a program generated file. It was correct in 7.0 but 7.0.1
has a bug in it that other than one username is not allowed or used.
Martin
Reporter | ||
Comment 3•13 years ago
|
||
I don't see in the creation / how it is / tools that unique username and passwords are even present. I can't just add my name and get it working. I've been out of
the news server usage for some time since 7.0.1 was re-started after exiting.
I'm paying for a service that I can't get to and you are sending private username/password to their site. This happened before and was resolved.
But 7.0.1 raised the issue once again.
Martin
Reporter | ||
Comment 4•13 years ago
|
||
I tried to ADD a new account with the account Wizard from Account Settings.
I got as far as "Newsgroup Server:" which is : news60.forteinc.com
When I type it all in except for the last letter (m) the next button is ready.
When I enter the last letter - the m of the .com - the next goes glank.
It forbids a .com as a news server. Your example is a .net.
My news server is a .com and my username is a apnNUMBER@forteinc.com
I can't read mail since you pass my email username and I can't add a 'new' account
because your tool forbids .com as a news server.
I want to know when I can get this fixed. This is getting out of hand as it
costs me money and it spoils my evenings.
Martin
Comment 5•13 years ago
|
||
(In reply to Martin H. Eastburn from comment #4)
> When I enter the last letter - the m of the .com - the next goes glank.
> It forbids a .com as a news server. Your example is a .net.
> My news server is a .com and my username is a apnNUMBER@forteinc.com
The reason that the server name is being rejected is because you already have an account on that server.
Judging from this bug and the previous bug, it sounds like the problem is that the saved username/password combination is borked; Tools -> Options -> Security -> Passwords -> Saved passwords should show you the saved data; if you delete all entities like news://news60.forteinc.com, that should clear out all saved authentication data and let you reenter the values.
Reporter | ||
Comment 6•13 years ago
|
||
YOUR software broke it. It worked when loading the new version and stayed that way for a few days - but when I was forced to reboot for MS update - the mail tool
and new tool for me - had to be shut down. When it did, it saved the email username and password for all three - mail, local folders, news. When loaded,
then the other 'tools' lost the news username and the news password - which are different in each due to being computer generated. The .com issue was on your software. THERE is no place in the news server to view settings on the news account. I was trying to add an account and found the .com issue. The
IT STATES DEFAULT IDENTITY - not in a box but in the GUI itself. The "news account" "Settings" after a RMB provided a list of operations.
Your exit software that saves the file onto disk only has a single username and password in the function. There is the bug. I can't start up a new version from scratch in order to add my user_name_forteinc and password_forteinc into the tool that keeps them for me. So I can't re-register due to the GUI and functions are hammered. This was fully functional for the past year - and including 7.0 running. It was the 7.0.1 version that killed my ability to read news group messages. And it has been a long time now since I have been able to
help anyone there or see what is going on. This is a serious bug.
I can provide the Tool saved files to a person - as they might be cleaned before
going - changing usernames or passwords. I also have the same files from previous versions - due to O.S. crashing by an update - and my creating a new account - the other older versions are still here. Those could be useful.
I provided data at the tail end of the other bug and noted that you look at specific ones. Those describe the files that were damaged by a bad function.
This is a serious bug and security issue since you pass my email username and email password to third party vendor - forteinc.com
I can't fix this my self due to a bug in your creation tool not accepting a .com
and my disk files and thus GUI display of them were damaged upon save/exit.
Martin
Martin
Martin
Reporter | ||
Comment 7•13 years ago
|
||
My saved passwords have only the following in the GUI :
imap://mail.consolidated.net(imap://mail.consolidated.net)
smtp://smtp.consolidated.net (smtp://smtp.consolidated.net)
and the rest of the gui is clear. There Isn't a news one to be seen.
And hasn't been one since I exited this Thunderbird version and reloaded it
after rebooting.
Martin
Comment 8•13 years ago
|
||
And you don't get prompted for username and password when you try to connect to your newsgroups ?
Reporter | ||
Comment 9•13 years ago
|
||
Sometimes I get a small box up that asks for a password. It ( Thunderbird) sent
my username and it was rejected or was looking for a valid match. Then I get the
popup. On rare occasions I would get one and would put in my valid user_name and
ask it to use the saved ones - hoping it would save it - and then a password gui
but then I'm denied. I got this set almost a year ago after the last bug hit me.
Martin
Comment 10•13 years ago
|
||
It is well-known that NNTP forgets saved usernames and passwords on authentication failure; note that the protocol doesn't reliably distinguish between a failure due to incorrect credentials and a failure due to more transient issues (e.g., the current user has too many connections open right now).
