Trust No Program
This topic is locked: you cannot edit posts or make replies.
Using LastPass (or other online password managers?)
thingumybob


Joined: 12 Oct 2009
Posts: 18
Reply with quote
I use LastPass to maintain my passwords across computers (OK, not everyone likes such an idea, I know!). I have just started using Sandboxie and when I wanted to login to a site it seemed that Sandboxie intercepted my need offering its own login panel, preventing my use of LastPass? Is this so/normal? How can I avoid such interference (I really do appreciate and want the functions that LastPass offers)?
View user's profileSend private message
Buster


Joined: 06 Aug 2007
Posts: 2184
Reply with quote
Open your browser, then open "Resource Access Monitor" in Sandboxie and finally visit a site which requires you to login and makes use of LastPass.

Copy/paste resource access monitor results here.
View user's profileSend private message
Guest10


Joined: 27 Apr 2008
Posts: 4340
Location: Ohio, USA
Reply with quote
wraithdu offered a couple of local templates for LastPass. One for XP and one for Vista.
This link should point right to his post:
http://www.sandboxie.com/phpbb/viewtopic.php?t=5169&start=6

After checking it out, ask if you have questions.
[Edit] Also state if you want the template to work with only one browser, or multiple browsers - like with Firefox and IE, etc.

_________________
Paul
XP Pro SP3 (Admin rights), Zone Alarm Pro Firewall, Malwarebytes Pro, Firefox 21, Thunderbird 17
View user's profileSend private message
thingumybob


Joined: 12 Oct 2009
Posts: 18
Reply with quote
OK, I just tried a couple of sites I knew to be already registered in LastPass and it worked perfectly, so it appears that LastPass works fine where a site is already registered in my LastPass account. The site I had the 'issue' with was a new one for me (Stumbleupon) so I had no information pre-registered on LastPass. That was when I got the Sandboxie password panel showing up. I have now registered on Stumbleupon and included the info in LastPass and it works fine. So, it seems that the 'intervention' only happens for new sites that haven't been already registered in LastPass. If I close the Sandboxie password panel and register 'normally' I get teh LastPass functionality. So, I guess the question now is can I switch off that default behavious of Sandboxie i.e. get direct access to LastPass finctionality.

For completeness as requested following is the content of teh resource listing on Sandboxie.

snipped. --tzuk
View user's profileSend private message
thingumybob


Joined: 12 Oct 2009
Posts: 18
Reply with quote
@Guest10
Thanks. Only thing is now I need to mod something in Sandboxie I haven't touched yet - oh well, I guess now is as good a time as any to learn a new skill Smile Just to save me a bit of time can you point me to where I change templates - thanks.
View user's profileSend private message
Guest10


Joined: 27 Apr 2008
Posts: 4340
Location: Ohio, USA
Reply with quote
If LastPass already has information stored outside of the sandbox, then your browser can read that information and use it.
The problem comes about whenever your browser tries to write information back to the LastPass files.
Those writes become trapped in the sandbox.

wraithdu's template consists of OpenFilePath lines that are designed to allow the sandboxed browser to write directly to the LastPass files outside of the sandbox.

In order to help guide you through using one of these templates, it would help to know in advance if you want to limit the ability to access the LastPass files to a specific browser - like Firefox, IE, or Opera.
Or the template can be revised to work with any program, so that any browser can use it.
Also, since there are local templates for XP or Vista, which one would you be using?
View user's profileSend private message
wraithdu


Joined: 29 Jun 2007
Posts: 1410
Reply with quote
My templates don't do *quite* that. LastPass is first and foremost an online solution, so any changes are saved directly online. The local files are the encrypted cache files. LP downloads your encrypted data and icons and decrypts it locally. My templates allow for this saved cache data to be updated as well as the online data, so it doesn't have to be re-downloaded each time. They are not necessary for LP to work.

Quote:
Sandboxie intercepted my need offering its own login panel

I have no idea what this means. Sandboxie doesn't have a 'login panel' to interfere with LastPass. Can you be more specific or take screenshots? What browser are you using, IE or FF?
View user's profileSend private message
Using LastPass (or other online password managers?)
thingumybob


Joined: 12 Oct 2009
Posts: 18
Reply with quote
@wraithdu
Sorry, was a bit obscure! I use Firefox, latest version. "My need" refers to LastPass filling my username/password fields automatically (which it was doing and is now doing, even with Firefox under Sandboxie, for sites already in LP). What happened for Stumbleupon was that I hadn't yet registered the info in LP so had to log in manually (ie. without LP doing it for me). That was when the Sandboxie password panel popped up, i.e. before the "usual" LP reaction of offering to provide a password, etc. When I signed out Sandboxie then opened the panel about saving the password etc. That's what I prefer to avoid, any intervention at all from Sandboxie relating to password management and rather leaving it all to LP.

I have now edited the configuration file to add the template from wraithdu and will see how that works.

