Bug 1200257

Steps to reproduce:

1. Be sure you are not logged in
2. Go to some bug(*), e.g. https://bugzilla.opensuse.org/show_bug.cgi?id=776117
3. Use the embedded login form at the top of the screen to log in: enter your correct username and password and click the submit button.

(*) or at step 2 use the "New" link to enter a new bug, which will redirect you to log in. I face the same issue when I do that, although maybe some details may vary.

Expected: should log in. Or if there's something wrong, give an error message explaining what's wrong

Observed: it shows a new login page with no error message whatsoever. 

4. Re-enter the correct username and password

Expected: same as after step 3

Observed: keeps showing the same login form page with no error message.


For MONTHS I've been having this problem, and every single time I thought I wasn't remembering my password correctly, so first I would try with the email instead of the username (or the other way around if I had tried with the email first), because the prompt says "login" which is ambiguous and you can't know which one you are supposed to use. Then I would try different password that I thought might be the correct one. I would get either the error complaining about incorrect username and/or password or again the login prompt again with no error message, and of course it was seemingly random to me and I didn't know that in one case it's this stupid bug and in the other case I'm actually entering the wrong password or username.

So then, every time, I would attempted to do the "Reset password" or "Forgot password" thing, which is also broken in many ways that I don't even want to try and remember, and in the end I ended up creating a new user every time, which is also a f***ing mess (and I reached the point where I had to create a new gmail account each time), and then couldn't log in with the new user anyway, until between clearing cookies and going to the homepage (rather than a specific bug) and through the dedicated "log in" link (as opposed as using  the embedded form in any random page) I could finally log in with one user or another.

It is only now that I finally figured out (or at least think so) that what makes the difference is to go to the dedicated login page from the link in the home page (and maybe clearing cookies is also needed), and not clearing the cookies, at least not that alone.


I am not sure whether or not this has to do with the "restrict this session to this IP address" or not. I would never check that option if it was for me, but it's checked by default so most of the time I forget to uncheck it (or fail to realise it's not a "remember me" checkbox). Either way, this is obviously a bug. If I get logged out because I was already logged in via cookies but I'm connecting from a different IP, that should not prevent me from logging in again, and if it does for any reason, should show some error message and tell me what to do about it.

Note that I do NOT use any password manager, nor any of the browser's "remember passwords" features. The only way my username and password get entered from the client side (regardless of when *you* log me in automatically using a cookie) is when I type them with my hands. Not that you would be excused if the issue had to do with the browser remembering passwords (unless it was a bug in the browser) but that is not the case anyway.


Everything login-related in this bug tracker is a complete mess. Login, as described here, password reset, signing up.