Spurious 'Authentication Required' messages

Bug #45232 reported by seanh
12
Affects Status Importance Assigned to Milestone
nautilus (Ubuntu)
Invalid
Medium
Unassigned

Bug Description

I have this bug on ubuntu breezy. Guessing, it appears to be a bug in nautilus.

I often use nautilus to access folders in a couple of remote accounts I have via SSH. This works fine. But since I've been doing it a window frequently pops up:

----------------------------------
Authentication Required

You must log in to access user@account

Password:

 x Remember password for this session
 x Save password in keyring

 Cancel Connect
----------------------------------

The account it's asking me to log in to is one of the two SSH accounts I sometimes visit with nautilus. It doesn't seem to be either one in particular, just one or the other each time. The problem is that this Authentication Required window is popping up at times when I'm not doing anything related to SSH. Times I have seen it include (but are not limited to):

* When taking a screenshot of my desktop
* When extracting or creating an archive with file-roller
* After clicking 'Save a copy' in GEdit.

It just seems to me that certain random actions trigger the message, although the same actions will trigger it again and again.

I heard a theory that this was because nautilus had my remote folders mounted, but this doesn't seem to be the case, I have seen the spurious message in sessions in which I have not used SHH at all.

The Authentication Required window is usually (probably always) preceded by an 'Unlock Keyring' window. If I click Cancel to the Authentication Required message (or Deny to the Unlock Keyring message) because I don't want to give nautilus my password right now the Authentication Required or the Unlock Keyring just comes back, again and again (they take turns, I get one window then the other).

If I give the Authentication Required window my password and then click Connect the window freezes for a while and then the Unlock Keyring window pops back up, asking for my password to connect or to unlock the keyring again.

Usually I can get the message to go away and whatever action I was requesting to succeed if I give the Unlock Keyring window the password to access my keyring and then choose 'allow this application to access the keyring' in a third window that pops up.

I've marked this bug as a security issue, since nautilus is asking for my password when it shouldn't need it, and I'm repeatedly having to throw my password around to get past the issue.

Revision history for this message
seanh (seanh) wrote :

Another thought: I have my two remote SSH folders bookmarked in Nautilus. Perhaps this is what's causing the problem.

Also I have seen this problem on more than one machine, my desktop and my laptop. I use nautilus to access the same remote SSH folders on both machines, but the spurious messages occur even when I am not accessing and have not accessed during the session any remote folders. I have remote folders bookmarked in nautilus on both machines.

Revision history for this message
Matt Zimmerman (mdz) wrote : Re: [Bug 45232] Re: Spurious 'Authentication Required' messages

 unsubscribe ubuntu-security

--
 - mdz

Revision history for this message
Gary Coady (garycoady) wrote :

Thanks for the bug report. This particular bug has already been reported into our bug tracking system, but please feel free to report any further bugs which you find.

Changed in nautilus:
status: Needs Info → Rejected
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.