CentOS - Oct 2018 - Frefox update from firefox-60.2.0-1.el7.centos.x86_64 to 60.2.1-1.el7.centos.x86_64 lost master password

Hi list,

Did an update to firefox last night and rebooted over night.

Today I find firefox started without asking for master password - funny 
me thinks.

Try to log in to a web service I use and find that my password does not 
appear.

Check preferences and find that no master password is set and the 
password list / table is empty.

As I do not trust my passwords to the cloud I do not save these to my 
firefox profile ..... so back to manual entry for all my sites.... wow 
going to be a slow month as I reset scores of passwords.

Any one else have this problem and any clues as to what causes this? I 
am concerned if this should happen again, as I have saved passwords for 
many scores of web services.

TIA
Rob

On 10/03/2018 11:34 AM, Rob Kampen wrote:
> Hi list,
> 
> Did an update to firefox last night and rebooted over night.
> 
> Today I find firefox started without asking for master password - funny 
> me thinks.
> 
> Try to log in to a web service I use and find that my password does not 
> appear.
> 
> Check preferences and find that no master password is set and the 
> password list / table is empty.
> 
> As I do not trust my passwords to the cloud I do not save these to my 
> firefox profile ..... so back to manual entry for all my sites.... wow 
> going to be a slow month as I reset scores of passwords.
> 
> Any one else have this problem and any clues as to what causes this? I 
> am concerned if this should happen again, as I have saved passwords for 
> many scores of web services.
Hi,

haven't had that, but restoring logins.json and key3.db in 
~/.mozilla/firefox/.../ from your latest backup should do the trick.

On Wed, 2018-10-03 at 12:08 +0200, Nicolas Thierry-Mieg
wrote:
> On 10/03/2018 11:34 AM, Rob Kampen wrote:
> > Hi list,
> > 
> > Did an update to firefox last night and rebooted over night.
> > 
> > Today I find firefox started without asking for master password -
> > funny?
> > me thinks.
> > 
> > Try to log in to a web service I use and find that my password does
> > not?
> > appear.
> > 
> > Check preferences and find that no master password is set and the?
> > password list / table is empty.
> > 
> > As I do not trust my passwords to the cloud I do not save these to
> > my?
> > firefox profile ..... so back to manual entry for all my sites....
> > wow?
> > going to be a slow month as I reset scores of passwords.
> > 
> > Any one else have this problem and any clues as to what causes
> > this? I?
> > am concerned if this should happen again, as I have saved passwords
> > for?
> > many scores of web services.
> 
> Hi,
> 
> haven't had that, but restoring logins.json and key3.db in?
> ~/.mozilla/firefox/.../ from your latest backup should do the trick.
> 
I had the same problem. Upgraded to the latest firefox last saturday
everything looked ok all day. Logged in on monday to find my master
password and all my stored passwords were gone. Unfortunately I had
done a backup of the home directories later on saturday. So restoring
the key3.db and logins.json files didn't work.

The problem seems to be with the key3.db file. When the latest firefox
(re)creates it, it has the wrong permissions

-rw-------.??1 molloyt molloyt????1137 Oct??3 16:09 logins.json
-rw-------.  1 molloyt molloyt???16384 Oct??3 14:48 key3.db


I removed firefox, deleted the .mozilla directory and reinstalled
firefox. But the problem remains.

1. Delete the logins.json and key3.db files
2. Start firefox key3.db file created with the above permissions and
   selinux context looks ok
3. Set master password and a few account passwords
4. Check they're there in preferences, ok
   logins.json file created with above permissions
5. login/out a few times to the accounts to make sure everything
   works,ok
6. Shutdown firefox and restart it, account settings ok and working
   but key3.db file gone
7. Shutdown firefox and restart it, master password and accounts gone
   check recreated key3.db file and it has permissions as above.

I'm stumped.
Any ideas gratefully accepted ;-)

Tony.
> _______________________________________________
> CentOS mailing list
> CentOS at centos.org
> https://lists.centos.org/mailman/listinfo/centos
-- 
Tony Molloy <tony.molloy at ul.ie>
Home

On Wed, 3 Oct 2018 at 06:08, Nicolas Thierry-Mieg
<Nicolas.Thierry-Mieg at univ-grenoble-alpes.fr>
wrote:
>
> On 10/03/2018 11:34 AM, Rob Kampen wrote:
> > Hi list,
> >
> > Did an update to firefox last night and rebooted over night.
> >
> > Today I find firefox started without asking for master password -
funny
> > me thinks.
> >
> > Try to log in to a web service I use and find that my password does
not
> > appear.
> >
> > Check preferences and find that no master password is set and the
> > password list / table is empty.
> >
> > As I do not trust my passwords to the cloud I do not save these to my
> > firefox profile ..... so back to manual entry for all my sites.... wow
> > going to be a slow month as I reset scores of passwords.
> >
> > Any one else have this problem and any clues as to what causes this? I
> > am concerned if this should happen again, as I have saved passwords
for
> > many scores of web services.
>
> Hi,
>
> haven't had that, but restoring logins.json and key3.db in
> ~/.mozilla/firefox/.../ from your latest backup should do the trick.
>
It would seem that the problem is with upstream-upstream's (aka
Firefox) cleaning up of items that are not supposed to be there after
Firefox 58

https://bugzilla.mozilla.org/show_bug.cgi?id=1475775

It looks like it is deleting files it thinks should have been
converted to a newer more secure version.. but don't seem to be for
some reason. I am not sure if those files will just removed again
every time you restore them.
> _______________________________________________
> CentOS mailing list
> CentOS at centos.org
> https://lists.centos.org/mailman/listinfo/centos


--
Stephen J Smoogen.