After reading both the bugs, I am incredibly confused as to the actual problem you are reporting. Is it:
1. You are always (100% of the time) unable to log on to the server.
2. You can log on to the server, but sometimes the credentials are forgotten.
3. The server never asks for your logon credentials.
4. Immediately after being asked for credentials, another dialog pops up asking for credentials again.
Very useful here would be an NNTP log covering any failing authentication attempts (see <https://wiki.mozilla.org/MailNews:Logging>).
Reporter | ||
Comment 11•13 years ago
|
||
This file - name indicates mode - auto mode fails. This is when one opens up the
news feeds - click the + and expand the list downward in the tool - each and every news feed - they all try to update and load new headers. Normally I start at the top and read the first group - then on to the next... I have another log file where I log in manually (ugh and time consuming) - and the interaction is shown - and the feeds are read. I'll try to supply it now - might be attached to another note inwards. This is like having 7 email accounts on your machine and each required a username and password given but all of them are the same - just a long task each and every time. Harassment by the software when it tries to update itself. Martin
Attachment #571051 -
Flags: feedback+
Reporter | ||
Comment 12•13 years ago
|
||
This is a test log file that passes since the user is present and constantly
feeds in username/password for the news groups requesting updates.
Attachment #571052 -
Flags: feedback+
Reporter | ||
Comment 13•13 years ago
|
||
I also added a fail log file. The file names explain - and you can read within
as well. Martin
Comment 14•13 years ago
|
||
Comment on attachment 571051 [details]
A text log file that fails upon sending wrong username
>2011-11-01 02:40:24.781000 UTC - 0[82e140]: (4d61e90) Next state: NNTP_BEGIN_AUTHORIZE
>2011-11-01 02:40:24.781000 UTC - 0[82e140]: (4d61e90) ask for the news username
>2011-11-01 02:40:33.718000 UTC - 0[82e140]: (4d61e90) Next state: NNTP_ERROR
>2011-11-01 02:40:33.718000 UTC - 0[82e140]: (4d61e90) ClosingConnection
>2011-11-01 02:40:33.718000 UTC - 0[82e140]: (4d61e90) Sending: QUIT
This sequence indicates that the immediate cached value was not found (i.e., first auth of the session); given the timestamps, I suspect this caused the authentication dialog to pop up. Either an empty username or cancel was provided, as the AUTHINFO USER was never sent. So Thunderbird is never sending a wrong username.
Judging from your other comment, it seems that the real cause of the problem here is that the use of multiple channels causes confusion about authentication prompts, which I don't think we serialize properly for news.
Attachment #571051 -
Flags: feedback+
Reporter | ||
Comment 15•13 years ago
|
||
When it asks for the news username - it sends username that is the email one.
When it sends the password - it doesn't show you that one either.
The master file - see the other bug - has thee - Imap, local, nntp. All are assigned the symbol username. All are assigned the same password.
Those are symbolic and are held back from you so you can't grab my username and
password. When I manually enter the username from a GUI popup that shows up.
The password doesn't.
Your statements are confusing. The nntp was in the password section and was
automatically sent when asked. News sent news_username. sent news_password.
And that was working just fine for the past year - blowing up last year this time, and this time now. My username password set is for only Mail. The new
software saved only mail and not news. Loading loads whatever was there.
And the 7.0.1.0 did it - 7.0 worked just fine. See if you can find the differences between the two. Look at the other bug - it states the code.
I have old versions that are done right for older versions. Martin
Comment 16•13 years ago
|
||
As I said, the file that you uploaded saying "it sent the wrong username" did not, at any point in time, send a username.
Reporter | ||
Comment 17•13 years ago
|
||
There was TWO files I uploaded. See my comments below:
From the not functional - due to sending the default 'username' which is lionslair
The issue is, there isn't a proper record and NOW in 7.0.1 - nothing for news in the password tool. It was there in 7.0
2011-11-01 02:40:24.546000 UTC - 0[82e140]: (4d61d20) Next state: NNTP_SEND_MODE_READER_RESPONSE
2011-11-01 02:40:24.546000 UTC - 0[82e140]: (4d61d20) Next state: SEND_FIRST_NNTP_COMMAND
2011-11-01 02:40:24.546000 UTC - 0[82e140]: (4d61d20) Sending: GROUP rec.guns
2011-11-01 02:40:24.781000 UTC - 0[82e140]: (4d61e90) Next state: NNTP_RESPONSE
2011-11-01 02:40:24.781000 UTC - 0[82e140]: (4d61e90) Receiving: 480 You must log in.
2011-11-01 02:40:24.781000 UTC - 0[82e140]: (4d61e90) Next state: NNTP_BEGIN_AUTHORIZE
2011-11-01 02:40:24.781000 UTC - 0[82e140]: (4d61e90) ask for the news username
2011-11-01 02:40:24.828000 UTC - 0[82e140]: (4d61d20) Next state: NNTP_RESPONSE
2011-11-01 02:40:24.828000 UTC - 0[82e140]: (4d61d20) Receiving: 480 You must log in.
