This Bugzilla instance is a read-only archive of historic NetBeans bug reports. To report a bug in NetBeans please follow the project's instructions for reporting issues.
There are several other reports related to this problem: netbeans password storage handling doesn't work with linux/kde. Bug 181252 (for example) indicates that this should be fixed, but it still doesn't work for me, tested (again after 6.9 failed) with 6.9.1 on ubuntu 10.04. Symptom: i have to enter a password (immediately) on every start of netbeans. There is no further action involved, just starting the ide is enough. The environment consists of a java project stored in subversion, handled by svn+ssh and gpg-agent (using a dsa key for authentication). I do not want to store any password in netbeans (nor in kwallet, which isn't even configured). Is the described behaviour intended? Why do i have to enter a password?
Some part of IDE (probably Subversion) ask for saved passwords, that's the reason why this dialog shown. Run your IDE with -J-Dorg.netbeans.modules.keyring.level=0 switch and attach your log (menu item: View|IDE Log) to see what part of IDE asks for password too early. Thanks
Created attachment 101658 [details] ide log file
Have the same bug with 7.0.2 Gentoo/kde4, right after installation netbeans start asking for master password. 1. Netbeans must not ask for a master password without clear indication what password they try to extract from keyring (it's security breach) i.e. master password dialog should be like e.g.: "SVN asked for password. Enter a master password to get it form keyring or type password here" 2. Netbeans shouldn't offer master password change in the same dialog. 3. Netbeans should have a possibility to store keys without a master password (as Mozilla, MSFT and rest of the world do). 4. Netbeans says that it going to forget all stored passwords when I change a master password. I guess user typing (or it's hash) used to encrypt stored password. Let me know if it's correct - I'll file a separate bug for it.
(In reply to comment #1) > Some part of IDE (probably Subversion) ask for saved passwords, that's the > reason why this dialog shown. Run your IDE with > -J-Dorg.netbeans.modules.keyring.level=0 switch and attach your log (menu item: > View|IDE Log) to see what part of IDE asks for password too early. Thanks Versioncontrol seems to be first who asks for password.
(In reply to comment #3) > Have the same bug with 7.0.2 Gentoo/kde4, right after installation netbeans > start asking for master password. > > 1. Netbeans must not ask for a master password without clear indication what > password they try to extract from keyring (it's security breach) > i.e. master password dialog should be like e.g.: "SVN asked for password. > Enter a master password to get it form keyring or type password here" Makes sense such UI, it's RFE. > 2. Netbeans shouldn't offer master password change in the same dialog. Why not? Anyway, it's question to consider UI design. > 3. Netbeans should have a possibility to store keys without a master password > (as Mozilla, MSFT and rest of the world do). Maybe. I don't know. It's your point of view. > 4. Netbeans says that it going to forget all stored passwords when I change a > master password. I guess user typing (or it's hash) used to encrypt stored > password. Let me know if it's correct - I'll file a separate bug for it. Jesse, could you comment it? Overall, it's not a functional defect, it's a call for review of UI again. Let's track it as RFE instead of defect.
*** This bug has been marked as a duplicate of bug 193978 ***
Personaly I don't care if the password is requested by Netbeans or by svn/javahl - it's a bug anyway, because - as I wrote in the original ticket - I'm using gpg-agent which handles my ssh keys. I understand that javahl is easier to use for Netbeans windows users, but for me it means that Netbeans/SVN is only usable with the following command line options: -J-DsvnClientAdapterFactory=commandline \ -J-Dnetbeans.keyring.no.native=true \ -J-Dnetbeans.keyring.no.master=true \
(In reply to comment #3) > Have the same bug with 7.0.2 Gentoo/kde4, right after installation netbeans > start asking for master password. Check your log for warnings relating to failure to use KWallet. Original reporter has FINE [org.netbeans.modules.keyring.kde.KWalletProvider]: application exit with code 2 for commandString: [qdbus, org.kde.kwalletd, /modules/kwalletd, org.kde.KWallet.isEnabled] > 1. Netbeans must not ask for a master password without clear indication what > password they try to extract from keyring Perhaps. Once the master password is entered, it is used subsequently in the same session to decrypt other saved passwords, so it might be misleading to display the key for just the first password being decrypted. > 2. Netbeans shouldn't offer master password change in the same dialog. Probably true as a UI issue; fixing it would complicate implementation. Since the master password-based encryption is used only as a fallback when native keyrings fail, and native keyrings are available on all supported platforms (technically: native encryption, not a keyring, on Win32), we do not spend effort on this UI. > 3. Netbeans should have a possibility to store keys without a master password > (as Mozilla, MSFT and rest of the world do). This is bug #193978. > 4. Netbeans says that it going to forget all stored passwords when I change a > master password. If you forget the old password and change it, then yes previously stored passwords are discarded, since they can no longer be decrypted. (In reply to comment #7) > I'm using gpg-agent which handles my ssh keys [so I use]: > -J-DsvnClientAdapterFactory=commandline Sounds like an RFE (category versioning/subversion) to allow you to switch to a command-line client. There is already a "Path to the SVN executable File" in Tools > Options > Miscellaneous > Versioning > Subversion; I have no idea if it does what you want or not, but this is not the place to discuss it.
Failure to use KWallet automatically is a defect. Other UI issues mentioned are irrelevant here, should be filed separately if not already.
I don't know if somebody fixed that, but it works for me on NB 7.2. Please try this or newer version and verify it. Maybe I wasn't able to reproduce this bug correctly. Thanks