Bug 311550

Summary: Akonadi-IMAP-Ressource don't ask for authentication on subsequently connects
Product: [Frameworks and Libraries] Akonadi Reporter: regi.hops
Component: IMAP resourceAssignee: kdepim bugs <kdepim-bugs>
Status: RESOLVED NOT A BUG    
Severity: major CC: kdepim-bugs, vkrause
Priority: NOR    
Version: 1.8.1   
Target Milestone: ---   
Platform: openSUSE   
OS: Linux   
Latest Commit: Version Fixed In:
Attachments: Akonadiconsole Information

Description regi.hops 2012-12-12 01:55:35 UTC
KMail2 / Kontact only ask me once for the KWallet password when I start it first after login to KDE.
All subsequent shutdown/starts of KMail2 don't ask me ever for a password again.
Even if all wallets are closed, and after hours not using KMail2 and not connected to any IMAP-Resource.


Reproducible: Always

Steps to Reproduce:
1. Start KMail2/Kontact
2. Login to IMAP-Server using KWallet password
3. Shutdown KMail2/Kontact
4. All IMAP-Resources are offline
5. Close all open wallets
6. Start KMail2/Kontact

Actual Results:  
KMail2/Kontact connects to all IMAP-Resources without asking for a password


Expected Results:  
KMail2/Kontact should ask for the password


I configured the Akonadi-IMAP-Resource to go offline when KMail2/Kontact will be shutdown.
KWallet closes automatically when no application is accessing it, but at least after 30 minutes.

When shutdown KMail2/Kontact all wallets are closed correctly.
Starting KMail2/Kontact again (even after a few hours), it never ask for the KWallet password and silently connects to all configured IMAP-Resources.

You need to logout from KDE and login again, to make KMail2/Kontact forget about the login credentials.
Comment 1 regi.hops 2012-12-19 15:46:57 UTC
Created attachment 75929 [details]
Akonadiconsole Information

Password (clear text!) and connection information can be easily accessed, even if the ressource is offline and kwallet is closed.
Comment 2 regi.hops 2013-01-03 19:43:32 UTC
Nothing to worry about