marius-wieschollek/passwords-webextension

[BUG]: Extension is locking my account on Active Directory

majkinetor opened this issue · 0 comments

majkinetor commented

⚠️ This issue respects the following points: ⚠️

  • This is a single bug, not a question or a configuration/webserver/proxy issue.
  • This is not a bug in the Nextcloud App or another client.
  • This issue is not already reported on Github (I've searched it).
  • Nextcloud Server and the Passwords App is up to date. See Nextcloud Apps.
  • The browser extension is up to date. See Nextcloud Apps.

Server Information

27.1.3

Client Information

Browser and Version: Firefox 121, Chrome latest
Client OS and Version: Windows 10
Extension Version: 2.5.0

Bug description

Several of my teammates were locked on Active Directory because extension keeps trying to login with invalid credentials.

Note that:

  1. NextCloud is obviously connected to AD

  2. Most of us didn't change credentials, but extension for some reason required relogin and extension showed big number of notifications about inability to login

    details There are 10s or more of these:

    image

  3. One team member actually changed the credentials on AD but didn't update it on extension, and from that moment forward extension was locking him constantly

I guess to solve this, there needs to be some form of diminishing returns to relogin, with ultimate stop of retry. This might even be configurable.

Steps to reproduce

  1. It happens on its own

Expected behavior

Extension should do its best not to spam AD server via NC or make this configurable as AD settings differ in that regard.

Extension Logs

No response