Re: How do I open a kwallet4 in Stretch?
El divendres, 25 de març de 2016, a les 12:40:13 CEST, Borden Rhodes va escriure: > I just discovered that Konqueror has been saving passwords in > .kde/share/apps/kwallet/kdewallet.kwl even though the rest of my KDE > installation is updated to KF5. I want to know what passwords have > been stored in kdewallet.kwl so I don't lose them. What I did is install temporally kwalletmanager from jessie (which is KDE4 based): https://packages.debian.org/jessie/kwalletmanager And then with kwalletmanager I could see all the passwords from KDE4 kwallet. Best regards, Josep
Re: How do I open a kwallet4 in Stretch?
On Samstag, 26. März 2016 13:10:50 CET Martin Steigerwald wrote: > Hi Borden, > > On Freitag, 25. März 2016 23:47:37 CET Borden Rhodes wrote: > > OK, so I stumbled upon https://barlog.rusu.info/valentin/blog/?p=300 , > > and comment 6 explains the problem: the whole thing's borked because > > "something (that i don’t have the time to investigate) has changed in > > qt5 and the existing kwalletd code, when linked against it, is unable > > to correctly handle kwl files." > > > > All bugs are shallow in open source, eh, esr? > > > > So, following the process in comment 8, I can tricked kwalletd into > > running the migration process again, which automatically searches > > ~/.kde/share/apps/kwallet and ports them into the fancy new KWallet > > format. OK, so I have my passwords back now. I'll still pay the ransom > > to get this fixed so that it works as a reasonable person would expect > > it to. I'm also turning off all password management in Konqueror. > > > > There really should be something in bold lettering in the > > kwalletmanager5 readme warning people of this. I wasted over 6 hours > > of my life on this problem and I really, really don't want others > > wasting their lives like this, too. > > Thats wonderful of you. So *then* walk your talk and contribute. > > Use reportbug and file a debian bug with a proposol of a text. > > Also file a debian bug asking for kwalletmanager4 to be packaged for the > time being, maybe the Qt/KDE team would do this if given good reasons to > do. I leave any bug reporting to you, cause after you spend the time you spent, I think you have deeper insight, yet, I wrote to distributions mailing list about it: kwalletmanager5 cannot access kwallet4 kwl files https://mail.kde.org/pipermail/distributions/2016-March/40.html Feel free to include a link to this in any Debian or upstream bug report you like to make. Thanks, -- Martin
Re: How do I open a kwallet4 in Stretch?
Hi Borden, On Freitag, 25. März 2016 23:47:37 CET Borden Rhodes wrote: > OK, so I stumbled upon https://barlog.rusu.info/valentin/blog/?p=300 , > and comment 6 explains the problem: the whole thing's borked because > "something (that i don’t have the time to investigate) has changed in > qt5 and the existing kwalletd code, when linked against it, is unable > to correctly handle kwl files." > > All bugs are shallow in open source, eh, esr? > > So, following the process in comment 8, I can tricked kwalletd into > running the migration process again, which automatically searches > ~/.kde/share/apps/kwallet and ports them into the fancy new KWallet > format. OK, so I have my passwords back now. I'll still pay the ransom > to get this fixed so that it works as a reasonable person would expect > it to. I'm also turning off all password management in Konqueror. > > There really should be something in bold lettering in the > kwalletmanager5 readme warning people of this. I wasted over 6 hours > of my life on this problem and I really, really don't want others > wasting their lives like this, too. Thats wonderful of you. So *then* walk your talk and contribute. Use reportbug and file a debian bug with a proposol of a text. Also file a debian bug asking for kwalletmanager4 to be packaged for the time being, maybe the Qt/KDE team would do this if given good reasons to do. I did neither, cause I was fully aware of the situation, reading blogs like the one you mentioned, and didn´t use up six hours of my life. Well I did spend some time either during the transition perioud, but although frustrating, when I do use Debian unstable/experimental I actively agree to spend time fixing things and even agree that some things may be broken at times. The situation around Plasma 5 / KDE Frameworks 5 is less than perfect currently. The mostly in experimental packaging of it creates a lot of issues and I really look forward to the time that Qt/KDE team pushes all of it in experimental or there will be PPAs. But unless there is, thats the game. Agree to it, help fix it or stay with Jessie. These are exactly your options. And yes, I know it can be a ton of frustrating. And no I do not agree to every upstream decision. So here you have a good way to help with a speficic area. File a bug report, propose a text since you are deep into the matter and actively help to improve Debian. I am sure your contribution would be welcomed and I would help to push it forward and bring it to the attention of the team. Its issues like this Debian can stand out in helping users with (and do at least a bit to fix or mitigate severe upstream shortcomings). Thank you, -- Martin
Re: How do I open a kwallet4 in Stretch?
