Ubuntu

user-id and password not sent automatically for rss-feed

Reported by Rolf Leggewie on 2008-04-25
26
This bug affects 4 people
Affects Status Importance Assigned to Milestone
Mozilla Thunderbird
Confirmed
Medium
thunderbird (Ubuntu)
Low
Unassigned

Bug Description

Binary package hint: thunderbird

This is a bug I have seen for quite some time. I am in the "make hardy the best release there ever was"-mood today and have brought myself to really reporting every single bit of problem I have put off for so long so somebody with the needed skills has a chance to fix it.

I subscribe to an RSS feed hosted on a password-protected https-site in Thunderbird. TB works fine but periodically asks me for the password although I have marked "save password with password manager" in the dialog. In fact, the necessary fields are displayed filled in, but the pop-up comes back to me from time to time and I have to hit the OK button.

I have set up a test installation which is exactly the same as the one I am having problems with at https://clients.leggewie.biz/tester/. The ssl-certificate is from cacert.org, so your browser might throw that up at first. The user you need to get in is tb-tester and the password is launchpad. The RSS feed is at https://clients.leggewie.biz/tester/index.php?title=Special:Recentchanges&feed=rss When you susbscribe to that in TB and save the login credentials, you should have TB nagging you from time to time to with a login screen.

Confirming in Thunderbird 0.9.
I agree with reporter. Our internal company feed uses basic password
authentification over SSL connection. Everything works fine, but clicking OK in
the password dialog on each Thunerbird startup is tiresome - given the fact that
TB remembers all required data.

is there a test feed with authentication which we could use?

(In reply to comment #2)
> is there a test feed with authentication which we could use?

You could use the RSS feed at easytree.org
You need to registrer first, but I have been bugged 0 times since I registered.

In , Tdd (tdd) wrote :

Same problem here. This *is* tiresome.

I can vouch for the bug. I use basic auth to access RSS feeds for "friends only"
posts at LiveJournal. You can test this using anyone's blog on LJ by providing
the username/password in the url:

http://username:<email address hidden>/~blogowner/data/atom?auth=digest

(make sure to substitute the name of an actual blog for "blogowner")

This is how LiveJournal allows people to check for "friends only" posts by
bloggers. I ran Ethereal during TB's RSS update and it's obvious that TB simply
doesn't pass along the username and password in random cases. Sometimes it
works, sometimes it doesn't. Actually, it wasn't a problem when I only had one
RSS feed with authentication, but I recently change several other LJ feeds to
include my authentication, and now I get the login dialog at least once per update.

This bug has just gotten worse for anyone who subscribes to multiple LiveJournal feeds via Thunderbird, because LiveJournal just changed to forcing each user into their own sub-domain (e.g. username.livejournal.com). Since Thunderbird stores and prompts for passwords on a per-subdomain basis, on startup Thunderbird now not only asks once for a LiveJournal login like it used to, but for every single feed. For an LJ addict like me, that's about 30 password prompts on startup, even though the password is stored in the Password Manager.

Please fix!

I'm experiencing the same problem with corporate feeds that are protected by a username/password. Even though the information is retained (so I just have to click okay), it's still very annoying especially if you have a lot of feeds, to have a click okay a dozen times when starting up TBird! (using 1.5).

In , Mcow (mcow) wrote :

This is more than a polish issue.

In , Mcow (mcow) wrote :

*** Bug 356420 has been marked as a duplicate of this bug. ***

In , Mcow (mcow) wrote :

See also bug 354258.

Marked bug 324146 as a duplicate of this one. This issue is still outstanding and is substantial enough that the RSS portion of TB simply is unusable for my purposes.

For many of the authenticated feeds (IBM, Livejournal), I simply have the forums email me with updates. I consider this to be a functional workaround, but this should be unnecessary.

How do we get this picked up by someone with resolver skill?

In , Mcow (mcow) wrote :

*** Bug 324146 has been marked as a duplicate of this bug. ***

This bug has been around for a long time. Any chance of getting this fixed? It's greatly annoying and limits TB's usefulness as an RSS feedreader. Thanks!

I second Zer0(In reply to comment #13)
> This bug has been around for a long time. Any chance of getting this fixed?
> It's greatly annoying and limits TB's usefulness as an RSS feedreader. Thanks!
>

I second that.

*** Bug 371235 has been marked as a duplicate of this bug. ***

Hi

It's been about half a year now since last comment, TB2 is at 2.0.0.4 but this problem still exists. Big problem, which shouldn't be that difficult to fix for someone who knows the code.

