[Desktop-packages] [Bug 1854363] Re: [upstream] ReferenceError: processLDAPValues is not defined
Ah. I see. That makes sense. I'll confess I did not study the code and the fix since I thought I had found the culprit. Anyway, someone is on the case and a solution is forthcoming. Can't ask for more then that. Thank you. -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to thunderbird in Ubuntu. https://bugs.launchpad.net/bugs/1854363 Title: [upstream] ReferenceError: processLDAPValues is not defined Status in Mozilla Thunderbird: Fix Released Status in thunderbird package in Ubuntu: Confirmed Bug description: The latest thunderbird (1:68.2.1+build1-0ubuntu0.18.04.1) introduces a typo that destroys our autoconfiguration. Error messages: Netscape.cfg/AutoConfig failed. Please contact your system administrator. Error: getLDAPAttibutes failed: ReferenceError: processLDAPValues is not defined Netscape.cfg/AutoConfig failed. Please contact your system administrator. Error: authconfig.js failed failed: TypeError: userInfo.mail is undefined Ref: https://bugzilla.mozilla.org/show_bug.cgi?id=1592922 I have downgraded thunderbird and confirmed that this happen when upgrading to 1:68.2.1+build1 My system: Description:Ubuntu 18.04.3 LTS Release:18.04 apt policy thunderbird thunderbird: Installed: 1:52.7.0+build1-0ubuntu1 Candidate: 1:68.2.1+build1-0ubuntu0.18.04.1 Version table: 1:68.2.1+build1-0ubuntu0.18.04.1 500 500 http://ubuntu.uib.no/archive bionic-updates/main amd64 Packages 500 http://security.ubuntu.com/ubuntu bionic-security/main amd64 Packages *** 1:52.7.0+build1-0ubuntu1 500 500 http://ubuntu.uib.no/archive bionic/main amd64 Packages 100 /var/lib/dpkg/status To manage notifications about this bug go to: https://bugs.launchpad.net/thunderbird/+bug/1854363/+subscriptions -- Mailing list: https://launchpad.net/~desktop-packages Post to : desktop-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~desktop-packages More help : https://help.launchpad.net/ListHelp
[Desktop-packages] [Bug 1854363] Re: [upstream] Typo in thunderbird code prevents central configuration
Any ETA for this? We use this to configure thunderbird for more than 100 users… -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to thunderbird in Ubuntu. https://bugs.launchpad.net/bugs/1854363 Title: [upstream] Typo in thunderbird code prevents central configuration Status in Mozilla Thunderbird: New Status in thunderbird package in Ubuntu: Confirmed Bug description: The latest thunderbird (1:68.2.1+build1-0ubuntu0.18.04.1) introduces a typo that destroys our autoconfiguration. Error messages: Netscape.cfg/AutoConfig failed. Please contact your system administrator. Error: getLDAPAttibutes failed: ReferenceError: processLDAPValues is not defined Netscape.cfg/AutoConfig failed. Please contact your system administrator. Error: authconfig.js failed failed: TypeError: userInfo.mail is undefined Ref: https://bugzilla.mozilla.org/show_bug.cgi?id=1592922 I have downgraded thunderbird and confirmed that this happen when upgrading to 1:68.2.1+build1 My system: Description:Ubuntu 18.04.3 LTS Release:18.04 apt policy thunderbird thunderbird: Installed: 1:52.7.0+build1-0ubuntu1 Candidate: 1:68.2.1+build1-0ubuntu0.18.04.1 Version table: 1:68.2.1+build1-0ubuntu0.18.04.1 500 500 http://ubuntu.uib.no/archive bionic-updates/main amd64 Packages 500 http://security.ubuntu.com/ubuntu bionic-security/main amd64 Packages *** 1:52.7.0+build1-0ubuntu1 500 500 http://ubuntu.uib.no/archive bionic/main amd64 Packages 100 /var/lib/dpkg/status To manage notifications about this bug go to: https://bugs.launchpad.net/thunderbird/+bug/1854363/+subscriptions -- Mailing list: https://launchpad.net/~desktop-packages Post to : desktop-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~desktop-packages More help : https://help.launchpad.net/ListHelp
[Desktop-packages] [Bug 1854363] [NEW] Typo in thunderbird code prevents central configuration
Public bug reported: The latest thunderbird (1:68.2.1+build1-0ubuntu0.18.04.1) introduces a typo that destroys our autoconfiguration. Error messages: Netscape.cfg/AutoConfig failed. Please contact your system administrator. Error: getLDAPAttibutes failed: ReferenceError: processLDAPValues is not defined Netscape.cfg/AutoConfig failed. Please contact your system administrator. Error: authconfig.js failed failed: TypeError: userInfo.mail is undefined Ref: https://bugzilla.mozilla.org/show_bug.cgi?id=1592922 I have downgraded thunderbird and confirmed that this happen when upgrading to 1:68.2.1+build1 My system: Description:Ubuntu 18.04.3 LTS Release:18.04 apt policy thunderbird thunderbird: Installed: 1:52.7.0+build1-0ubuntu1 Candidate: 1:68.2.1+build1-0ubuntu0.18.04.1 Version table: 1:68.2.1+build1-0ubuntu0.18.04.1 500 500 http://ubuntu.uib.no/archive bionic-updates/main amd64 Packages 500 http://security.ubuntu.com/ubuntu bionic-security/main amd64 Packages *** 1:52.7.0+build1-0ubuntu1 500 500 http://ubuntu.uib.no/archive