PS: As a side comment, before starting this thread I did a search in the 'Problems' forum using various keywords including LastPass but nothing showed.
View user's profileSend private message
Re: Using LastPass (or other online password managers?)
Guest10


Joined: 27 Apr 2008
Posts: 4340
Location: Ohio, USA
Reply with quote
thingumybob wrote:
I have now edited the configuration file to add the template from wraithdu and will see how that works.
Don't overlook actually applying the template to the Sandbox Settings for the sandbox
(choose the sandbox) > Sandbox Settings > Applications > Local > select the template and then Add, and OK.
Just having the template in your configuration file is not enough.
View user's profileSend private message
Using LastPass (or other online password managers?)
thingumybob


Joined: 12 Oct 2009
Posts: 18
Reply with quote
Aaah, didn't do that bit - now I have - thanks. If you hear nothing more it has worked Very Happy
View user's profileSend private message
wraithdu


Joined: 29 Jun 2007
Posts: 1410
Reply with quote
Still, Sandboxie *does not* have any kind of password panel, so I still have no idea what you are talking about. You'll need to provide a screenshot of this dialog so I can see what you mean.
View user's profileSend private message
Using LastPass (or other online password managers?)
thingumybob


Joined: 12 Oct 2009
Posts: 18
Reply with quote
I AM sure I saw a 'new' login panel, and ALMOST sure it was associated with Sandboxie somehow. However now I get nothing, just the LastPass invitation to register details or to complete the information, which is exactly how I like it! So, either I WAS totally wrong OR the template I installed has resolved the 'issue', whatever it might have been. So, sorry, right now I can't provide more concrete evidence of any prior interference from Sandboxie -- If it happens again I'll grab the screen and re-submit Smile

_________________
Protecting myself - I hope - with the latest versions of Firefox, Sandboxie, PrevX, Threatfire, WinPatrol, ZoneAlarm (free) and AVG (free). Some days I think I am paranoid. Other days I know I am ...
View user's profileSend private message
wraithdu


Joined: 29 Jun 2007
Posts: 1410
Reply with quote
That's really suspicious. You might want to make sure you don't have some infection (not to scare you or anything). But I am 100% sure Sandboxie does not have any sort of password panel / management / dialog of any sort, unless it was a Windows UAC prompt. Without seeing it I can't be sure.
View user's profileSend private message
Using LastPass (error adding template)
thingumybob


Joined: 12 Oct 2009
Posts: 18
Reply with quote
[The following was re-posted here by the originator after it came up under another issue]

Guest10 wrote:
thingumybob wrote:
I have now updated some settings for Firefox and Thunderbird that I hope will fix a "SBIE1406 Missing or invalid expansion for Tmpl:Browser" message I was getting.
Sounds like you missed part of wraithdu's LastPass template settings:
Code:
[TemplateSettings]
Tmpl.Browser=firefox.exe
Maybe you didn't know what to do with the above?
BTW, that line assumes the use of Firefox. It would be different for a different browser.


Ooops - well spotted by you, not spotted by me ...

Yes I copy/pasted direct so have got a totally unpersonalized/basically useless version as follows ...

Tmpl.Title=LastPass (XP)
Tmpl.Class=Local
OpenFilePath=%Tmpl.Browser%,%Local AppData%\LastPass\*_lps.act.xml
OpenFilePath=%Tmpl.Browser%,%Local AppData%\LastPass\*_lppri.lps
OpenFilePath=%Tmpl.Browser%,%Local AppData%\LastPass\*_lp.act.lps
OpenFilePath=%Tmpl.Browser%,%Local AppData%\LastPass\*_icons3.lps

So that should be

OpenFilePath=firefox.exe,%Local AppData%\LastPass\*_lps.act.xml
OpenFilePath=firefox.exe,%Local AppData%\LastPass\*_lppri.lps
OpenFilePath=firefox.exe,%Local AppData%\LastPass\*_lp.act.lps
OpenFilePath=firefox.exe,%Local AppData%\LastPass\*_icons3.lps


My only issue now is I can't find where the LastPass files referenced in the template reside so can't change %Local AppData% Sad

All of which also serves to deepen the mystery as to where that pesky password box that started all this from came from in the first place, and why LP seems to now work ....
View user's profileSend private message
wraithdu


Joined: 29 Jun 2007
Posts: 1410
Reply with quote
No, no, no. In your Sandboxie.ini file you should have two sections as follows:

Quote:
[TemplateSettings]
Tmpl.Browser=firefox.exe

[Template_Local_LastPass_XP]
Tmpl.Title=LastPass (XP)
Tmpl.Class=Local
OpenFilePath=%Tmpl.Browser%,%Local AppData%\LastPass\*_lps.act.xml
OpenFilePath=%Tmpl.Browser%,%Local AppData%\LastPass\*_lppri.lps
OpenFilePath=%Tmpl.Browser%,%Local AppData%\LastPass\*_lp.act.lps
OpenFilePath=%Tmpl.Browser%,%Local AppData%\LastPass\*_icons3.lps


Then in Sandboxie Control make sure you've applied the template to your sandbox.
View user's profileSend private message
Using LastPass (or other online password managers?)
You cannot post new topics in this forum
You can reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
All times are GMT  
Page 1 of 2  

Use the RSS feed to watch this topic for replies
  
  
 This topic is locked: you cannot edit posts or make replies.  

Sandboxie is Copyright © 2004-2012 by Sandboxie Holdings LLC.  All rights reserved.
Sandboxie.com | Contact Author
This site has been viewed 207,851,007 times since June 2004