On Freitag, 25. März 2016 22:14:51 CET Borden Rhodes wrote: > > If you have enough disk-space, you could build a jessie chroot with > > debootstrap > > Could you explain how that would help me? If the Wheezy version of > KWallet couldn't open the file, what would Jessie accomplish? > > > I suggest you bring that issue to upstream at bugs.kde.org > > > > Please post a link to your report here. > > Will do. Given my success rate at having KDE bugs addressed, or even > looked at, over the past several years I guess I'm on my own. Well even 4:15.12.1-1 of Konqueror is still Qt4 based. I do think it would be good to raise that issue. In case you write a bug report I may even write this to the distributions list as that issues puts distributors like Debian into a difficult situation. It is sad to see, but Konqueror does not seem to deserve the love it needs and deserves. So another option would also be to also file an distribution bug via reportbug and ask for packaging of kwalletmanager4 for the time being. So either its packaging kwalletmanager4 or porting Konqueror to Qt 5 / KF 5 / Plasma 5 to resolve this issue. Actually I´d do both and likely be vocal about it about some upstream list like the distributions one. But for me it is not much of a concern right now, cause I do not use Konqueror for serious web browsing anymore, i.e. anything that requires a login. Its just to outdated and probably has a ton of security issues. Neither its KHTML nor its Webkit backend are supportable security wise from that I understand. I think at least about one of them check-support- status of the package debian-security-support warns about having limited or no support at all. So if you want to browse with maximum security, as to what I understand, you need to use Firefox / Iceweasel or Chromium and upgrade it timely. I don´t like this either and would prefer Konqueror anytime, yet, at the moment I do not think its a good option due to the lack of maintenance. Which brings even deeper, cause one of the issues is that both KHTML nor Webkit aren´t well maintained. Thats why Laurent put a lot of effort to port Akregetor to QtWebEngine which uses Blink from Chromium and also why Laurent / Sandro port KMail HTML mail view to QtWebEngine as well. But even that one is outdated. I think Qt 5.6 will come with Blink as of Chromium 45 (current is 49). If I see the amount of CVEs fixed with each new release of browser engines and the lack of embedability and supportability I think the browser engine situation is a huge, big, fat and utter mess for application developers. There is just simply no sensible option out there at the moment. Its a known state even – for years already. Maybe some day with the Servo engine from Mozilla, which claims to be embeddable nicely… Free software web browsing is a mess and the only options that are supported reasonably is using Firefox / Iceweasel and/or Chromium directly. I think it would be good to have something like LibreOffice foundation just for an embeddable browser engine. But so far there isn´t something like that. Its doubly sad as both WebKit and Blink AFAIK originate from KHTML, but the companies changed it too much so changes to it cannot easily be backported to KHTML. > If I could just access the wallet the same way Konqueror does, that > would work since Konqueror has no problem. Unfortunately, I downloaded > Konqueror's source to see where it calls KWallet and, of course, it's > not in the code. Is there a way that I could talk to kwalletd > directly? I think it will have a dbus interface. Aside from that I think Konqueror uses some library to access kwallet, instead of doing it directly. But well, actually as long as Konqueror still uses the old kwallet I´d make it a habit to store anything that you add as passwords with the new wallet manually. Actually meanwhile for any important web login I manually make an entry thats indepepent of Konqueror or Firefox (using its own thing, kwallet plugin as packaged by Sandro does not yet work for me) and Chromium (storing passwords as binary blobs into kwallet). I even have a GPG file with some secrets still floating around, from the time where neither the old kwalletmanager would still work, nor the new one would work, so I couldn´t access any kwallet with GUI. There also has been a kwallet cli at some time, but I doubt its packaged currently. I think it would be usable with old kwallet in case you compile it yourself. Ciao, -- Martin
Re: How do I open a kwallet4 in Stretch?