bionic/main amd64 Packages 100 /var/lib/dpkg/status ** Affects: thunderbird (Ubuntu) Importance: Undecided Status: New -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to thunderbird in Ubuntu. https://bugs.launchpad.net/bugs/1854363 Title: Typo in thunderbird code prevents central configuration Status in thunderbird package in Ubuntu: New Bug description: The latest thunderbird (1:68.2.1+build1-0ubuntu0.18.04.1) introduces a typo that destroys our autoconfiguration. Error messages: Netscape.cfg/AutoConfig failed. Please contact your system administrator. Error: getLDAPAttibutes failed: ReferenceError: processLDAPValues is not defined Netscape.cfg/AutoConfig failed. Please contact your system administrator. Error: authconfig.js failed failed: TypeError: userInfo.mail is undefined Ref: https://bugzilla.mozilla.org/show_bug.cgi?id=1592922 I have downgraded thunderbird and confirmed that this happen when upgrading to 1:68.2.1+build1 My system: Description:Ubuntu 18.04.3 LTS Release:18.04 apt policy thunderbird thunderbird: Installed: 1:52.7.0+build1-0ubuntu1 Candidate: 1:68.2.1+build1-0ubuntu0.18.04.1 Version table: 1:68.2.1+build1-0ubuntu0.18.04.1 500 500 http://ubuntu.uib.no/archive bionic-updates/main amd64 Packages 500 http://security.ubuntu.com/ubuntu bionic-security/main amd64 Packages *** 1:52.7.0+build1-0ubuntu1 500 500 http://ubuntu.uib.no/archive bionic/main amd64 Packages 100 /var/lib/dpkg/status To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/thunderbird/+bug/1854363/+subscriptions -- Mailing list: https://launchpad.net/~desktop-packages Post to : desktop-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~desktop-packages More help : https://help.launchpad.net/ListHelp
[Desktop-packages] [Bug 1060907] Re: NetworkManager stores wifi passwords in plain text
It may look as this is an implementation problem rather than a problem with Network Manager itself. Though I still believe that even allowing passwords to be stored as text is a security flaw, it is possible to configure NM so that it does not store passwords in text files. I have tried KDE and had no problem saving the password in the Kwallet. I wonder why Unity is not configured like KDE. Is the problem with nm-connection-editor, NetworkManager or somewhere else entirely? It may help if I can log a report with the right tool :=) -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to network-manager in Ubuntu. https://bugs.launchpad.net/bugs/1060907 Title: NetworkManager stores wifi passwords in plain text Status in NetworkManager: Incomplete Status in “network-manager” package in Ubuntu: Opinion Bug description: /etc/NetworkManager/system-connections/some-wireless-profile contains plain text passwords. To manage notifications about this bug go to: https://bugs.launchpad.net/network-manager/+bug/1060907/+subscriptions -- Mailing list: https://launchpad.net/~desktop-packages Post to : desktop-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~desktop-packages More help : https://help.launchpad.net/ListHelp
[Desktop-packages] [Bug 1060907] Re: NetworkManager stores wifi passwords in plain text
The problems I have identified so far: 1. If you have the rights org.freedesktop.NetworkManager.settings.modify.own you will not be able to make a connection by selecting available networks. 2. The option Available to all users seems to be implied when you select a connection from available networks. 3. When you give them org.freedesktop.NetworkManager.settings.modify.system I see no way of enforcing Ask for this password every time 4. Even when you make a connection that is not available to all users it still stores the password as text in /etc/NM... and only add the user name that is allowed to use the connection. What we need is the possibility to create a connection by selecting it from the list of available networks (eduroam) and have it so that the password for each user is stored in the users wallet or keyring. -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to network-manager in Ubuntu. https://bugs.launchpad.net/bugs/1060907 Title: NetworkManager stores wifi passwords in plain text Status in NetworkManager: Incomplete Status in “network-manager” package in Ubuntu: Opinion Bug description: /etc/NetworkManager/system-connections/some-wireless-profile contains plain text passwords. To manage notifications about this bug go to: https://bugs.launchpad.net/network-manager/+bug/1060907/+subscriptions -- Mailing list: https://launchpad.net/~desktop-packages Post to : desktop-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~desktop-packages More help : https://help.launchpad.net/ListHelp
[Desktop-packages] [Bug 1060907] Re: NetworkManager stores wifi passwords in plain text