2011-11-01 02:40:24.828000 UTC - 0[82e140]: (4d61d20) Next state: NNTP_BEGIN_AUTHORIZE
*# the system - press return and let the email/news tool provide the value if different. The sysmbol
of username is already assigned.
2011-11-01 02:40:24.828000 UTC - 0[82e140]: (4d61d20) ask for the news username
2011-11-01 02:40:32.687000 UTC - 0[82e140]: (4d61d20) Next state: NNTP_ERROR
2011-11-01 02:40:32.687000 UTC - 0[82e140]: (4d61d20) ClosingConnection
2011-11-01 02:40:32.687000 UTC - 0[82e140]: (4d61d20) Sending: QUIT
2011-11-01 02:40:32.687000 UTC - 0[82e140]: (4d61d20) ClosingSocket()
2011-11-01 02:40:32.687000 UTC - 0[82e140]: (4d61d20) CleanupAfterRunningUrl()
2011-11-01 02:40:32.703000 UTC - 0[82e140]: (4d61d20) setting busy to 0
*# from the working file - but only by passing each and every time username and password for apn
*# This is the same process but I'm being prompted to answer username and password from gui popups -
2011-11-01 02:43:31.781000 UTC - 0[82e140]: (5f03f50) Next state: SEND_FIRST_NNTP_COMMAND
2011-11-01 02:43:31.781000 UTC - 0[82e140]: (5f03f50) Sending: GROUP rec.guns
2011-11-01 02:43:31.906000 UTC - 0[82e140]: (5f03540) Next state: NNTP_RESPONSE
2011-11-01 02:43:31.906000 UTC - 0[82e140]: (5f03540) Receiving: 480 You must log in.
2011-11-01 02:43:31.906000 UTC - 0[82e140]: (5f03540) Next state: NNTP_BEGIN_AUTHORIZE
2011-11-01 02:43:31.906000 UTC - 0[82e140]: (5f03540) ask for the news username
2011-11-01 02:43:31.953000 UTC - 0[82e140]: (5f03f50) Next state: NNTP_RESPONSE
2011-11-01 02:43:31.953000 UTC - 0[82e140]: (5f03f50) Receiving: 480 You must log in.
2011-11-01 02:43:31.953000 UTC - 0[82e140]: (5f03f50) Next state: NNTP_BEGIN_AUTHORIZE
2011-11-01 02:43:31.953000 UTC - 0[82e140]: (5f03f50) ask for the news username
*# getting a responce from the popup and assigns apn97278 in place of lionslair as the username.
2011-11-01 02:43:56.453000 UTC - 0[82e140]: (5f03f50) use apn97278 as the username
2011-11-01 02:43:56.453000 UTC - 0[82e140]: (5f03f50) Sending: AUTHINFO user apn97278
2011-11-01 02:43:56.500000 UTC - 0[82e140]: (5f03f50) Next state: NNTP_RESPONSE
2011-11-01 02:43:56.500000 UTC - 0[82e140]: (5f03f50) Receiving: 381 More authentication needed
2011-11-01 02:43:56.500000 UTC - 0[82e140]: (5f03f50) Next state: NNTP_AUTHORIZE_RESPONSE
2011-11-01 02:43:56.500000 UTC - 0[82e140]: (5f03f50) ask for the news password
2011-11-01 02:44:16.796000 UTC - 0[82e140]: (5f03f50) Logging suppressed for this command (it probably contained authentication information)
*# The password value - was suppressed for security. but worked and reading of the group works in manual mode.
2011-11-01 02:44:17.359000 UTC - 0[82e140]: (5f03f50) Next state: NNTP_RESPONSE
2011-11-01 02:44:17.359000 UTC - 0[82e140]: (5f03f50) Receiving: 281 Authenticated and ready
2011-11-01 02:44:17.359000 UTC - 0[82e140]: (5f03f50) Next state: NNTP_PASSWORD_RESPONSE
2011-11-01 02:44:17.359000 UTC - 0[82e140]: (5f03f50) Next state: SEND_FIRST_NNTP_COMMAND
2011-11-01 02:44:17.359000 UTC - 0[82e140]: (5f03f50) Sending: GROUP rec.guns
2011-11-01 02:44:17.453000 UTC - 0[82e140]: (5f03f50) Next state: NNTP_RESPONSE
*# getting the news feed:
2011-11-01 02:44:17.453000 UTC - 0[82e140]: (5f03f50) Receiving: 211 6629 369059 375687 rec.guns
2011-11-01 02:44:17.453000 UTC - 0[82e140]: (5f03f50) Next state: SEND_FIRST_NNTP_COMMAND_RESPONSE
2011-11-01 02:44:17.453000 UTC - 0[82e140]: (5f03f50) Next state: SETUP_NEWS_STREAM
2011-11-01 02:44:17.453000 UTC - 0[82e140]: (5f03f50) Next state: NNTP_XOVER_BEGIN
2011-11-01 02:44:17.453000 UTC - 0[82e140]: (5f03f50) SetCurrentGroup to rec.guns
2011-11-01 02:44:17.468000 UTC - 0[82e140]: (5f03f50) Next state: NNTP_FIGURE_NEXT_CHUNK
2011-11-01 02:44:17.468000 UTC - 0[82e140]: (5f03f50) Next state: NEWS_PROCESS_XOVER
2011-11-01 02:44:17.484000 UTC - 0[82e140]: (5f03f50) Next state: NEWS_DONE
2011-11-01 02:44:17.484000 UTC - 0[82e140]: (5f03f50) Next state: NEWS_FREE
2011-11-01 02:44:17.484000 UTC - 0[82e140]: (5f03f50) CleanupAfterRunningUrl()
Since the saving section of Thunderbird didn't save the NNTP records in the
password area and blew away See comment/note 7.
