Sandboxie Forum - Using LastPass (or other online password managers?) (6440)

tzuk:

Thu Nov 12, 2009 4:47 pm

And you say installing just the Firefox components makes no changes to the registry so there is nothing for the Software Compatibility wizard to detect. Then I guess I'll leave things as they are and at least be able to detect LastPass when the IE component is installed.

wraithdu:

Thu Nov 12, 2009 2:32 pm

That installer includes the IE plugin and the Firefox plugin. I'm positive that's where you got the registry entries. However you can just as well install only the Firefox plugin which bypasses the installer: https://lastpass.com/download.php Second download option.

tzuk:

Thu Nov 12, 2009 10:30 am

I downloaded and installed the file lastpass.exe. More than that I don't recall.

wraithdu:

Thu Nov 12, 2009 12:05 am

If you've only installed the Firefox plugin, then there are no registry keys created at all. Perhaps those keys are installed with the IE plugin? Not sure since I don't use it.

tzuk:

Wed Nov 11, 2009 11:54 pm

It's just a way to detect LastPass so Software Compatibility can suggest it. You don't have the key you say? That won't be good for the detection. Remind me please -- since I've already uninstalled LastPass -- the HKEY_LOCAL_MACHINE\Software\LastPass, what is its exact path?

wraithdu:

Wed Nov 11, 2009 4:42 pm

Looks good. Not sure what that registry key is about though. I don't have it on my Win7 machine. What is the Tmpl.Scan setting?

tzuk:

Wed Nov 11, 2009 11:11 am

I added a template for LastPass in version 3.41.06. Please check it.

thingumybob: LastPass

Fri Oct 16, 2009 3:06 pm

OK, thanks, I'll sort that out. Seems I need to apply myself to this in more depth that I had envisaged :-)

wraithdu:

Wed Oct 14, 2009 6:14 pm

No, no, no. In your Sandboxie.ini file you should have two sections as follows: [quote:d5464882ae][TemplateSettings] Tmpl.Browser=firefox.exe [Template_Local_LastPass_XP] Tmpl.Title=LastPass (XP) Tmpl.Class=Local OpenFilePath=%Tmpl.Browser%,%Local AppData%\LastPass\*_lps.act.xml OpenFilePath=%Tmpl.Browser%,%Local AppData%\LastPass\*_lppri.lps OpenFilePath=%Tmpl.Browser%,%Local AppData%\LastPass\*_lp.act.lps OpenFilePath=%Tmpl.Browser%,%Local AppData%\LastPass\*_icons3.lps[/quote:d5464882ae] Then in Sandboxie Control make sure you've applied the template to your sandbox.

thingumybob: Using LastPass (error adding template)

Wed Oct 14, 2009 5:00 pm

[The following was re-posted here by the originator after it came up under another issue] ]]>Quoting Guest10: ]]> ]]>Quoting thingumybob: ]]>I have now updated some settings for Firefox and Thunderbird that I hope will fix a "SBIE1406 Missing or invalid expansion for Tmpl:Browser" message I was getting. ]]>Sounds like you missed part of wraithdu's LastPass template settings:[code:1:002a939c49][TemplateSettings] Tmpl.Browser=firefox.exe[/code:1:002a939c49]Maybe you didn't know what to do with the above? BTW, that line assumes the use of Firefox. It would be different for a different browser. ]]> Ooops - well spotted by you, not spotted by me ... Yes I copy/pasted direct so have got a totally unpersonalized/basically useless version as follows ... Tmpl.Title=LastPass (XP) Tmpl.Class=Local OpenFilePath=%Tmpl.Browser%,%Local AppData%\LastPass\*_lps.act.xml OpenFilePath=%Tmpl.Browser%,%Local AppData%\LastPass\*_lppri.lps OpenFilePath=%Tmpl.Browser%,%Local AppData%\LastPass\*_lp.act.lps OpenFilePath=%Tmpl.Browser%,%Local AppData%\LastPass\*_icons3.lps So that should be OpenFilePath=firefox.exe,%Local AppData%\LastPass\*_lps.act.xml OpenFilePath=firefox.exe,%Local AppData%\LastPass\*_lppri.lps OpenFilePath=firefox.exe,%Local AppData%\LastPass\*_lp.act.lps OpenFilePath=firefox.exe,%Local AppData%\LastPass\*_icons3.lps My only issue now is I can't find where the LastPass files referenced in the template reside so can't change %Local AppData% :-( All of which also serves to deepen the mystery as to where that pesky password box that started all this from came from in the first place, and why LP seems to now work ....

wraithdu:

Tue Oct 13, 2009 4:25 pm

That's really suspicious. You might want to make sure you don't have some infection (not to scare you or anything). But I am 100% sure Sandboxie does not have any sort of password panel / management / dialog of any sort, unless it was a Windows UAC prompt. Without seeing it I can't be sure.

thingumybob: Using LastPass (or other online password managers?)

Tue Oct 13, 2009 2:52 pm

I AM sure I saw a 'new' login panel, and ALMOST sure it was associated with Sandboxie somehow. However now I get nothing, just the LastPass invitation to register details or to complete the information, which is exactly how I like it! So, either I WAS totally wrong OR the template I installed has resolved the 'issue', whatever it might have been. So, sorry, right now I can't provide more concrete evidence of any prior interference from Sandboxie -- If it happens again I'll grab the screen and re-submit :-)

wraithdu:

Tue Oct 13, 2009 2:28 am

Still, Sandboxie *does not* have any kind of password panel, so I still have no idea what you are talking about. You'll need to provide a screenshot of this dialog so I can see what you mean.

thingumybob: Using LastPass (or other online password managers?)