That may work - IF you create a connection from scratch. People mostly does not do this and I am not going to require my users to learn how to do this either. The normal way of connecting with wireless is to select a connection from the list. If this is a secure connection the user is required to provide a password. There are no options Available to all users in that dialog and if you do not have rights in org.freedesktop.NetworkManager.settings.modify.system you will not be able to create that connection. And the behaviour you describe is also not what I experience. I created a wireless connection and removed Available to all user. NM still stores the password in /etc. IT just adds another option which tells who can user it: [connection] id=test uuid=8e585656-1ca1-42a2-8172-8341a1d052c5 type=802-11-wireless permissions=user:ism001:; [802-11-wireless] ssid=test mode=infrastructure mac-address=08:11:96:C2:02:B4 security=802-11-wireless-security [802-11-wireless-security] key-mgmt=wpa-eap wep-key-flags=1 psk-flags=1 leap-password-flags=1 [ipv4] method=auto [ipv6] method=auto [802-1x] eap=peap; identity=username phase2-auth=mschapv2 password=mypassword password-raw-flags=1 -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to network-manager in Ubuntu. https://bugs.launchpad.net/bugs/1060907 Title: NetworkManager stores wifi passwords in plain text Status in “network-manager” package in Ubuntu: Opinion Bug description: /etc/NetworkManager/system-connections/some-wireless-profile contains plain text passwords. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/network-manager/+bug/1060907/+subscriptions -- Mailing list: https://launchpad.net/~desktop-packages Post to : desktop-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~desktop-packages More help : https://help.launchpad.net/ListHelp
[Desktop-packages] [Bug 1060907] [NEW] NetworkManager stores wifi passwords in plain text
*** This bug is a security vulnerability *** Public security bug reported: /etc/NetworkManager/system-connections/some-wireless-profile contains plain text passwords. ** Affects: network-manager (Ubuntu) Importance: Undecided Status: New ** Visibility changed to: Public -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to network-manager in Ubuntu. https://bugs.launchpad.net/bugs/1060907 Title: NetworkManager stores wifi passwords in plain text Status in “network-manager” package in Ubuntu: New Bug description: /etc/NetworkManager/system-connections/some-wireless-profile contains plain text passwords. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/network-manager/+bug/1060907/+subscriptions -- Mailing list: https://launchpad.net/~desktop-packages Post to : desktop-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~desktop-packages More help : https://help.launchpad.net/ListHelp
[Desktop-packages] [Bug 1060907] Re: NetworkManager stores wifi passwords in plain text
Those files do not have appropriate permissions. Anyone with root access can read them. While we do have a certain amount of trust in our administrators we do not want to hand them the passwords of our users. We have wireless networks that use the users credentials and not some random password. This design now allows us to log on to any laptop in our organisation and find the users credentials. This is a really terrible design. -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to network-manager in Ubuntu. https://bugs.launchpad.net/bugs/1060907 Title: NetworkManager stores wifi passwords in plain text Status in “network-manager” package in Ubuntu: Invalid Bug description: /etc/NetworkManager/system-connections/some-wireless-profile contains plain text passwords. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/network-manager/+bug/1060907/+subscriptions -- Mailing list: https://launchpad.net/~desktop-packages Post to : desktop-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~desktop-packages More help : https://help.launchpad.net/ListHelp
[Desktop-packages] [Bug 1060907] Re: NetworkManager stores wifi passwords in plain text
I also notice that VPN-connection somehow manages NOT to store the password in /etc... -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to network-manager in Ubuntu. https://bugs.launchpad.net/bugs/1060907 Title: NetworkManager stores wifi passwords in plain text Status in “network-manager” package in Ubuntu: Invalid Bug description: /etc/NetworkManager/system-connections/some-wireless-profile contains plain text passwords. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/network-manager/+bug/1060907/+subscriptions -- Mailing list: https://launchpad.net/~desktop-packages Post to : desktop-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~desktop-packages More help : https://help.launchpad.net/ListHelp
[Desktop-packages] [Bug 1060907] Re: NetworkManager stores wifi passwords in plain text