I really don't want to switch to a separate feed reader, but right now it's four OK clicks every startup and I'm probably lucky to have so few different auth feeds!

(In reply to comment #16)
> Hi
>
> It's been about half a year now since last comment, TB2 is at 2.0.0.4 but this
> problem still exists. Big problem, which shouldn't be that difficult to fix for
> someone who knows the code.
>
> I really don't want to switch to a separate feed reader, but right now it's
> four OK clicks every startup and I'm probably lucky to have so few different
> auth feeds!
>

Forgot to ask in the last comment: someone more knowledgeable, can this be fixed with an Add-on?

This bug is not Windows specific. I'm experiencing the problem here with Thunderbird 2.0.0.4 on Mac OS 10.4.10.

This bug is already 3 years old. Any chance to see it fixed?

There is an "Auto Auth" addon that does this exact thing for Firefox. Perhaps contacting the author is a good idea and have him take a look at this.

In , Obf (obf) wrote :

I really would like to see this bug solved, since it is distracting everytime to confirm my username and password. Especially because TB knows both of them.

I have installed Auto Auth in Thunderbird and it works as expected.

http://www.chrisfinke.com/addons/autoauth/

Bug 223636 should be the core fix...

Binary package hint: thunderbird

This is a bug I have seen for quite some time. I am in the "make hardy the best release there ever was"-mood today and have brought myself to really reporting every single bit of problem I have put off for so long so somebody with the needed skills has a chance to fix it.

I subscribe to an RSS feed hosted on a password-protected https-site in Thunderbird. TB works fine but periodically asks me for the password although I have marked "save password with password manager" in the dialog. In fact, the necessary fields are displayed filled in, but the pop-up comes back to me from time to time and I have to hit the OK button.

I have set up a test installation which is exactly the same as the one I am having problems with at https://clients.leggewie.biz/tester/. The ssl-certificate is from cacert.org, so your browser might throw that up at first. The user you need to get in is tb-tester and the password is launchpad. The RSS feed is at https://clients.leggewie.biz/tester/index.php?title=Special:Recentchanges&feed=rss When you susbscribe to that in TB and save the login credentials, you should have TB nagging you from time to time to with a login screen.

Rolf Leggewie (r0lf) wrote :

I have set TB to check for new articles in the feeds every 100 minutes. I guess that is about the interval in which I am being asked to reenter the credentials.

Alexander Sack (asac) wrote :

Thanks for your bug report. Could you please carify whether you see this on sites that can be verified by built-in certs? Do you have setup the cacert root certificate properly in thunderbird?

Changed in thunderbird:
status: New → Incomplete
Rolf Leggewie (r0lf) wrote :

Well, if you tell me about a site with a PW-protected RSS feed over https somewhere out in the wild, I'll gladly do it ;-) I guess there aren't too many which is why my report included a test case on my own server.

As far as cacert root certificate properly set up, hm, I am not sure. The connection is made, so my guess is it is properly set up. How do I verify?

Were you unable to reproduce this with the site I gave you?

Changed in thunderbird:
status: Incomplete → New

*** Bug 369267 has been marked as a duplicate of this bug. ***

This is a weird UI inconsistency; marking wanted-thunderbird3+.

*** Bug 345092 has been marked as a duplicate of this bug. ***

I also use a password-protected RSS feed over https from a self-signed site that I've added a permanent exception for. Thunderbird asks me once at startup for the username and password, but not again after that. I'd actually quite like it to not ask me at all (I've saved the username and password, but every time it pops up a dialog with them filled in that I have to click ok for), but I don't think that was the OP's complaint.

Rolf Leggewie (r0lf) wrote :

Thank you for your comment, Neil. Actually, I think you are experiencing the same situation that I have described. Except that you have somehow managed to be bothered only once per session. I think TB nags me periodically as well as at startup.

Setting bug to confirmed.

Changed in thunderbird:
importance: Undecided → Low
status: New → Confirmed

Same problem here with Thunderbird 2.0.0.16.

This problem has been reported in 2004 with version 0.9!

I also had password problems (with HTTP proxies) in FF2, hopefully they got fixed with FF3, but I'm tired with this!

Can't someone write a fix to manage these RSS HTTP passwords properly?

Same problem in 2.0.0.17 (20080925)

AutoAuth is not a perfect solution, because:
1) It's hard to find it, may be one should add information about it into FAQ?
2) Window with password confirmation still appearing, but now it immidiately closing. It's ok if you have less than ten subscriptions, but when you have 30+ it become annoying.

I just added a password protected RSS feed, and promptly noticed this bug (no pun intended). Any progress on fixing it? The password is clearly saved, so it's pretty clunky that I should have to click "OK" every time I start TB for what appears to be no good reason...