On Wed, Oct 3, 2018 at 5:34 AM Rob Kampen <rkampen at kampensonline.com>
wrote:
> Hi list,
>
> Did an update to firefox last night and rebooted over night.
>
> Today I find firefox started without asking for master password - funny
> me thinks.
>
> Try to log in to a web service I use and find that my password does not
> appear.
>
> Check preferences and find that no master password is set and the
> password list / table is empty.
>
> As I do not trust my passwords to the cloud I do not save these to my
> firefox profile ..... so back to manual entry for all my sites.... wow
> going to be a slow month as I reset scores of passwords.
>
> Any one else have this problem and any clues as to what causes this? I
> am concerned if this should happen again, as I have saved passwords for
> many scores of web services.
>
> TIA
> Rob
>
We've run into this.

Is it fixed in the latest firefox, 60.2.2-1?

If not, it is not clear to me how to use the

export NSS_DEFAULT_DB_TYPE="sql"

method mentioned. Do we restore the old key3.db file, have the user set
that variable, then start the new firefox? With that create a key4.db file
and use it from then on?


-- 
Matt Phelps
System Administrator, Computation Facility
Harvard - Smithsonian Center for Astrophysics
mphelps at cfa.harvard.edu, http://www.cfa.harvard.edu

On 13/10/18 02:24, Phelps, Matthew wrote:
> On Wed, Oct 3, 2018 at 5:34 AM Rob Kampen<rkampen at
kampensonline.com>  wrote:
>
>> Hi list,
>>
>> Did an update to firefox last night and rebooted over night.
>>
>> Today I find firefox started without asking for master password - funny
>> me thinks.
>>
>> Try to log in to a web service I use and find that my password does not
>> appear.
>>
>> Check preferences and find that no master password is set and the
>> password list / table is empty.
>>
>> As I do not trust my passwords to the cloud I do not save these to my
>> firefox profile ..... so back to manual entry for all my sites.... wow
>> going to be a slow month as I reset scores of passwords.
>>
>> Any one else have this problem and any clues as to what causes this? I
>> am concerned if this should happen again, as I have saved passwords for
>> many scores of web services.
>>
>> TIA
>> Rob
>>
> We've run into this.
>
> Is it fixed in the latest firefox, 60.2.2-1?
>
> If not, it is not clear to me how to use the
>
> export NSS_DEFAULT_DB_TYPE="sql"
 ?put this in .bash_profile and reboot - then check from a shell that 
export shows the declaration.
I think this locks firefox into the old key3.db mode of operation.
I didn't have an old file to restore, thus lost all my logins and also 
my noscript history - what a huge PITA!

Have just done the yum update for the latest firefox and now I see a 
key4.db. Needed to start the new firefox and exit before it showed.
HOWEVER when I logged out and back in without the export command it all 
went pear shaped again.
So reinstated the export NSS.... again, now I needed to reestablish the 
master password file, it seems to make a new key3.db file and doesn't 
touch the key4.db file that was originally created after the firefox 
update. BUT THEN when I exit a second time it deletes the key3.db and 
I'm back to ZERO.

This is so stuffed up!

Seems every second time I exit Firefox it kills the key3.db and all my 
stuff is gone.

Some seriously brain dead designers in the firefox / mozilla stable at 
this time.
Seems that one cannot afford to exit firefox and keep the master 
password file/database.
After so many years of using it, I cannot live without a reliable 
password and master password database - firefox clearly doesn't have 
this capability any longer.

Moving to try Vivaldi
> method mentioned. Do we restore the old key3.db file, have the user set
> that variable, then start the new firefox? With that create a key4.db file
> and use it from then on?
>
>

On 10/12/2018 08:24 AM, Phelps, Matthew wrote:
> On Wed, Oct 3, 2018 at 5:34 AM Rob Kampen <rkampen at
kampensonline.com> wrote:
> 
>> Hi list,
>>
>> Did an update to firefox last night and rebooted over night.
>>
>> Today I find firefox started without asking for master password - funny
>> me thinks.
>>
>> Try to log in to a web service I use and find that my password does not
>> appear.
>>
>> Check preferences and find that no master password is set and the
>> password list / table is empty.
>>
>> As I do not trust my passwords to the cloud I do not save these to my
>> firefox profile ..... so back to manual entry for all my sites.... wow
>> going to be a slow month as I reset scores of passwords.
>>
>> Any one else have this problem and any clues as to what causes this? I
>> am concerned if this should happen again, as I have saved passwords for
>> many scores of web services.
>>
>> TIA
>> Rob
>>
> 
> We've run into this.
> 
> Is it fixed in the latest firefox, 60.2.2-1?
> 
> If not, it is not clear to me how to use the
> 
> export NSS_DEFAULT_DB_TYPE="sql"
> 
> method mentioned. Do we restore the old key3.db file, have the user set
> that variable, then start the new firefox? With that create a key4.db file
> and use it from then on?
> 
> 
It will be fixed when this is released:

https://bugzilla.redhat.com/show_bug.cgi?id=1633932#c23

In the mean time, for CentOS-6 and CentOS-7 (x86_64, i386) .. there is a
temporary unsigned build here:

https://buildlogs.centos.org/c6-firefox60.x86_64/firefox/20181015143830/

https://buildlogs.centos.org/c7-firefox60.x86_64/firefox/20181015143830/

As soon as Red Hat officially releases the other SRPM, I will build it
and release it as well.

Thanks,
Johnny Hughes


-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 198 bytes
Desc: OpenPGP digital signature
URL:
<http://lists.centos.org/pipermail/centos/attachments/20181015/60a571f0/attachment-0001.sig>