I looked at the help file"trouble shooting" - showing the configuration of my accounts. Account1 - imap mail.consolidated.net:143 authentication method : Normal Password and that is the same for account2 - (none) Local Folders and account3 (nntp) news60.forteinc.com:119 "Normal password".
What I see is in the "Mail and NEws Accounts" NAME - are the imap, none, and nntp.
I don't see a space for USERNAME for each account. And "Normal password" is
used for all three accounts.
and this :
What I have discovered is there are missing elements - lines of code -
in the "signon.sqlite" file.
The current one has nothing for my news server.
An old one has several lines for my news server.
Since I was able to install and read - but once exited and reloaded,
there was lost data - it points to a routine or function that points to
signon.sqlite upon exit. That doesn't save like it used to.
Hope this helps debug. A simple news feed account for debug is about $3.00 USD
a year. Cheap tool to debug.
Martin
Reporter | ||
Comment 18•13 years ago
|
||
After several days of asking it to save my work when giving username and password for each news group (8 each) and every time it went out for an update - was 20 minutes. I was able to get my username and password - saved in the tool - it took
two lines in the tool -one each for username and another for password. While the mail was there and always there. (on one line). I have quit the tool and reloaded it. It continues to work. It would appear that the saving program might be ok after-all - it looks to be in the installation program - likely killed my old version off early or if it were doing some changes that messed it up. All three username accounts used the default password for mail. That was there. The signon.sqlite file - didn't have news group data within. Maybe a new one was installed but only inserted the mail sections. This has happened twice - on the last two updates and I was able to get it working myself. So please check the logic and proceedures on the install.
Comment 19•13 years ago
|
||
(In reply to Martin H. Eastburn from comment #18)
> I was able to get my username and password - saved in the tool
> - it took two lines in the tool -one each for username and another for password.
> While the mail was there and always there. (on one line).
It's mainly a result by NNTP's difference in protocol from mail's one, although it's wasting of password manager's resource.
(a) As you already know by next post of bug 566098 comment #5 from Matt on 2010-10-08,
> as I understand the NNTP implementation if you put your username@NNTP server name
> as the server it will use the correct username and the saved password for this account.
NNTP accepts username upon connection requst, or NNTP client like Tb extracts username before @ in server name specification and uses it in authentication.
(b) Password in NNTP's authentication is optional. Password should passed only when NNTP server requests password by response code to passing of username.
In contrast to it, mail's protocol requests both username & password and "password is optional" is perhaps implemented as "null password" usually.
If multiple username of single news server environment, and if concurrent access to same news server with different username is required(different newsgroups if different username, charge relevant reason etc.), workaround by server name=username@news.server.name at Server Settings perhaps is almost mandatory if under current implementation of Tb.
You opened bug 566098 and this bug for same or very similar problem on different Tb releases, and repetedly posted complaints and test results/check results/your observations.
Does it mean that workaround of "server name=username@news.server.name" did never work if Thunderbird?
> - it took two lines in the tool -one each for username and another for password.
Probably "for username" when username is prompted and you requested to save it, and "for password" when password is prompted and you requested to save it.
Does "for password" entry consist of next?
key of the entry: "news server name" and "username",
data of the entry: password.
Anyway, current bug summary by you is apparently invalid, because, as proven by your testing and observations, Tb actually uses different username & password in news server access from ones in mail server access.
Comment 20•13 years ago
|
||
Because of next, servername becomes apnNUMBER@forteinc.com@news.forteinc.com like one in Tb's Server Settings if workaround is done.
> My news server is a .com and my username is a apnNUMBER@forteinc.com
It may produce Tb's problem, if Tb extracts username part from the string and use it in authentication.
Comment 21•13 years ago
|
||
FYI.