#22 is still the only available solution Mattias, while #28 has valid criticism from Anton. for your single passworded feed, it should do well enough, though.

I have also experienced the repeating prompts at intervals matching the "Check for new articles every __ minutes" setting.

The feed I am accessing is over https with an invalid certificate. An exception for the certificate was made.

Just installed TB3beta1, and after 4 years this bug still exists.

Thanks Leho! That works like a charm. This is perhaps a stupid idea, but until it's fixed, could there be a message that informs the user about this workaround if the password is saved when using an RSS feed? It's a little steep to expect folks to digest 30 or so comments, if they even find this thread. Most people would probably live with the problem, or just delete the RSS feed.

still unchanged in karmic

tags: added: karmic
Rolf Leggewie (r0lf) wrote :

judging from the upstream bug I just linked to, this is not related to whether it's a secure connection or not. Any rss feed with a user/pw will trigger this behaviour.

Rolf Leggewie (r0lf) wrote :

http://www.chrisfinke.com/addons/autoauth/ was put forward as a workaround. I think I'll give it a spin.

summary: - password protected rss feed on https gives problems
+ user-id and password not sent automatically for rss-feed
Changed in thunderbird:
status: Unknown → Confirmed

Still bugged in TB 3.0 RC1... Seriously...

I really don't understand why it can NOT ask the email password, but has to ask the RSS password (although it's stored...). This is annoying, and I can't imagine it being hard to fix.

PS: the AutoAuth solution does not yet work with TB3.

Same problem in TB3.0 final release...

I no more use Thunderbird for RSS flows.....

Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.1.7pre) Gecko/20091209 Lightning/1.0b2pre SeaMonkey/2.0.2pre - Build ID: 20091209000712

I had this problem in the past, but it has disappeared spontaneously a few days ago, see bug 528894.

This is an old bug in Thunderbird, that has been running around from more than FIVE years.

And it is still not assigned to anyone. Please go and vote for this bug!

https://bugzilla.mozilla.org/show_bug.cgi?id=267203

Rolf Leggewie (r0lf) wrote :

The autoauth plugin works reasonably well for me

*** Bug 531831 has been marked as a duplicate of this bug. ***

Micah Gersten (micahg) wrote :

Marking this Triaged as we have an upstream bug.

Changed in thunderbird (Ubuntu):
status: Confirmed → Triaged

i found out my dumbusers now click close button on the password dialog, because it pops up 6 times during thundebird startup for 6 RSS feeds. it's something they don't understand, so i guess they do the "right" thing by declining, even though everything is filled out. does anyone following this bug actually know what needs to be done in code to get this to go away?

*** Bug 485717 has been marked as a duplicate of this bug. ***

I have this problem too. It occoured in Thunderbird 2.x as well in my currently used 3.0.6 (the Ubuntu package version). This bug exists since 2004 -- could somebody please fix it? It is very annoying to klick this dialogs on each startup. I think about switching back to another feed reader and mail client :(

I've never built and don't have a working build environment, but I would expect that when opening a master password prompt, there could be a random but small delay, then a check for open dialogs (either scanning some sort of low level structure, or checking a status bit somewhere which is less desirable). If there's already an open master password prompt, keep the other "windows" from popping up until the other window is closed. Once the other window is closed, re-check to see if we're authenticated to the password store, and if so, continue whatever process needed auth rather than requesting password again.

Changed in thunderbird:
importance: Unknown → Medium

The bug is still alive and kicking in TB 3.1.9 and a pain in the a**, because I have several password-protected feeds. I am also voting for getting it fixed. If I find out how, I will add a screenshot or two.

Created attachment 518933
Screenshot "authentication required", example 1

Created attachment 518934
Screenshot "authentication required", example 2

+1

Mozilla/5.0 (Windows; U; Windows NT 6.1; de; rv:1.9.2.15) Gecko/20110303 Lightning/1.0b2 Thunderbird/3.1.9

Just found a quick workaround:

1) Download AutoAuth Plugin (mentioned earlier in the comments)
V2.1 -> https://addons.mozilla.org/mobile/downloads/file/108175/type:attachment/autoauth-2.1-fx+fn.xpi?src=version-history

2) Open the .xpi with 7zip (or similar) and edit the install.rdf
add ->

<!-- Thunderbird -->
<em:targetApplication>
  <Description>
    <em:id>{3550f703-e582-4d05-9a08-453d09bdfdc6}</em:id>
    <em:minVersion>2.0</em:minVersion>
    <em:maxVersion>3.1.*</em:maxVersion>
  </Description>
</em:targetApplication>

3) Install in TB 3.1

(In reply to comment #47)
> Just found a quick workaround:
>
> 1) Download AutoAuth Plugin

My workaround without tweaking and installing an add-on has been FreeMyFeed (http://freemyfeed.com) lately. It works nicely, even though a real bugfix would be clearly preferable. Any workarounds just help to buy time...

