Bug 343562 - Cannot remove a wrong user/password after it was stored
Summary: Cannot remove a wrong user/password after it was stored
Status: CONFIRMED
Alias: None
Product: ksshaskpass
Classification: Applications
Component: general (show other bugs)
Version: 5.24.5
Platform: Fedora RPMs Linux
: NOR normal
Target Milestone: ---
Assignee: Jeremy Whiting
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2015-01-30 09:38 UTC by raphael.cazenave
Modified: 2022-07-05 22:17 UTC (History)
8 users (show)

See Also:
Latest Commit:
Version Fixed In:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description raphael.cazenave 2015-01-30 09:38:04 UTC
Version : ksshaskpass 5.2.0-1,
Using KDE 4.14.4-1,
plasma-desktop 5.2.0-2,
plasma-framework 5.6.0-2



Reproducible: Always

Steps to Reproduce:
1. Clone a github project with git clone
2. edit something, commit, push it, ksshaskpass will ask you your username (and believe it's a password, by the way :/), and the password
3. If you choose to keep the password, it will be stored somewhere (not sure it's in kwallet)

Actual Results:  
Not possible to edit or remove the username nor password (if the password was wrong it's sad)


It's possible to workaround this behavior with export SSH_ASKPASS="" before using an app that is using ksshaskpass
Comment 1 Martin Kostolný 2015-03-08 18:39:52 UTC
The same problem just happened to me. Git push, believed that username is the password, checked checkbox to keep password and now it is still asking with the wrong username.

I also cannot find the configuration file for ksshaskpass with the wrong username.

I have ksshaskpass 5.2.1, KDE Wallet Manager 2.0 based on KDE 4.14.5 (but here I am unable to find the given git origin with the username). My base setup is Arch Linux with Plasma 5.2.1, KDE Frameworks 5.7.0 and KDE Applications 14.12.2.
Comment 2 Martin Kostolný 2015-12-13 21:17:59 UTC
Since there is kwalletmanager 15.08.3 available it is possible to remove the wrong username & password pair. Then ksshaskpass will ask for username again. So I think this particular bug can be resolved fixed.

I will open a new bug report though for ksshaskpass where it should ask for username with textfield labeled also with "Username" (not "Password") and the same goes for the checkbox "Remember Password" under this textfield.
Comment 3 resplin 2016-01-06 21:21:48 UTC
I had the same trouble after upgrading to Fedora 23.

It looks like KDE now stores the wallet in ~/.local/share/kwallet instead of in ~/.kde/share/apps/kwallet.

Installing kwalletmanager5 gave me a manager that could see the incorrect password.

I agree that this issue can be closed as resolved.
Comment 4 Gregor Mi 2016-10-01 16:42:41 UTC
> The same problem just happened to me. Git push, believed that username is the password

I ran into the same problem. The reason why I confused username with password was because the dialog prompt is wrong. On top it says something with "username" but the string next to the textbox says "Password:".
Comment 5 Karl Ove Hufthammer 2017-04-23 07:23:10 UTC
I just got bitten by the same problem, using ksshaskpass 5.9.4 and all the latest libraries. Marking bug as ‘Confirmed’.
Comment 6 P Fudd 2019-04-26 07:52:43 UTC
Reported downstream: https://bugzilla.redhat.com/show_bug.cgi?id=1702884

This is still happening in 2019 with Fedora 29.

Ksshaskpass still isn't fixed, 6 years after this was reported.

The first time I tried to do 'git push' to my very first Github repository, it asked for my username using a password field (with '*' masking), and the wording was confusing enough that I entered my password instead.  

Now it won't let me change the username, and instead prints "Password for 'https://<password>@github.com':"

I've searched all of my files and can't find the password string anywhere, I guess it's encrypted in KWallet?

Thanks
Comment 7 P Fudd 2019-04-26 07:53:23 UTC
Yes, that was it: to fix, run 'kwalletmanager5', go to the 'ksshaskpass' folder, and there will be one 'password' for 'https://github.com' containing the GitHub username (e.g. username@yourdomain.com), and another 'password' for 'https://username@yourdomain.com@github.com' containing the actual password.

I edited the contents of the first 'password' to replace my password with my username, deleted the second 'password', and everything worked right again.

The program still needs to be fixed, though.  :-)
Comment 8 P Fudd 2019-04-26 08:01:06 UTC
Ideally, the first page presented by ksshaskpass should offer a list of possible usernames to use for the site you're attempting to connect to, or let you create, update or delete a username.  

It should also allow you to change or delete the password associated with the username.

It's not clear that it's storing things in the best possible way inside kwallet.

It looks like I'm describing an identity management service; has this wheel been invented before, and can we copy it?
Comment 9 Reartes Guillermo 2020-10-28 14:31:18 UTC
It is still happening in 2020.

ksshaskpass-5.18.5.-1
Fedora 31
KDE Plasma: 5.18.5
KDE Frameworks: 5.73.0
QT: 5.13.2

[Idem to comment #6]
The first time I tried to do 'git push' to my very first Github repository, it asked for my username using a password field (with '*' masking), and the wording was confusing enough that I entered my password instead.  

Now it won't let me change the username, and instead prints "Password for 'https://<password>@github.com':"
Comment 10 Reartes Guillermo 2020-10-28 14:39:13 UTC
For the record,

$ unset SSH_ASKPASS

Then add the previous command to your ~/.bashrc file.