Password not stored ?

Bug #613830 reported by Jaroslaw Polok
134
This bug affects 29 people
Affects Status Importance Assigned to Milestone
Exchange Data Provider for Lightning
Confirmed
Low
Unassigned

Bug Description

Running: thunderbird 2.0.0.24 , Ligtning 0.9 and exchange provider 0.7. (same problem with 0.4).

After setting up the Calendar Exchange account, on all restarts of thunderbird, provider asks for the password again despite the fact that 'Use password manager to remember this password' checkbox has been selected .

Dump shows:

unknown [object Object]: User:USERNAME
unknown [object Object]: Server: https://USERNAME@EXCHANGESERVER/EWS/Exchange.asmx
4/NAME: Init
4/NAME: doRequest
4/NAME: doRequest
4/NAME: do init
4/NAME: getAccount
4/NAME: doRequest

(after supplying the password)

4/NAME: USER: USERNAME
4/NAME: Sending: <?xml version="1.0" encoding="utf-8"?>
<soap:Envelope xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/" xmlns:t="http://schemas.microsoft.com/exchange/services/2006/types" xmlns:m="http://schemas.microsoft.com/exchange/services/2006/messages">
...

Tags: auth
Revision history for this message
Simon Schubert (corecode) wrote :

Do you use the same USERNAME in the calendar URI and in the password dialog?

Revision history for this message
Jaroslaw Polok (jaroslaw-polok) wrote : Re: [Bug 613830] Re: Password not stored ?

Simon Schubert wrote:
> Do you use the same USERNAME in the calendar URI and in the password
> dialog?
>

Yes

However, unlike in your documentation, the URI is:

https://<email address hidden>/EWS/Exchange.asmx

(no first '@provider.com' part)

Jarek

Revision history for this message
Simon Schubert (corecode) wrote :

This might be an interaction with the TB2 password manager. Since I can't maintain TB2 compatibility all by myself, I'll close this for now until I receive a report for a newer lightning version.

Changed in lightning-exchange-provider:
status: New → Won't Fix
Revision history for this message
Huw (huwnet) wrote :

I have the same problem with Thunderbird 3.1. Using Outlook.com (aka Live@Edu) and connecting to the calendar with http://outlook.com/EWS/Exchange.asmx

Revision history for this message
Simon Schubert (corecode) wrote :

I have some changes to the user/password management, but they need more work before I can commit them.

Changed in lightning-exchange-provider:
status: Won't Fix → Confirmed
importance: Undecided → Low
Revision history for this message
B. K. (b-d-kaatz) wrote :

Greetings,

Just as a note while you are working on this one, I wanted to remind you that one of the ways that you can (and/or have to, depending on your IT staff) log into Exchange is with the combination of the domain and the username, e.g. "corpdomain\username" for the username.

I wanted to remind you before you went to commit on this one. Hopefully, I made it in time.

Thanks a lot for the good work.

Revision history for this message
Martin Weißhaupt (mweisshaupt) wrote :

@B. K.: Thx, that solved the problem for me.

Here is an Example:

Calendar URL: https://mydomain\<email address hidden>/EWS/Exchange.asmx
Login: mydomain\myuser

Revision history for this message
Marc Abramowitz (msabramo) wrote :

I am having this problem also with Thunderbird 3.1.7, Lightning 1.0b2, and Provider for Microsoft Exchange 0.11

I also see this in the Error Console:

Error: Assert failed: undefined
2: [file:///Users/marca/Library/Thunderbird/Profiles/hrf8lgov.default/extensions/%7Be2fda1a4-762b-4020-b5ad-a41df1933103%7D/modules/calAuthUtils.jsm:149] calPasswordManagerGet
3: [file:///Users/marca/Library/Thunderbird/Profiles/hrf8lgov.default/extensions/%7Be2fda1a4-762b-4020-b5ad-a41df1933103%7D/modules/calUtils.jsm -> file:///Users/marca/Library/Thunderbird/<email address hidden>/js/calExchange.js:912] anonymous
4: [file:///Users/marca/Library/Thunderbird/Profiles/hrf8lgov.default/extensions/%7Be2fda1a4-762b-4020-b5ad-a41df1933103%7D/modules/calUtils.jsm -> file:///Users/marca/Library/Thunderbird/<email address hidden>/js/calExchange.js:146] anonymous
5: [file:///Users/marca/Library/Thunderbird/Profiles/hrf8lgov.default/extensions/%7Be2fda1a4-762b-4020-b5ad-a41df1933103%7D/modules/calUtils.jsm -> file:///Users/marca/Library/Thunderbird/<email address hidden>/js/calExchange.js:133] setTimeout_notify

Source File: file:///Users/marca/Library/Thunderbird/Profiles/hrf8lgov.default/extensions/%7Be2fda1a4-762b-4020-b5ad-a41df1933103%7D/modules/calUtils.jsm -> file:///Users/marca/Library/Thunderbird/Profiles/hrf8lgov.default/extensions/%7Be2fda1a4-762b-4020-b5ad-a41df1933103%7D/calendar-js/calUtils.js
Line: 975

so hopefully that is a good clue as to what's going on here.

Revision history for this message
Marc Abramowitz (msabramo) wrote :

Just noticed B.K.'s suggestion - I created a brand new calendar using that approach - basically I made the URL https://DS\marca@... (when I look at properties now, it's been url encoded to https://DS%5Cmarca@...)

Now Thunderbird doesn't ask for my password on every startup and I also don't see the error that I posted above in the Error Console anymore.

So this might just be a matter of revising the documentation a little or adding some code that can automatically determine the AD domain (if that's even possible - I know very little about AD and other Windows backend stuff).

Thanks, B.K.!!!

Revision history for this message
Forage (forage) wrote :

I've got similar issues with logging in. When I start Thunderbird I get presented with the login dialog four times in a row, despite the fact that I check 'Remember user name and password'.
The strange thing is that both the user name and password are already filled in, with the exception of the password in the first appearing dialog. Every time the dialog is presented the remember checkbox it unchecked and I can just hit Enter 3 times. After that everything works fine.
There are no errors recorded in the Error Console.

Exchange: 2007 SP1
Thunderbird: 3.1.7
OS: Ubuntu 10.10 (x32)
Provider for MS Exchange: 0.12

Let me know if you need a debug log.

Revision history for this message
Holger Goetz (holgerg) wrote :

This issue (and bug #676403 :"Passord request pops up multiple times - password is saved" - which is basically the same) seems to me very much like some sort of *race condition*:

Tests i've done based on current git version that pamper this assumption:

1) changing code to skip all actions inside "getAccount" when there was any action pending - in my case that already reduced the prompts to only one.

2) modified the "getInterface" code which does a discardAccount() originally after 2 calls - changed that to drop the account Info only after 100 calls .... and voila: No asking about passwords anymore.

Hope this get us in the right direction ;-)

Best,
Holger

Revision history for this message
Holger Goetz (holgerg) wrote :

Forgot to mention:

And only one call to *passwordManagerGet* done by getAccount is left in the log. before there where multiple and calls to *getCredentials* as well - what somehow seemed too much. At least when the password IS correctly stored in the LoginManager of TB.

Thx.
Holger

Revision history for this message
miatawnt2b (millerjw) wrote :

This is also an issue for several people here. We actually use BPOS, so the workaround of using a domain login is not an option.

Revision history for this message
Joe Niski (joeniski) wrote :

on Ubuntu 10.10 64-bit
Thunderbird 3.1.9pre (64-bit)
Lightning 1.0b2 (64-bit)
lightning-exchange-provider .12

We recently moved our Exchange hosting to postoffice.net instead of hosting it internally.