Howto build a kde4 kwalletmanager on stretch: you will have to install qt4-default and several build-tools (like dpkg-dev, compiler etc.) to make this work · create a build-directory cd [DIR] · download sources from jessie kwallet: wget http://http.debian.net/debian/pool/main/k/kwallet/kwallet_4.14.2-1.dsc \ http://http.debian.net/debian/pool/main/k/kwallet/kwallet_4.14.2.orig.tar.xz \ http://http.debian.net/debian/pool/main/k/kwallet/kwallet_4.14.2-1.debian.tar.xz · extract source dpkg-source -x kwallet_4.14.2-1.dsc cd kwallet-4.14.2/ · build kde4-kwallet esp. kwalletmanager debian/rules build · start kde4-kwalletmanager ./obj-x86_64-linux-gnu/src/manager/kwalletmanager now you have to kwalletmanagers in the “Systemabschnitt der Kontrollleiste” or whatever this is called in englisch. MfG bmg -- „Des is völlig wurscht, was heut beschlos- | M G Berberich sen wird: I bin sowieso dagegn!“ | m...@m-berberich.de (SPD-Stadtrat Kurt Schindler; Regensburg) |
Re: How do I open a kwallet4 in Stretch?
OK, so I stumbled upon https://barlog.rusu.info/valentin/blog/?p=300 , and comment 6 explains the problem: the whole thing's borked because "something (that i don’t have the time to investigate) has changed in qt5 and the existing kwalletd code, when linked against it, is unable to correctly handle kwl files." All bugs are shallow in open source, eh, esr? So, following the process in comment 8, I can tricked kwalletd into running the migration process again, which automatically searches ~/.kde/share/apps/kwallet and ports them into the fancy new KWallet format. OK, so I have my passwords back now. I'll still pay the ransom to get this fixed so that it works as a reasonable person would expect it to. I'm also turning off all password management in Konqueror. There really should be something in bold lettering in the kwalletmanager5 readme warning people of this. I wasted over 6 hours of my life on this problem and I really, really don't want others wasting their lives like this, too.
Re: How do I open a kwallet4 in Stretch?
>> If you have enough disk-space, you could build a jessie chroot with >> debootstrap > Could you explain how that would help me? If the Wheezy version of > KWallet couldn't open the file, what would Jessie accomplish? I stand corrected. I was using the Jessie Live CD, not the Wheezy Live CD. >> I suggest you bring that issue to upstream at bugs.kde.org >> >> Please post a link to your report here. https://bugs.kde.org/show_bug.cgi?id=361002
Re: How do I open a kwallet4 in Stretch?
> If you have enough disk-space, you could build a jessie chroot with > debootstrap Could you explain how that would help me? If the Wheezy version of KWallet couldn't open the file, what would Jessie accomplish? > I suggest you bring that issue to upstream at bugs.kde.org > > Please post a link to your report here. Will do. Given my success rate at having KDE bugs addressed, or even looked at, over the past several years I guess I'm on my own. If I could just access the wallet the same way Konqueror does, that would work since Konqueror has no problem. Unfortunately, I downloaded Konqueror's source to see where it calls KWallet and, of course, it's not in the code. Is there a way that I could talk to kwalletd directly?
Re: How do I open a kwallet4 in Stretch?
Am Freitag, den 25. März schrieb Borden Rhodes: > >>> You could try to copy the kwallet-files to a KDE4-system (maybe a > >>> live-System from a USB-drive) and export it as XML-file. > > I'm thinking that this is what I'll have to do, too. That and file a > > bug that KWallet is officially ransomware. > I tried that, but it seems that the KDE developers anticipated that I > might attempt this and programmed KWallet with conflicting database > versions so I wouldn't be able to use an old version of KWallet. I > used the Wheezy KDE live CD and, when I tried to load the wallets, got > an error -42. I'm not sure why KDE uses negative error codes, but > that's secondary to my current problem. So it seems that KDE has > effectively barred me from my passwords and will only allow Konqueror > to access them. Does anybody know what the ransom is to unlock my > wallet? If you have enough disk-space, you could build a jessie chroot with debootstrap https://packages.debian.org/stretch/debootstrap MfG bmg -- „Des is völlig wurscht, was heut beschlos- | M G Berberich sen wird: I bin sowieso dagegn!“ | m...@m-berberich.de (SPD-Stadtrat Kurt Schindler; Regensburg) |
Re: How do I open a kwallet4 in Stretch?
On Freitag, 25. März 2016 18:31:57 CET Borden Rhodes wrote: > >>> You could try to copy the kwallet-files to a KDE4-system (maybe a > >>> live-System from a USB-drive) and export it as XML-file. > > > > I'm thinking that this is what I'll have to do, too. That and file a > > bug that KWallet is officially ransomware. > > I tried that, but it seems that the KDE developers anticipated that I > might attempt this and programmed KWallet with conflicting database > versions so I wouldn't be able to use an old version of KWallet. I > used the Wheezy KDE live CD and, when I tried to load the wallets, got > an error -42. I'm not sure why KDE uses negative error codes, but > that's secondary to my current problem. So it seems that KDE has > effectively barred me from my passwords and will only allow Konqueror > to access them. Does anybody know what the ransom is to unlock my > wallet? I suggest you bring that issue to upstream at bugs.kde.org Please post a link to your report here. Thanks, -- Martin
Re: How do I open a kwallet4 in Stretch?
