masterpassword requested on one site but there is no entry for this specific site
Osdoba, Sascha
tested Firefox versions: 91.13.0 and 102.3.0 ESR
we see a strange problem with one internal website (its called Easybanf (something based on SAP))
If I set a master password but do not add any entry into it and open this website the masterpassword will be requested
(there are no other tabs opened so its really related to this website)
For this site windows SSO is configured (like for a lot of other internal sites also) and it works, website will be loaded in background
even when masterpassword will be still requested, you have to cancel the request ~8 times until its not requesting again
this is happening on every device in every profile we have tested (5 devices and 5 users) so its not a profile problem
this is the only website which is behaving strange with masterpassword set that I know
My intention that it is related to this website is OK, I am not responsible for this site but may someone has seen this behavior before
or has any clue how to debug?
Regards,
Sascha
Mike Kaply
--
You received this message because you are subscribed to the Google Groups "enter...@mozilla.org" group.
To unsubscribe from this group and stop receiving emails from it, send an email to enterprise+...@mozilla.org.
To view this discussion on the web visit https://groups.google.com/a/mozilla.org/d/msgid/enterprise/b2c4a4a3203047f5a5e070b52d596f44%40gsi.de.
Osdoba, Sascha
Hi Mike,
no its just internally. I opened a bug for it.
https://bugzilla.mozilla.org/show_bug.cgi?id=1792200
Regards,
Sascha
Osdoba, Sascha
quick response because its solved now:
“Thanks! That site is asking for a client authentication certificate, so Firefox tries to find all client authentication certificates in your profile. Since you have a password
set,
Firefox has to ask for the password in order to look for private keys corresponding to client authentication certificates. Note that you would have to enter your password
anyway to use a client authentication certificate. Essentially, this is expected behavior.“
In my opinion it should be made more clear (but now I know) that the master password request is also needed to access client auth certificates.
Sascha
To view this discussion on the web visit https://groups.google.com/a/mozilla.org/d/msgid/enterprise/88fcaa5baf8840c0acc33283e4972fb9%40gsi.de.