Bug 478875 - NetworkManager vpn connection stores my vpn password in keyring without my consent
Summary: NetworkManager vpn connection stores my vpn password in keyring without my co...
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: Fedora
Classification: Fedora
Component: NetworkManager-vpnc
Version: 10
Hardware: All
OS: Linux
low
medium
Target Milestone: ---
Assignee: Dan Williams
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2009-01-05 19:41 UTC by Jeff Johnston
Modified: 2009-11-06 06:53 UTC (History)
3 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2009-11-06 06:53:39 UTC
Type: ---
Embargoed:


Attachments (Terms of Use)

Description Jeff Johnston 2009-01-05 19:41:53 UTC
Description of problem:

I am using NetworkManager to make a vpn connection.  I asked NetworkManager to store the VPN group password in my keyring, but not my VPN personal password.  My personal password is my Kerberos password and I don't want it stored anywhere.

What is happening is that the personal password is also being added to the keyring.

Version-Release number of selected component (if applicable):


How reproducible:


Steps to Reproduce:
1. Use NetworkManager vpn connection
2. Specify the group and personal password and ask for only the group password to be stored in keyring
3. Relogin at most 2 more times and access the VPN connection in question
  
Actual results:
 
The VPN connection will not query for the VPN password and a listing of the keyring will show it has been stored in the default keyring.

Expected results:

The VPN connection should only store the group password in the keyring.

Additional info:

NetworkManager-vpnc-0.7.0-0.11.svn4326.fc10.i386
vpnc-0.5.1-6.fc10.i386

Comment 1 Andrew Overholt 2009-01-05 19:58:17 UTC
I've been meaning to file this as well.

Comment 2 Dan Williams 2009-11-06 06:53:39 UTC
This should be long fixed in the vpnc packages with 0.7.1; choose "always ask" in the connection editor for that connection and you'll always get asked.


Note You need to log in before you can comment on or make changes to this bug.