The problem is still present in the TB 5.0
It is really annoying because I need RSS feeds to be updated often and each time TB tries to update them I get these popups. They appear right in the middle of me typing the code so even the login gets messed in the window.
The issue is there since 2004. Can it be fixed finally?

just install Addon Compatibility Reporter and disable version checking for Auto Auth. i'm almost certain this thing isn't getting much attention since workaround works well enough for large majority.

Leo, thanks for the response. Even after installing Addon Compatibility Reporter I'm still unable to install AutoAuth as-is in my TB 5.0. I've made the change to install.rdf similar to the one described by brian (comment #47) and that helped.

The thing is that criticism in comment #28 still applies. I don't think that it's a correct way to do things.

As far as I understand the problem itself lies somewhere in the base Mozilla code which is used by all the products. The workaround with the AutoAuth is not perfect and hard to find. E.g. this problem is bugging me for more than a year, and only today I finally found this bugzilla issue.
It was easier for me to go looking for alternatives to TB.. (Though I was unable to find any..)

And another thing is that the AutoAuth does not seem to work for TB 5.0 anyway.

TB 7.0 is released already, and the issue is still present. Are there any reasons for not fixing it?

(In reply to Mikhail Barg from comment #53)
> TB 7.0 is released already, and the issue is still present. Are there any
> reasons for not fixing it?

Because you didn't submit a patch :-)

Nice point, thanks. I've tried a few weeks ago to find the roots of the issue, but failed even to find the proper source code repository for the Thunderbird.

I do know nothing on the TB/Mozilla code structure and also I am worried about the dependency tree for this issue.. So I expected that somebody with deeper knowledge of the TB internals could finally do something about this issue.. It's already 7 years of it being there..

#maildev on mozilla irc. going at it completely alone is probably a process lengthier than it needs to be simply due to the size of the codebase. re irc, while many of my various TB-features questions have simply been ignored, a lot have also gotten quite immediate responses from the existing dev crowd. its a good way to gauge actual multiparty interest in whatever youre trying to hack up for thunderbird. i'm also in the process of getting to know TB source better and getting to a point where i can build my own, so i might be able to put in some work on this feature as well.

Thanks for pointing me there, I will see if I can find appropriate time in my schedule to finally tackle this problem..

(In reply to Mikhail Barg from comment #55)
> Nice point, thanks. I've tried a few weeks ago to find the roots of the
> issue, but failed even to find the proper source code repository for the
> Thunderbird.

For Thunderbird 7, you might try http://hg.mozilla.org/releases/comm-release/

Of course, like all trees other than trunk, it is approval-required.

P.S. For Thunderbird trunk (which should be fixed first) it is of course comm-central, http://hg.mozilla.org/comm-central/ and rather than clone (which might use a lot of time and bandwidth) you may prefer to install a bundle, see
http://benjamin.smedbergs.us/blog/2008-06-05/getting-mozilla-central-with-limited-bandwidth/ (mutatis mutandis for comm-central vs. mozilla-central)
https://developer.mozilla.org/En/Developer_Guide/Source_Code/Mercurial#Bundles

Checking the dependency graph for this issue it seems that if the issues
https://bugzilla.mozilla.org/show_bug.cgi?id=223636 and
https://bugzilla.mozilla.org/show_bug.cgi?id=513408
are fixed, this current issue would be solved automatically.

Still it seems to be more general design issues..

I've experiences this same bug for several years on Windows, Linux, and OS X. I filed a bug report (https://bugzilla.mozilla.org/show_bug.cgi?id=676452) because Thunderbird will freeze completely if you are using the mouse to move a message to a folder at the time that the authentication dialog pops up.

In the comments to the bug report, I documented that the prompt for the RSS password actually stopped appearing for a few months when I switched computers and Thunderbird versions.

The bug still exists in 23.0b1 on Win7 x64, NINE freaking years after it was first reported!
Had to install the add-on as well, because it will probably take the Thunderbird developers another couple of decades.

Please fix this... I'm on Linux 24.1.1 and all of a sudden it's not just prompting at startup, it's prompting EVERY TIME it checks. It's so freaking annoying.

Amen to that

To post a comment you must log in.
This report contains Public information  Edit
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.