To see what happens at NNTP protocol level, Tb's NNTP log with timestamp is usually useful.
> https://wiki.mozilla.org/MailNews:Logging
> SET NSPR_LOG_MODULES=timestamp,nntp:5
> See http://tools.ietf.org/html/rfc4643#section-2.3.3 for authentication in NNTP
Reporter | ||
Comment 22•13 years ago
|
||
I'm sick and tried of you people - your new software to delete and install the new aborted or deleted the news groups I had set up in the password section. You programmed a single username and password in all three sections. After I repeatedly entered my username and password many times it finally saved it. I quit the tool and brought it back up and it seems to be keeping the second username.
The same thing happened last year at this time - see the other bug - I got it working once again. It seems no one ever figured out what did it last time and
closed the bug. I hope someone in the install and stuff gets this figured out.
Maybe someone has to have two usernames - one for mail and one for news in a Test Case in R&E engineering. (I'm a former R&E hardware and Software engineer (Sr. Scientist at the time) creating the department on a million line of code software. Our test cases were to the unit level and were extensive. It saved our business. I can read once again, but expect the same bug next year. martin
Comment 23•13 years ago
|
||
Two next log of same timestamp is seen in your log.
> Receiving: 200 Welcome to Forte Premium. Please Authenticate. (en-nntp-11.dc1-J14N57)
(Q1) Does it mean you define two news server accounts on same news server(different username required) in Tb?
Or merely concurrent access of multiple newsgroups of single news server in Tb?
If you touched/changed Server Name: field of Server Settings, mail.server.serverN.realhostname is created and used for server connection, and if you changed Server Name: field of Server Settings, content in mail.server.serverN.realhostname becomes different from mail.server.serverN.hostname. Because key used by password manager is mail.server.serverN.hostname, existence of realhostname often produces confusion in viewing/checking of saved password entries.
(Q2) Can you open your news server settings to us, in list style, istead of statements?
> Next entries in prefs.js, which has type=nntp attribute.
> mail.server.serverN.name <= Account's label name
> mail.server.serverN.hostname <= Initial Server Name: in Server Settings
> Used as key of password manager
> Used in server connection, if realhostname doesn't exist
> mail.server.serverN.realhostname <= Server Name: in Server Settings
> If Server Name: is touched/changed, realhostname is created
> Used in server connection, if realhostname exists
> mail.server.serverN.type = nntp
You can see signons.sqlite content directly by Firefox & add-on of SQLite Manager.
(1) Install SQLite Manager on Firefox.
(2) Terminate Tb, copy signons.sqlite to appropriate directory.
(3) Open(connect database) the copy of signons.sqlite.
As seen in Table(moz_loins) in the DB, key for Tb in password data access is hostname and username(encryptedUsername column in moz_loins, this is not key of the table of SQLite).
(i) hostname data is combination of <protocol> and <servername> in the Table.
If news server, it's news://....
So, misuse of imap://..., mailbox://..., smtp://... entry for news server
access is usually very hard to imagine.
This "combination of <protocol> and <servername>" is reflected to
Password Manager display correctly.
It's main reason why I say your bug summary is invalid and misleading.
(ii) Because there is no username information in news account definition in Tb,
it's impossible to associate username to next news server access,
unless association of last-used username and newsserver+newsgroup
is held internally at somewehre,
except when only one news account per one news server name is defined in Tb.
(Q3) Can you show us what password manager displays, in list style, instead of statements?
If possible, data when problem happens, and data when problem doesn't occur after your some actions, with detailed your actions/observations in list tyle, please.
(string of username itself is not relevant. replace by random string with keeping string length, please. don't open password text, please. never open signons.sqlite file to public, please. even if cyphered by Tb, ecypher by cracker is never impossible.)
I think password manager requests "SELECT ... for table in signons.sqlite" only once at open of password manager and doesn't automatically refresh display according to change of table by other process.
(Q4) Did you re-open password manager panel after you typed username/password and request to save at prompt?
I don't know about remembering of last used username by Tb.
So I asked about username@servername format definition in Server Settings of Tb.
(Q5) Have you tried it?
For single news account of Tb per single news server case:
You say two password manager entries, one for username prompt, one for password prompt, was created.
If so, next two entries are produced by Tb.
> (a) hostname=news://news.server.name, username=UserID, password=null
> (b) hostname=news://news.server.name, username=UserID, password=Password you typed
Tb doesn't request UNIQUE attribute for primary key of hostname in moz_login and
Tb doesn't request UNIQUE attribute for hostname+username(encryptedUsername column) combination.
So two entries of same hostname+username(encryptedUsername column) is not rejected by SQLite.
SQLite perhaps returns entry (b), which is last added, first for SELECT request, and Tb perhaps uses entry (b).
If entry (b) is somehow cleared(deleted by conection error etc.), entry (a) perhaps is used by next connection request.
