[sip-comm-dev] Master password for offline accounts?


#1

I have all my accounts set to the offline status, yet I get asked for
the master password upon SIP Communicator startup. Is this really
necessary given that the master password only protects my passwords
and not the other account properties?

···

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@sip-communicator.dev.java.net
For additional commands, e-mail: dev-help@sip-communicator.dev.java.net


#2

hi,
as i remember the MP is asked upon logging in with some account and
upon migration. If all accounts are offline and there are no old
unencrypted properties, this indeed should not happen.
I'm travelling at the moment but i can look into this at the end of the week.

Cheers,
dmitri

···

On 9/21/10, Lubomir Marinov <lubo@sip-communicator.org> wrote:

I have all my accounts set to the offline status, yet I get asked for
the master password upon SIP Communicator startup. Is this really
necessary given that the master password only protects my passwords
and not the other account properties?

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@sip-communicator.dev.java.net
For additional commands, e-mail: dev-help@sip-communicator.dev.java.net

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@sip-communicator.dev.java.net
For additional commands, e-mail: dev-help@sip-communicator.dev.java.net


#3

Hi again,
I just checked with the latest trunk version and for me the MP prompt
appears only if there is at least one account that's set to online. If
all accounts are offline no prompt is shown.
You can try and test with a new set of properties to see if the
reported behaviour still happens.

Cheers,
Dmitri

···

On Tue, Sep 21, 2010 at 10:02 PM, Dmitri Melnikov <dmitri807@gmail.com> wrote:

hi,
as i remember the MP is asked upon logging in with some account and
upon migration. If all accounts are offline and there are no old
unencrypted properties, this indeed should not happen.
I'm travelling at the moment but i can look into this at the end of the week.

Cheers,
dmitri

On 9/21/10, Lubomir Marinov <lubo@sip-communicator.org> wrote:

I have all my accounts set to the offline status, yet I get asked for
the master password upon SIP Communicator startup. Is this really
necessary given that the master password only protects my passwords
and not the other account properties?

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@sip-communicator.dev.java.net
For additional commands, e-mail: dev-help@sip-communicator.dev.java.net

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@sip-communicator.dev.java.net
For additional commands, e-mail: dev-help@sip-communicator.dev.java.net


#4

The problem seems to appear for SIP accounts with "Enable XCAP stored
contacts" and "Use SIP credentials" checked. In this scenario, there
is a property in the form SIP:[SIP ID].xcap.ENCRYPTED_PASSWORD.

···

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@sip-communicator.dev.java.net
For additional commands, e-mail: dev-help@sip-communicator.dev.java.net


#5

I don't know how exactly xcap uses the password storage, but if xcap
tries to get the account password for some account and there's an MP
set then naturally the prompt appears. Should xcap check whether the
account is online and only get the password then?

···

On Sun, Sep 26, 2010 at 7:17 PM, Lubomir Marinov <lubo@sip-communicator.org> wrote:

The problem seems to appear for SIP accounts with "Enable XCAP stored
contacts" and "Use SIP credentials" checked. In this scenario, there
is a property in the form SIP:[SIP ID].xcap.ENCRYPTED_PASSWORD.

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@sip-communicator.dev.java.net
For additional commands, e-mail: dev-help@sip-communicator.dev.java.net

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@sip-communicator.dev.java.net
For additional commands, e-mail: dev-help@sip-communicator.dev.java.net


#6

Well, that's my expectation at the very least - the password should be retrieved from its secure storage only when it's actually necessary.

Anyway, higher priorities will likely prevent me from fixing it right now so I've created issue #861 "XCAP password prompts for master password when the SIP account is offline" at https://sip-communicator.dev.java.net/issues/show_bug.cgi?id=861 to keep a track of it.

···

On 09/26/2010 10:04 PM, Dmitri Melnikov wrote:

Should xcap check whether the
account is online and only get the password then?

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@sip-communicator.dev.java.net
For additional commands, e-mail: dev-help@sip-communicator.dev.java.net


#7

Hi,
   Anybody please tell how to logout from sip-communicator....?

Thanks & Regards

···

On Mon, Sep 27, 2010 at 3:02 AM, Lubomir Marinov <lubo@sip-communicator.org>wrote:

On 09/26/2010 10:04 PM, Dmitri Melnikov wrote:

Should xcap check whether the
account is online and only get the password then?

Well, that's my expectation at the very least - the password should be
retrieved from its secure storage only when it's actually necessary.

Anyway, higher priorities will likely prevent me from fixing it right now
so I've created issue #861 "XCAP password prompts for master password when
the SIP account is offline" at
https://sip-communicator.dev.java.net/issues/show_bug.cgi?id=861 to keep a
track of it.

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@sip-communicator.dev.java.net
For additional commands, e-mail: dev-help@sip-communicator.dev.java.net

--
Tojo Mathew