Bug 311550

Summary:	Akonadi-IMAP-Ressource don't ask for authentication on subsequently connects
Product:	[Frameworks and Libraries] Akonadi	Reporter:	regi.hops
Component:	IMAP resource	Assignee:	kdepim bugs <pim-bugs-null>
Status:	RESOLVED NOT A BUG
Severity:	major	CC:	pim-bugs-null, vkrause
Priority:	NOR
Version First Reported In:	1.8.1
Target Milestone:	---
Platform:	openSUSE
OS:	Linux
Latest Commit:		Version Fixed/Implemented In:
Sentry Crash Report:
Attachments:	Akonadiconsole Information

Description regi.hops 2012-12-12 01:55:35 UTC

KMail2 / Kontact only ask me once for the KWallet password when I start it first after login to KDE.
All subsequent shutdown/starts of KMail2 don't ask me ever for a password again.
Even if all wallets are closed, and after hours not using KMail2 and not connected to any IMAP-Resource.


Reproducible: Always

Steps to Reproduce:
1. Start KMail2/Kontact
2. Login to IMAP-Server using KWallet password
3. Shutdown KMail2/Kontact
4. All IMAP-Resources are offline
5. Close all open wallets
6. Start KMail2/Kontact

Actual Results:  
KMail2/Kontact connects to all IMAP-Resources without asking for a password


Expected Results:  
KMail2/Kontact should ask for the password


I configured the Akonadi-IMAP-Resource to go offline when KMail2/Kontact will be shutdown.
KWallet closes automatically when no application is accessing it, but at least after 30 minutes.

When shutdown KMail2/Kontact all wallets are closed correctly.
Starting KMail2/Kontact again (even after a few hours), it never ask for the KWallet password and silently connects to all configured IMAP-Resources.

You need to logout from KDE and login again, to make KMail2/Kontact forget about the login credentials.

Comment 1 regi.hops 2012-12-19 15:46:57 UTC

Created attachment 75929 [details]
Akonadiconsole Information

Password (clear text!) and connection information can be easily accessed, even if the ressource is offline and kwallet is closed.

Comment 2 regi.hops 2013-01-03 19:43:32 UTC

Nothing to worry about