Because "null password" is required for some servers who requests null password when password is optional, Tb probably uses null password in entry of (a) in such case.
And, Tb may use this entry (a) for all of automatic access to relevant newsgrops upon restart, and Tb may prompt for new password after the all automatic access fails, if Tb automatically prompts password after login failure using saved password(null in this case).
Similar phenomenon was reported to IMAP account for "password change at server" case, and problem was resolved by "clear saved password upon first login failure" and "check 'password is cleared' status correctly in each server access".
You are possibly looking similar phenomenon. And if so, it's independent from Tb release which you used/are using.
This is also another reason why I asked you about workaround by username@servername format definition.
And this kind of problem is major reason why question of "what happens if password entry is manually deleded" is asked by QA contributers many times.
Comment 24•13 years ago
|
||
Oh, next flow for successful login with username/password prompt was seen in second log.
> Receiving: 480 You must log in.
> ask for the news username <= Prompts for username by Tb
> use <>?)'"'( as the username
> Sending: AUTHINFO user <>?)'"'(
> Receiving: 381 More authentication needed <= Server requests password, passward is not optional
> ask for the news password <= Prompts for password by Tb
> Logging suppressed for this command (it probably contained authentication information)
> Receiving: 281 Authenticated and ready
Following is authentication step in first log.
> Receiving: 480 You must log in.
> ask for the news username <= Prompt for username by Tb
> Next state: NNTP_ERROR
> ClosingConnection
> Sending: QUIT
If you typed correct username at username prompt, and if null password of entry I called (a) is used, Tb should generate log like next.
> Receiving: 480 You must log in.
> ask for the news username <= Prompt for username by Tb
> use <>?)'"'( as the username
> Sending: AUTHINFO user <>?)'"'(
> Receiving: 381 More authentication needed <= Server requests password, passward is not optional
> (use null password in entry (a))
> Logging suppressed for this command (it probably contained authentication information)
> Receiving: xxx, which is reject of login due to incorrect password.
It may be internal error due to wrong/unexpected entry like (a), after correct username is obtained by prompt for username due to deletion of entry I call (b).
Can you check password manager entries after deletion of password entries for the news server from Password Manager of Tb, prompt for username/correct username/save username, prompt for password/correct password/save password, using Firefox/SQLite Manager?
Reporter | ||
Comment 25•13 years ago
|
||
As I said I have it working now. Here is the dump of the trouble shooting page.
As far as the password manager - it only had Imap -mail and smtp in it. The referenced to my APN was deleted. I was able to get them added after many tries.
It added differently - and when I look at troubleshooting - it shows odd results.
It might be ok to you but invalid to me.
I'll have to try to figure a different way if text isn't an option.
It is only graphic - but contains line thusly :
imap://mail.consolidated.net(same text) lionslair password
news://news60forteinc.com(same /#username) blank area APNusername
news://news60forteinc.com(same /#password) blank area APNpassword
smtp://smtp.consolidated.net(same text) lionslair password
Before this version wiped out the news:// it was a single line.
Now after I was able to force saving - I have two news://...
Here is the dump from troubleshooting page. :
Application Basics
Name: Thunderbird
Version: 7.0.1
User Agent: Mozilla/5.0 (Windows NT 5.1; rv:7.0.1) Gecko/20110929 Thunderbird/7.0.1
Profile Directory: Open Containing Folder
(Local drive)
Application Build ID: 20110929044556
Enabled Plugins: about:plugins
Build Configuration: about:buildconfig
Mail and News Accounts
account1:
INCOMING: account1, , (imap) mail.consolidated.net:143, plain, passwordCleartext
OUTGOING: smtp.consolidated.net:25, alwaysSTARTTLS, passwordCleartext, true
account2:
INCOMING: account2, , (none) Local Folders, plain, passwordCleartext
account3:
INCOMING: account3, , (nntp) news60.forteinc.com:119, plain, passwordCleartext
OUTGOING: smtp.consolidated.net:25, alwaysSTARTTLS, passwordCleartext, true
Extensions
Lightning, 1.0b7, true, {e2fda1a4-762b-4020-b5ad-a41df1933103}
Modified Preferences
Name: Value