Using the URL format

https://<email address hidden>@owa.postoffice.net/EWS/Exchange.asmx

my colleagues and i encounter the problem with repeated password confirmations, and the "Use password manager" box unchecked.

Using the URL format

https://DOMAIN\<email address hidden>@owa.postoffice.net/EWS/Exchange.asmx

produces even more password requests and never saves them, and never seems to load the calendar.

Revision history for this message
Joe Niski (joeniski) wrote :

addendum to comment #14:

Using the URL format

https://DOMAIN\<email address hidden>/EWS/Exchange.asmx

seems to be behaving better - the password seems to be saved after initial connection, no prompts at startup or when the calendar refreshes.

Revision history for this message
Simon Schubert (corecode) wrote :

Now that is interesting. That's how it is working for me. So how come all other users suddenly have to enter their passwords?

Revision history for this message
soundbite (sound-bite) wrote :

Same problem here. I'm using Live@edu (outlook.com). My URI is https://MY.DOMAIN\<email address hidden>/EWS/Exchange.asmx. 4 prompts, never saves.

Revision history for this message
Savek (savek-launchpad) wrote :

Confirm for TB 3.1.8 with Plugin 0.12 - Version 0.11 did not have this problem.
Could be fixed for me by prepending the DOMAIN\ part to the url and username/password dialog.

Revision history for this message
Douglas Choma (doug-inertiaim) wrote :

I'm seeing the same behavior with...
TB 3.1.10
Lightning 1.0b2
lightning-exchange-provider .13

I'm using it with Rackspace hosted Exchange, and I've tried every variation mentioned. When I restart Thunderbird it always prompts for the login twice.

What's really interesting is that the calendar actually displays before the prompts do... so I don't even know if uses those credentials that it's asking for.

Revision history for this message
Steven Danz (4dacres) wrote :

Same versions as post #19, and seeing the same issues. Also noticed that the Error Console is empty (and I can't see a way to turn on the log file from the add-on window, the Options button is grayed out).

Revision history for this message
Steven Danz (4dacres) wrote :

Adding in the Domain seems to make the issue go away for me as well...

Revision history for this message
everet anema (eveanema) wrote :

I have the same problem with:
Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.18) Gecko/20110616 Lightning/1.0b2 Thunderbird/3.1.11

and provider for microsoft exchange 0.14

my URI is of the form:
https://exchange.company.com\username@auto/EWS/Exchange.asmx

I receive 3 un/pw prompts every time I open Thunderbird where I must enter username (not exchange.company.com\username)

gladly provide more information if required

Revision history for this message
Simon Schubert (corecode) wrote :

That URI is almost certainly wrong. why don't you use username@auto, or just auto?

Revision history for this message
everet anema (eveanema) wrote :

i switched the URI to:

https://exchange.company.com\username@auto

but the problem still occurs although I'm receiving 4 un/pw prompts now

 (I also cant permanently dismiss events as in bug #633352 if its related)

Revision history for this message
Simon Schubert (corecode) wrote :

is that the username you use to log in to owa? It should be something like mycorp\username

Revision history for this message
Holger Goetz (holgerg) wrote :

Hi,

want to repeat my comment from above - the following hack still works for me on current main branch git versions - means the same problem persists over the versions and for me it does indicate some sort of race condition where multiple requests are done and the process gets aborted too early:

--- cut ----
(( from Holger Goetz wrote on 2011-02-01: #11 ))
....
This issue (and bug #676403 :"Passord request pops up multiple times - password is saved" - which is basically the same) seems to me very much like some sort of *race condition*:
....
2) modified the "getInterface" code which does a discardAccount() originally after 2 calls - changed that to drop the account Info only after 100 calls .... and voila: No asking about passwords anymore.
--- cut ----

tags: added: auth
Revision history for this message
Hardy Heroin (hardy-heroin) wrote :

Thunderbird 5.0 , Lightning 1.0b5 and exchange provider 0.17.