>>> You could try to copy the kwallet-files to a KDE4-system (maybe a >>> live-System from a USB-drive) and export it as XML-file. > I'm thinking that this is what I'll have to do, too. That and file a > bug that KWallet is officially ransomware. I tried that, but it seems that the KDE developers anticipated that I might attempt this and programmed KWallet with conflicting database versions so I wouldn't be able to use an old version of KWallet. I used the Wheezy KDE live CD and, when I tried to load the wallets, got an error -42. I'm not sure why KDE uses negative error codes, but that's secondary to my current problem. So it seems that KDE has effectively barred me from my passwords and will only allow Konqueror to access them. Does anybody know what the ransom is to unlock my wallet?
Re: How do I open a kwallet4 in Stretch?
>> You could try to copy the kwallet-files to a KDE4-system (maybe a >> live-System from a USB-drive) and export it as XML-file. I'm thinking that this is what I'll have to do, too. That and file a bug that KWallet is officially ransomware. > On my system the contents of the KDE 4 kwallet has been migrated to the new > KDE Frameworks / Plasma 5 KWallet. On mine, too. But Konqueror still uses the old KDE 4 kwallet system and gives you no say in the matter. > I don´t know how to manually trigger that migration tough in case it hasn´t > been done yet. One apparently edits/removes ~/.config/kwalletrc to trick kwallet5 into thinking that it needs to run the migrate process. This, of course, hasn't worked for me, either. > Question to the original poster: Did none of the import options from the menu > work? None of the import options worked. And I'm certain that the .kwl file isn't corrupted because Konqueror reads/writes to it just fine.
Re: How do I open a kwallet4 in Stretch?
On Freitag, 25. März 2016 18:56:07 CET M G Berberich wrote: > Am Freitag, den 25. März schrieb Borden Rhodes: > > I just discovered that Konqueror has been saving passwords in > > .kde/share/apps/kwallet/kdewallet.kwl even though the rest of my KDE > > installation is updated to KF5. > > Yep, very annoying. > > > I want to know what passwords have been stored in kdewallet.kwl so I > > don't lose them. > > You could try to copy the kwallet-files to a KDE4-system (maybe a > live-System from a USB-drive) and export it as XML-file. On my system the contents of the KDE 4 kwallet has been migrated to the new KDE Frameworks / Plasma 5 KWallet. I don´t know how to manually trigger that migration tough in case it hasn´t been done yet. Question to the original poster: Did none of the import options from the menu work? Thanks, -- Martin
Re: How do I open a kwallet4 in Stretch?
Am Freitag, den 25. März schrieb Borden Rhodes: > I just discovered that Konqueror has been saving passwords in > .kde/share/apps/kwallet/kdewallet.kwl even though the rest of my KDE > installation is updated to KF5. Yep, very annoying. > I want to know what passwords have been stored in kdewallet.kwl so I > don't lose them. You could try to copy the kwallet-files to a KDE4-system (maybe a live-System from a USB-drive) and export it as XML-file. MfG bmg -- „Des is völlig wurscht, was heut beschlos- | M G Berberich sen wird: I bin sowieso dagegn!“ | m...@m-berberich.de (SPD-Stadtrat Kurt Schindler; Regensburg) |
How do I open a kwallet4 in Stretch?
I just discovered that Konqueror has been saving passwords in .kde/share/apps/kwallet/kdewallet.kwl even though the rest of my KDE installation is updated to KF5. I want to know what passwords have been stored in kdewallet.kwl so I don't lose them. I've tried to open the file in kwalletmanager5 to no effect. I've also tried importing kdewallet.kwl into my existing wallet. It prompts for the password and then tells me that the password isn't correct. This is, of course, impossible because I have successfully used that password within Konqueror to save and retrieve passwords. This also eliminates the possibility of a corrupted .kwl file. There is a kdewallet.salt file in the directory, which I suspect is breaking things. I have also tried copying kdewallet.kwl and its .salt file into .local/share/kwalletd and again get the same invalid password error. I'm 90% sure that all my .kwl files are encrypted with Blowfish. With thanks,