extensions.lastAppVersion: 7.0.1
gfx.blacklist.direct2d: 2
gfx.blacklist.layers.direct3d10: 2
gfx.blacklist.layers.direct3d10-1: 2
mail.openMessageBehavior.version: 1
network.cookie.prefsMigrated: true
places.database.lastMaintenance: 1320380191
places.history.expiration.transient_current_max_pages: 15928
print.print_printer: EPSON N10 N11 Series
print.printer_EPSON_N10_N11_Series.print_bgcolor: false
print.printer_EPSON_N10_N11_Series.print_bgimages: false
print.printer_EPSON_N10_N11_Series.print_command:
print.printer_EPSON_N10_N11_Series.print_downloadfonts: false
print.printer_EPSON_N10_N11_Series.print_edge_bottom: 0
print.printer_EPSON_N10_N11_Series.print_edge_left: 0
print.printer_EPSON_N10_N11_Series.print_edge_right: 0
print.printer_EPSON_N10_N11_Series.print_edge_top: 0
print.printer_EPSON_N10_N11_Series.print_evenpages: true
print.printer_EPSON_N10_N11_Series.print_footercenter:
print.printer_EPSON_N10_N11_Series.print_footerleft: &PT
print.printer_EPSON_N10_N11_Series.print_footerright: &D
print.printer_EPSON_N10_N11_Series.print_headercenter:
print.printer_EPSON_N10_N11_Series.print_headerleft: &T
print.printer_EPSON_N10_N11_Series.print_headerright: &U
print.printer_EPSON_N10_N11_Series.print_in_color: true
print.printer_EPSON_N10_N11_Series.print_margin_bottom: 0.5
print.printer_EPSON_N10_N11_Series.print_margin_left: 0.5
print.printer_EPSON_N10_N11_Series.print_margin_right: 0.5
print.printer_EPSON_N10_N11_Series.print_margin_top: 0.5
print.printer_EPSON_N10_N11_Series.print_oddpages: true
print.printer_EPSON_N10_N11_Series.print_orientation: 0
print.printer_EPSON_N10_N11_Series.print_page_delay: 50
print.printer_EPSON_N10_N11_Series.print_paper_data: 1
print.printer_EPSON_N10_N11_Series.print_paper_height: 11.00
print.printer_EPSON_N10_N11_Series.print_paper_size_type: 0
print.printer_EPSON_N10_N11_Series.print_paper_size_unit: 0
print.printer_EPSON_N10_N11_Series.print_paper_width: 8.50
print.printer_EPSON_N10_N11_Series.print_reversed: false
print.printer_EPSON_N10_N11_Series.print_scaling: 1.00
print.printer_EPSON_N10_N11_Series.print_shrink_to_fit: true
print.printer_EPSON_N10_N11_Series.print_to_file: false
print.printer_EPSON_N10_N11_Series.print_unwriteable_margin_bottom: 0
print.printer_EPSON_N10_N11_Series.print_unwriteable_margin_left: 0
print.printer_EPSON_N10_N11_Series.print_unwriteable_margin_right: 0
print.printer_EPSON_N10_N11_Series.print_unwriteable_margin_top: 0
print.printer_HP_LaserJet_4V/4MV_PostScript.print_bgcolor: false
print.printer_HP_LaserJet_4V/4MV_PostScript.print_bgimages: false
print.printer_HP_LaserJet_4V/4MV_PostScript.print_command:
print.printer_HP_LaserJet_4V/4MV_PostScript.print_downloadfonts: false
print.printer_HP_LaserJet_4V/4MV_PostScript.print_edge_bottom: 0
print.printer_HP_LaserJet_4V/4MV_PostScript.print_edge_left: 0
print.printer_HP_LaserJet_4V/4MV_PostScript.print_edge_right: 0
print.printer_HP_LaserJet_4V/4MV_PostScript.print_edge_top: 0
print.printer_HP_LaserJet_4V/4MV_PostScript.print_evenpages: true
print.printer_HP_LaserJet_4V/4MV_PostScript.print_footercenter:
print.printer_HP_LaserJet_4V/4MV_PostScript.print_footerleft: &PT
print.printer_HP_LaserJet_4V/4MV_PostScript.print_footerright: &D
print.printer_HP_LaserJet_4V/4MV_PostScript.print_headercenter:
print.printer_HP_LaserJet_4V/4MV_PostScript.print_headerleft: &T
print.printer_HP_LaserJet_4V/4MV_PostScript.print_headerright: &U
print.printer_HP_LaserJet_4V/4MV_PostScript.print_in_color: true
print.printer_HP_LaserJet_4V/4MV_PostScript.print_margin_bottom: 0.5
print.printer_HP_LaserJet_4V/4MV_PostScript.print_margin_left: 0.5
print.printer_HP_LaserJet_4V/4MV_PostScript.print_margin_right: 0.5
print.printer_HP_LaserJet_4V/4MV_PostScript.print_margin_top: 0.5
print.printer_HP_LaserJet_4V/4MV_PostScript.print_oddpages: true
print.printer_HP_LaserJet_4V/4MV_PostScript.print_orientation: 0
print.printer_HP_LaserJet_4V/4MV_PostScript.print_pagedelay: 500
print.printer_HP_LaserJet_4V/4MV_PostScript.print_paper_data: 1
print.printer_HP_LaserJet_4V/4MV_PostScript.print_paper_height: 11.00
print.printer_HP_LaserJet_4V/4MV_PostScript.print_paper_size_type: 0
print.printer_HP_LaserJet_4V/4MV_PostScript.print_paper_size_unit: 0
print.printer_HP_LaserJet_4V/4MV_PostScript.print_paper_width: 8.50
print.printer_HP_LaserJet_4V/4MV_PostScript.print_reversed: false
print.printer_HP_LaserJet_4V/4MV_PostScript.print_scaling: 1.00
print.printer_HP_LaserJet_4V/4MV_PostScript.print_shrink_to_fit: true
print.printer_HP_LaserJet_4V/4MV_PostScript.print_to_file: false