I can confirm that the workaround that holgerg provided in comment #26 prevents Thunderbird (5.0) from giving me 3 pop ups asking for the password (even though it is already saved, just pressing ok works). Thus, changing line ~950 from:
if (this.mAuthFail++ > 2) {
to
if (this.mAuthFail++ > 100) {
Actually it starts to fail from 10 (so on my PC 11 still works).

Incidentally I also get the following error message 10 times:

Error: [Exception... "'Method not implemented' when calling method: [nsIAuthPrompt2::asyncPromptAuth]" nsresult: "0x80004001 (NS_ERROR_NOT_IMPLEMENTED)" location: "<unknown>" data: no]

Perhaps it's related?

As for the correct URL, I also had to use the URL form as provided by jaroslaw-polok in comment #2:
https://<email address hidden>/EWS/Exchange.asmx

Now it finally works.

Revision history for this message
scoopex (ms-ubuntu) wrote :

Same problem here with TB7 and plugin release 0.17.

Using the following URL does the trick: http://mydomain\myuser@hostname/EWS/Exchange.asmx

Please raise priority, because this is a usability-show-stopper....

Revision history for this message
Simon Schubert (corecode) wrote :

I'm sorry that this issue has not been addressed yet, but I just have no time to work on this right now. If you want to expedite the fix, you will have to work on this yourself or find somebody to work on it.

Revision history for this message
Tero Toivonen (toivonen-9) wrote :

I have the newest stable versions from Thunderbird, Lightning and the exchange provider. I have the same porblem with the multiple password requests. I noticed if the calendar is not ticked from the lighning at start up everything works good. It dosen't even asks passwords etc. when you tick it after the program is fully running.

The problem is really annoying.

Revision history for this message
Nicolas Mundbrod (nicolas-mundbrod) wrote :

just wanna confirm that the plugin is principally very useful (I recently installed it), but the problem forced my to disable it, it just kept annoying me

Revision history for this message
Nicolas Mundbrod (nicolas-mundbrod) wrote :

forgot to say that the adding of the domain also resolved the occurring password prompts - but some users might not search for a solution...

Revision history for this message
Luke Scharf (lukescharf) wrote :

Adding the domain and username to the URL is a usable workaround for me.

Revision history for this message
Hugh Caley (hcaley-9) wrote :

I was also able to use the change in comment #27 to get mine to stop pestering me for username/password confirmation; however, I also had to change the highest version number for Thunderbird 9.

I can post new items to the Exchange Calendar, and sometimes the calendar displays, sometimes it doesn't.

Revision history for this message
Jan Hübner (jan-huebner) wrote :

I'm using Thunderbird 8.0 and 0.17 at the moment. I did configure the correct domain\user stuff and still get two password prompts.

Revision history for this message
aivan (ivan-arandjelovic) wrote :

The winning combination seems to be entering location in the following form (the trick is that username offered in the enter user/pass dialog does not need to be altered, otherwise it cannot be re-used next time):

https://DOMAIN\bparkins@auto/EWS/Exchange.asmx

where DOMAIN is company domain name (like BIGCORP)
bparkins is domain username (email usually b.parkins@...)

Revision history for this message
Daniel O'Connor (daniel-oconnor) wrote :

Is there a related usability bug or similar for "prompt user to configure Exchange credentials inclusive of domain"? At the moment, it takes a user getting annoyed and googling for this bug to discover this.

Revision history for this message
Daniel O'Connor (daniel-oconnor) wrote :

Additionally, I suffer from the behaviour described in #863150 when I choose to cancel authenticating - repeatedly, I'm re-prompted for authorisation.

Revision history for this message
Jaroslaw Polok (jaroslaw-polok) wrote :

My understanding is that this project has been discontinued ...

See here: http://www.1st-setup.nl/wordpress/?page_id=133

Cheers

Jarek

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Duplicates of this bug

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.