pydio-core icon indicating copy to clipboard operation
pydio-core copied to clipboard

Thunderbird FileLink not working when authfront.otp plugin activated

Open mikerhyner opened this issue 10 years ago • 3 comments

When authfront.otp is activated, AjaXplorer FileLink for Thunderbird isn't working any more: On first setup of the TB FileLink plugin, (correct) password seems to be accepted, but no repository is shown to the user. When going over here with an empty repository selection, TB hangs until the application is being closed. Then, when TB is started again, exactly one operation against Pydio can be done by the FileLink Plugin (but only when a real file repository like "my-files" is configured as user's standard repository, because of failed setting / choosing of repository to be used on client side). Its possible only once to either show the state (space used, etc.) of the plugin within TB "Settings" dialogue or sending an attachment as link, but only once during livetime of Thunderbird.

So I assume that when the FileLink Plugin is first used per TB application lifetime, a username+password authentication has to be conducted and then operation works: |test9|AuthService|Log In|context=WebUI But on sucessing requests, a "secure token" is involved to prove authentication, and that fails with the following Pydio log entry: Error | error l.487 | from class.AJXP_Controller.php | message=Cannot find method switchAction for plugin authfront.otp! Error | error l.90 | from index.php | message=You are not allowed to access this resource.

Interestingly, the FileLink plugin sends the error message back to the server (excerpt from Apache access_log) as his secure_token instead of the real one (possibly this is a bug within the TB plugin doing no sanity check on response received): {IPAddress} - - [30/Mar/2015:02:11:30 +0200] "POST /files/index.php?secure_token=%3C?xml%20version=%221.0%22%20encoding=%22UTF-8%22?%3E%3Ctree%20%3E%3Cmessage%20type=%22ERROR%22%3ECannot%20find%20method%20switchAction%20for%20plugin%20authfront.otp!%3C/message%3E%3C/tree%3E&action=get_xml_registry HTTP/1.1" 200 554 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Thunderbird/31.5.0 Lightning/3.3.2" So because of that, I assume, the request will fail...

When disabling the "authfront.otp" Pydio Plugin, TB FileLink works again as expected (but that isn't what we want ...).

So because of this circumstance, I'm opening an issue here because I assume there's something wrong with processing of get/post api requests the TB plugin uses, when authfront.otp is activated (even when a certain account has no Google Auth or Yubikey parameter configured within dashboard).

mikerhyner avatar Mar 30 '15 12:03 mikerhyner

Same problem.

Yamakaky avatar Aug 08 '15 16:08 Yamakaky

Does not appear in AMO https://pydio.com/en/products/downloads/thunderbird-filelink https://addons.mozilla.org/en-US/thunderbird/addon/ajaxplorer-for-filelink/ screen shot 1437-06-15 at 12 36 37 New add-on from Diego Blanco @dbestevez https://addons.mozilla.org/en-US/thunderbird/addon/pydio-for-filelink/ screen shot 1437-06-15 at 12 37 13 Source code: https://github.com/dbestevez/pydio-for-filelink Does not appear in the Preference Window / Attachments Tab https://github.com/dbestevez/pydio-for-filelink/issues/1 screen shot 1437-06-15 at 12 33 19

I can help with the new version. :+1:

ajsb85 avatar Mar 24 '16 11:03 ajsb85

Hi guys what's the status here?

cdujeu avatar Sep 21 '16 07:09 cdujeu