print.printer_HP_LaserJet_4V/4MV_PostScript.print_unwriteable_margin_bottom: 0
print.printer_HP_LaserJet_4V/4MV_PostScript.print_unwriteable_margin_left: 0
print.printer_HP_LaserJet_4V/4MV_PostScript.print_unwriteable_margin_right: 0
print.printer_HP_LaserJet_4V/4MV_PostScript.print_unwriteable_margin_top: 0
Graphics
Adapter Description: Intel(R) 82845G/GL/GE/PE/GV Graphics Controller
Vendor ID: 8086
Device ID: 2562
Adapter RAM: Unknown
Adapter Drivers: ialmrnt5
Driver Version: 6.13.1.3485
Driver Date: 3-13-2003
WebGL Renderer: false
GPU Accelerated Windows: 0/2
Comment 26•13 years ago
|
||
As near as I can figure out from your comments, your problem seems to essentially be bug 437930...
Comment 27•13 years ago
|
||
(In reply to Martin H. Eastburn from comment #25)
> It is only graphic - but contains line thusly :
>(snip)
> news://news60forteinc.com(same /#username) blank area APNusername
> news://news60forteinc.com(same /#password) blank area APNpassword
>(snip)
Can you send me your signons.sqlite file to me via mail?
I surely promise you that I will never open your signons.sqlite file to public, and that I will never try to decypher cyphered username/password data in your signons.sqlite file(I have no skill to decypher cyphered username/password data by Tb in signons.sqlite file of Tb, so I can't decypher data).
Anyway, please answer to my questions such as "only single news account definition for single news server in Tb, or not?".
Please show us important data such as "your news server definition in Tb" in listing style, instead of lengthy/hard-to-read-or-understand statements.
By the way, please never paste long data in comment of bug report at B.M.O(bugzilla.mozilla.org). If required, save data to file and attach the file to this bug, please, to keep your bug's readability.
> Before this version wiped out the news:// it was a single line.
> Now after I was able to force saving - I have two news://...
It may be difference between (i) plain password data file(s...... file, password data is cyphred by Tb though) of older releases of Tb and (ii) signons.sqlite of SQLite of Tb 7. It may be a reason of differene in phenomena between this bug for Tb 7 and your bug 566098 for older Tb release(s).
Reporter | ||
Comment 28•13 years ago
|
||
I think you are confused. When the new 7.0.1.0 came in - Just before install - I had email and a news feed from APN. Each had their own username and password. After installing and loading - it worked. I had to reboot and it was then failing. The username and password in the password tool - was missing for news.
I have and only want a Single News username/password. Only one feed. I had lost it. Single email. I wanted and had an email and a news feed.
The installing or setting up program - somewhere some how did this. I can read,
so the files point to the current status, not the old one.
Comment 29•13 years ago
|
||
I doubt it was the update that caused this to happen; more likely, it was a transient failure in authentication that happened to coincide with the update. Thunderbird presently forgets saved NNTP authentication credentials upon any authentication failure; this could account for the apparent deletion of the password. In lieu of any information to suggest that this was not the case, I am going to assume that this was the case.
Reporter | ||
Comment 30•13 years ago
|
||
It was. It happened last year also. The file listed in the other bug was set up
for only email. Nothing for news. Another file had mail, local and news all set to the same parameters.
The password tool - tools/options/security - had only mail and smtp only.
It was fully functional since I fixed it last October when the other bug was issued.
Something trashed it and not mail and smtp. One or two lines of data out of
hundreds. Likely a loop counter or indexed function that makes a poor decision or
step. Look at the tail end of the other bug - that what was entered this year and
start reading downwards - you will begin to see some light.
Martin
Updated•13 years ago
|
Status: UNCONFIRMED → RESOLVED
Closed: 13 years ago
Resolution: --- → DUPLICATE
Reporter | ||
Comment 32•13 years ago
|
||
I'll say it again and add a note.
I was able to get my username and password saved after a number of tries.
It now works after that.
I just installed version 8.0 and it worked as it should. Nothing was broken.
Thank you for who ever fixed the install program and possible other places.
This is closed and thanks for the fix in 8.0.
Martin
You need to log in
before you can comment on or make changes to this bug.
Description
•