New issue
Advanced search Search tips
Note: Color blocks (like █ or █) mean that a user may not be available. Tooltip shows the reason.

Issue 649676 link

Starred by 2 users
Status: WontFix
Owner:
█ vabr@chromium.org
hobby only
Closed: Sep 2016
Components:
EstimatedDays: ----
NextAction: ----
OS: Mac
Pri: 3
Type: Bug



Sign in to add a comment

Trying to reveal password give "Unapproved caller" error

Project Member Reported by rogerta@chromium.org, Sep 23 2016 
Version: 55.0.2859.0 (Official Build) dev (64-bit)
OS: OS X 10.11.6

What steps will reproduce the problem?
1/ I forgot my password to a website, so went through password reset flow
2/ When I got to the "enter new password" page, chrome suggested a strong password
3/ I accepted the password and saved it with the website
4/ The website took me to the sign in page, however, chrome did not fill in the email or password. Even after typing email, no password was suggested
5/ I went to chrome://settings to reveal my password
6/ Pressing the "show" button gave me an "unapproved caller" error

---Changed machines---
7/ Went to my windows machine
8/ I went to chrome://settings to reveal my password, it was sync'ed
9/ Pressing the "show" button asked for my OS password, and then revealed the site password
10/ Continuing on my windows machine, I went to the website login page
11/ The sign in form was blank.  I started typing my email and I got a suggestion for my email, so I selected it
12/ The above did not autofill the password field
13/ I clicked on password field with mouse, chrome suggested I use password for "blank".  I don't know why it said blank, and because I have only saved one email/password pair for this site, I decided to choose this password anyway
14/ I successfully signed in

---back to mac---
15/ I rebooted my mac
16/ I started chrome went to settings
17/ Attempting to reveal the password now asked me for my OS password and I was able to reveal it

I can't recall if/when the last chrome update happened.  I know that santa was recently enabled on this machine, so I don't know if that has anything to do with it.

Comment 1 by rogerta@chromium.org, Sep 23 2016 

Attaching "Unapproved caller" error dialog
error.png
26.0 KB View Download

Comment 2 by vabr@chromium.org, Sep 27 2016

Status: WontFix (was: Untriaged)
Hi Roger, thanks for the report. You describe two issues:

(1) A side issue of the password not being filled after being generated. If you want this investigated, please file a separate bug, mentioning the URL of the site, and put that into the UI>Browser>Passwords>Generation component (and/or make dvadym@, who leads password generation, aware of it).

(2) The title issue: the "unapproved caller". This looks like an OS-level glitch. After the request to show the passwords, Chrome executes AuthenticateUser() from chrome/browser/password_manager/password_manager_util_mac.mm, which involves some fairly standard library calls, which should not trigger OS security errors. Googling for ["securityagent may only be invoked by apple software"] shows that this is a somewhat flaky issue not limited to Chrome.

If you find a way to reproduce this issue, please do let me know. So far I understand from your steps 15-17 that things returned to normal for you, so marking this as WontFix.
►

Sign in to add a comment