Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Kee doesn't resolve Field References #192

Closed
stefan-muc opened this issue Sep 13, 2018 · 3 comments
Closed

Kee doesn't resolve Field References #192

stefan-muc opened this issue Sep 13, 2018 · 3 comments

Comments

@stefan-muc
Copy link

stefan-muc commented Sep 13, 2018

KeePass support Field References, documentation can be found here: https://keepass.info/help/base/fieldrefs.html

They can be done by hand, or can be done when you check »Replace user names and passwords by references« during duplicating a KeePass entry. They look like e.g. »{REF:P@I:5FF7E1949F4BF94E8DB184DD6B4E3761}« for a referenced password field.
In an environment with different web services sharing a single sign-on, one will have one master password entry, and some slave entries for the different web services, referencing the master password and/or username. So when the single sign-on password has to be changed, only one KeePass password entry has to be modified.

With the old KeeFox Firefox extension this Field References got resolved properly, and sign on worked.
Starting with the switch to the Kee extension, the Field References don't get resolved anymore, but the reference text (as pasted above) gets inserted in web form fields. This is a bug, because sign on then doesn't work anymore.

I really would like to see that feature back in Kee, might that be possible please?

@eaglefsd
Copy link

See #181

@stefan-muc
Copy link
Author

Okay it's a partly weird attack vector that an attacker might try to bruteforce a 120 bit / 32 char UUID to get a 104 bit / 20 char (or shorter) password, but okay...

I re-enabled KeePass placeholders and now some of the logins work again - others not, but I'll have to debug that when I find time for that. Thank's for pointing me to the bug report :)

@stefan-muc
Copy link
Author

Ah, I'm now running into issue #87 with Firefox not supporting NTLM authentication since WebExtensions API. This also worked well with KeeFox.

So this bug can be closed :)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants