Bug 144318 - open by remote_files tries login with invalid users I do not specify
Summary: open by remote_files tries login with invalid users I do not specify
Status: UNCONFIRMED
Alias: None
Product: LibreOffice
Classification: Unclassified
Component: framework (show other bugs)
Version:
(earliest affected)
6.0.7.3 release
Hardware: x86-64 (AMD64) Linux (All)
: medium normal
Assignee: Not Assigned
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2021-09-05 21:20 UTC by Tzvi Edelman
Modified: 2022-03-02 03:49 UTC (History)
1 user (show)

See Also:
Crash report or crash signature:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Tzvi Edelman 2021-09-05 21:20:15 UTC
Description:
When I open via remote_files using ssh, regardless of the remote user I specify in the "Remote Files" => "File Services" => Type=SSH pop-up, the open attempts to login first as the user I am logged in as on the local host, and then another user name that I tried earlier and then deleted from the remote_files service. Examining the remote /var/log/auth.log shows that the libreoffice client does not get to try the valid user.


Steps to Reproduce:
Example:
- local user: bill_local
- valid remote user: bill_good
- invalid remote user: bill_bad

1. Setup remote_files ssh service with user bill_bad.

   Attempt open, which will fail.

   Delete remote_files ssh service with user bill_bad.


2. Setup remote_files ssh service with user bill_good.

   Attempt open, which will fail.

Actual Results:
error popup: Nonexistent file

Examine remote:/var/log/auth.log

- see invalid login attempts from bill_local and bill_bad,
  even after deleting the bill_bad service.

- see "Too many authentication failures"
   Sep  5 17:05:38 remote sshd[3916459]: Disconnecting invalid user bill_bad xxx.xxx.xxx.xxx port xxxxx: Too many authentication failures [preauth]

- don't see login attempt for bill_good


Expected Results:
file menu of remote directory


Reproducible: Always


User Profile Reset: No



Additional Info:

Version: 6.0.7.3
Build ID: 1:6.0.7-0ubuntu0.18.04.10
CPU threads: 4; OS: Linux 4.15; UI render: default; VCL: gtk3; 
Locale: en-US (en_US.UTF-8); Calc: group
Comment 1 Joe Breuer 2022-03-01 14:48:27 UTC
I'm seeing a very similar problem trying to access WebDAV resources. Instead of asking for credentials, a nondescript error dialog "Nonexistent file." is shown.

With a debug enabled build and SAL_LOG="+INFO+WARN-INFO.vcl.schedule-INFO.i18nlangtag-INFO.sal.osl.condition-INFO.vcl-INFO.drawinglayer", it points to the same issue Tzvi is describing pertaining to ssh:

info:ucb.ucp.gio:131336:131336:ucb/source/ucp/gio/gio_provider.cxx:36: QueryContent: https://hidden.host.name:443/alfresco/webdav/Sites/HIDDEN/documentLibrary/!HIDDEN/
info:ucb.ucp.gio:131336:131336:ucb/source/ucp/gio/gio_content.cxx:81: New Content ('https://hidden.host.name:443/alfresco/webdav/Sites/HIDDEN/documentLibrary/!HIDDEN/')
info:ucb.ucp.gio:131336:131336:ucb/source/ucp/gio/gio_content.cxx:939: Content::execute open
warn:ucb.ucp.gio:131336:131336:ucb/source/ucp/gio/gio_content.cxx:399: ignoring GError "HTTP Client Error: Unauthorized" for <https://hidden.host.name:443/alfresco/webdav/Sites/HIDDEN/documentLibrary/!HIDDEN/>
warn:uui:131336:131336:uui/source/iahndl.cxx:237: replaceMessageWithArguments: No arguments passed!
info:toolkit:131336:131336:toolkit/source/awt/vclxwindows.cxx:2279: XDialog created

(that XDialog is the error dialog.)

This starts with a different version that what Tzvi was reporting, however: I'm seeing this issue in at least 7.2.5.2, versions up to and including 7.1.7.2 work(ed) for me.

(as opposed to ssh remote resources, in the WebDAV service configuration dialog there's no option to specify a username / credentials.)


See also https://bugs.gentoo.org/834438