Mon Oct 12, 2009 8:41 pm

Aaah, didn't do that bit - now I have - thanks. If you hear nothing more it has worked :-D

Guest10: Re: Using LastPass (or other online password managers?)

Mon Oct 12, 2009 8:26 pm

]]>Quoting thingumybob: ]]>I have now edited the configuration file to add the template from wraithdu and will see how that works. ]]>Don't overlook actually applying the template to the Sandbox Settings for the sandbox (choose the sandbox) > Sandbox Settings > Applications > Local > select the template and then Add, and OK. Just having the template in your configuration file is not enough.

thingumybob: Using LastPass (or other online password managers?)

Mon Oct 12, 2009 7:50 pm

@wraithdu Sorry, was a bit obscure! I use Firefox, latest version. "My need" refers to LastPass filling my username/password fields automatically (which it was doing and is now doing, even with Firefox under Sandboxie, for sites already in LP). What happened for Stumbleupon was that I hadn't yet registered the info in LP so had to log in manually (ie. without LP doing it for me). That was when the Sandboxie password panel popped up, i.e. before the "usual" LP reaction of offering to provide a password, etc. When I signed out Sandboxie then opened the panel about saving the password etc. That's what I prefer to avoid, any intervention at all from Sandboxie relating to password management and rather leaving it all to LP. I have now edited the configuration file to add the template from wraithdu and will see how that works. PS: As a side comment, before starting this thread I did a search in the 'Problems' forum using various keywords including LastPass but nothing showed.

wraithdu:

Mon Oct 12, 2009 7:31 pm

My templates don't do *quite* that. LastPass is first and foremost an online solution, so any changes are saved directly online. The local files are the encrypted cache files. LP downloads your encrypted data and icons and decrypts it locally. My templates allow for this saved cache data to be updated as well as the online data, so it doesn't have to be re-downloaded each time. They are not necessary for LP to work. [quote:c44a048d5c]Sandboxie intercepted my need offering its own login panel[/quote:c44a048d5c] I have no idea what this means. Sandboxie doesn't have a 'login panel' to interfere with LastPass. Can you be more specific or take screenshots? What browser are you using, IE or FF?

Guest10:

Mon Oct 12, 2009 6:03 pm

If LastPass already has information stored outside of the sandbox, then your browser can read that information and use it. The problem comes about whenever your browser tries to write information back to the LastPass files. Those writes become trapped in the sandbox. wraithdu's template consists of OpenFilePath lines that are designed to allow the sandboxed browser to write directly to the LastPass files outside of the sandbox. In order to help guide you through using one of these templates, it would help to know in advance if you want to limit the ability to access the LastPass files to a specific browser - like Firefox, IE, or Opera. Or the template can be revised to work with any program, so that any browser can use it. Also, since there are local templates for XP or Vista, which one would you be using?

thingumybob:

Mon Oct 12, 2009 5:27 pm

@Guest10 Thanks. Only thing is now I need to mod something in Sandboxie I haven't touched yet - oh well, I guess now is as good a time as any to learn a new skill :-) Just to save me a bit of time can you point me to where I change templates - thanks.

thingumybob:

Mon Oct 12, 2009 5:22 pm

OK, I just tried a couple of sites I knew to be already registered in LastPass and it worked perfectly, so it appears that LastPass works fine where a site is already registered in my LastPass account. The site I had the 'issue' with was a new one for me (Stumbleupon) so I had no information pre-registered on LastPass. That was when I got the Sandboxie password panel showing up. I have now registered on Stumbleupon and included the info in LastPass and it works fine. So, it seems that the 'intervention' only happens for new sites that haven't been already registered in LastPass. If I close the Sandboxie password panel and register 'normally' I get teh LastPass functionality. So, I guess the question now is can I switch off that default behavious of Sandboxie i.e. get direct access to LastPass finctionality. For completeness as requested following is the content of teh resource listing on Sandboxie. snipped. --tzuk

Guest10:

Mon Oct 12, 2009 5:14 pm

wraithdu offered a couple of local templates for LastPass. One for XP and one for Vista. This link should point right to his post: http://www.sandboxie.com/phpbb/viewtopic.php?t=5169&start=6 After checking it out, ask if you have questions. [Edit] Also state if you want the template to work with only one browser, or multiple browsers - like with Firefox and IE, etc.

Buster:

Mon Oct 12, 2009 4:59 pm

Open your browser, then open "Resource Access Monitor" in Sandboxie and finally visit a site which requires you to login and makes use of LastPass. Copy/paste resource access monitor results here.

thingumybob: Using LastPass (or other online password managers?)

Mon Oct 12, 2009 4:55 pm

I use LastPass to maintain my passwords across computers (OK, not everyone likes such an idea, I know!). I have just started using Sandboxie and when I wanted to login to a site it seemed that Sandboxie intercepted my need offering its own login panel, preventing my use of LastPass? Is this so/normal? How can I avoid such interference (I really do appreciate and want the functions that LastPass offers)?