As long as it is not in plain text in a file on the filesystem I do not care. We want users to be able to set up wireless connections and select available networks. As far as I have acertained this is accomplished by giving them rights to org.freedesktop.NetworkManager.settings.modify.system. If we do this passwords WILL be stored in plain text in /etc. Storing passwords in plain text will *allways* and in any circumstances be a bad design. The VPN test I set up did not store my password in plain text, and yet mysteriously managed to start again without prompting me for a password. -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to network-manager in Ubuntu. https://bugs.launchpad.net/bugs/1060907 Title: NetworkManager stores wifi passwords in plain text Status in “network-manager” package in Ubuntu: Invalid Bug description: /etc/NetworkManager/system-connections/some-wireless-profile contains plain text passwords. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/network-manager/+bug/1060907/+subscriptions -- Mailing list: https://launchpad.net/~desktop-packages Post to : desktop-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~desktop-packages More help : https://help.launchpad.net/ListHelp
[Desktop-packages] [Bug 1060907] Re: NetworkManager stores wifi passwords in plain text
If you disagree with the Network Manager design, please file a bug upstream here: https://bugzilla.gnome.org/ Thanks. Well thats what happens when I spend too long thinking about an answer. The other part slips one in unseen :) I will do as you ask. -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to network-manager in Ubuntu. https://bugs.launchpad.net/bugs/1060907 Title: NetworkManager stores wifi passwords in plain text Status in “network-manager” package in Ubuntu: Opinion Bug description: /etc/NetworkManager/system-connections/some-wireless-profile contains plain text passwords. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/network-manager/+bug/1060907/+subscriptions -- Mailing list: https://launchpad.net/~desktop-packages Post to : desktop-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~desktop-packages More help : https://help.launchpad.net/ListHelp
[Desktop-packages] [Bug 877766] Re: lightdm login fails with NFS home and strict (mode 0700) permissions
This may be the same problem I reported in Bug #914674 I notice this behaviour as well: [+16.19s] DEBUG: Dropping privileges to uid 6057 [+16.19s] DEBUG: Adding session authority to /npdisks/home/jb/.Xauthority [+16.20s] DEBUG: Restoring privileges [+16.20s] DEBUG: Launching process 7148: /usr/sbin/lightdm-session 'gnome-session --session=ubuntu' [+16.20s] WARNING: Failed to change to home directory /npdisks/home/jb: Permission denied It looks like it restores privileges to root before trying to change to home directory and this naturally fails since root has no privileges there. It looks like session.c tries to change working directory _before_ it tries to change user: session.c: Line 409: /* Change working directory */ if (chdir (user_get_home_directory (user)) != 0) { g_warning (Failed to change to home directory %s: %s, user_get_home_directory (user), strerror (errno)); _exit (EXIT_FAILURE); } /* Change to this user */ if (getuid () == 0) { if (initgroups (user_get_name (user), user_get_gid (user)) 0) { g_warning (Failed to initialize supplementary groups for %s: %s, user_get_name (user), strerror (errno)); _exit (EXIT_FAILURE); } if (setgid (user_get_gid (user)) != 0) { g_warning (Failed to set group ID to %d: %s, user_get_gid (user), strerror (errno)); _exit (EXIT_FAILURE); } if (setuid (user_get_uid (user)) != 0) { g_warning (Failed to set user ID to %d: %s, user_get_uid (user), strerror (errno)); _exit (EXIT_FAILURE); } } -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to lightdm in Ubuntu. https://bugs.launchpad.net/bugs/877766 Title: lightdm login fails with NFS home and strict (mode 0700) permissions Status in Light Display Manager: Confirmed Status in “lightdm” package in Ubuntu: Triaged Status in “lightdm” source package in Oneiric: Triaged Bug description: Lightdm appears not to be able to log in a user if all of the following are true: 1. They've got an NFS-mounted home directory 2. NFS is configured in the usual manner; ie, root privileges do not allow access to arbitrary remote files 3. The user's home directory permissions are such that other cannot access the directory (ie, mode 0700) In this situation, the password is accepted and the screen clears. Rather than bringing up the desktop as expected, a couple of seconds pass and we're returned to the lightdm screen. This yielded a message in one of the /var/log/lightdm logs which I've just discovered was overwritten by subsequent successful logins. I'll recreate this and update the bug tonight. Workaround was to chmod the user's homedir to 0711 which allowed lightdm to work properly. Release is Ubuntu 11.10 with all updates as of 17 Oct 2011 at roughly 10pm EDT. Lightdm package is 1.0.1-0ubuntu6. To manage notifications about this bug go to: https://bugs.launchpad.net/lightdm/+bug/877766/+subscriptions -- Mailing list: https://launchpad.net/~desktop-packages Post to : desktop-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~desktop-packages More help : https://help.launchpad.net/ListHelp