zdia / gorilla Goto Github PK

Actually, this is for puppeee 5.04, an offshoot of Puppy, where adding software is a bit of a trick for programs not in their repositories.

I'm using gorilla1533.bin with a .psafe3 file created by Password Safe under Windows XP. Neither CTRL/A nor the Add Login menu item do anything.

I have the Tcl/TK version of Gorilla running properly under Ubuntu.

I tried to find an option to hide logins from the main window, so I wonder if that would be a good feature to suggest?

Some sites (like banks') use cryptic login IDs to improve security. My band gives ID which is 12 digit numeric number and password is simply a PIN of 4-8 chars. This makes login important to hide from accidental observers too.

Thanks,
Alex

Version : MacOSX (v1.5.3.1)
OS Tested: 10.6.4

When tried to open using keyboard shortcuts application hangs. Tried to edit an entry using Command-E and the application hangs each and every time.

Works fine if you right click and select the edit option.

When I doubleclick on "Notes" field, I receive the following error:

bad text index "tk::anchor.nmLoginDialog0.e-notes - 1c"
bad text index "tk::anchor.nmLoginDialog0.e-notes - 1c"
    while executing
"$w compare $cur < $first"
    (procedure "tk::TextSelectTo" line 33)
    invoked from within
"tk::TextSelectTo .nmLoginDialog0.e-notes 210 25"
    (command bound to event)

Happens at all times - when Notes contains text or empty (i.e. when adding new login or editing an existing one).

(Windows 7 Ent, x64)

gorilla1534-universal

Same error as in issue #32, which was closed without resolution due to lack of submitter response.

Here's the auto_path from OS X 10.4.11 with XCode installed:
/System/Library/Frameworks/Tcl.framework/Versions/8.4/Resources/Scripts /System/Library/Frameworks/Tcl.framework/Versions/8.4/Resources /usr/lib ~/Library/Tcl /Library/Tcl /System/Library/Tcl ~/Library/Frameworks /Library/Frameworks /System/Library/Frameworks

Here's partial results of 'locate itcl':
/System/Library/Tcl/itcl3.3
/System/Library/Tcl/itcl3.3/itcl.tcl
/System/Library/Tcl/itcl3.3/libitcl3.3.dylib
/System/Library/Tcl/itcl3.3/pkgIndex.tcl
/System/Library/Tcl/iwidgets4.0.2/scripts/colors.itcl
/System/Library/Tcl/iwidgets4.0.2/scripts/roman.itcl
/System/Library/Tcl/iwidgets4.0.2/scripts/scopedobject.itcl
/opt/local/var/macports/sources/rsync.macports.org/release/ports/lang/itcl
/opt/local/var/macports/sources/rsync.macports.org/release/ports/lang/itcl/Portfile
/usr/lib/itclConfig.sh

In v1.4, when you click on the "OK" button in the Edit Login dialog, a "login changed" event wasn't triggered unless the entry had actually been modified. Perhaps this was a deliberate code change, but in case this is a regression, I thought I should mention it.

Reproducible? Always.

Platform: Linux (x64)
Version: 1535 (from git) with tcl-8.5.9
Distribution: Fedora 14 (tcl-8.5.9-2.fc14.x86_64)

1. Right-click on login entry, choose "Edit Login"
2. Click "OK" button.
3. A message is printed at the bottom of the main window "Login changed" and the database is saved if
   "Auto-save" is enabled for database.

Expected behavior: gorilla knows when text fields are changed and does not generate a "Login changed" event unless data is actually modified.

If changes are made to the database, but not manually saved to disk, the changes are lost when the system receives a reboot. To recreate this scenario:

1. Add a login to the database, but don't manually save it.
2. Allow the database to lock by idling out.
3. Reboot the system while password-gorilla is running but the database is locked.

The new login will not be present the next time the database is opened. This is unavoidable because the database is locked; however, it would probably be better if uncommitted changes were somehow preserved before the database is locked, perhaps in a special backup copy to prevent forcing changes to the original database.

The behavior of an open database with uncommitted changes during a reboot is undefined. I'm unsure whether it would save or discard the changes when the database is unlocked, but they are definitely lost when the database is locked.

Dear,

First of all, thanks for everything, I really depend on your work, I make use of gorilla every day.

Running on linux gentoo, using gorilla1.5.3.1.bin

when trying to move a login from one subgroup to another, I get the following error just after clicking on "move login..." menu entry:

unknown option "-expand"
unknown option "-expand"
while executing
"ttk::entry $top.source.e -width 40 -textvariable ::gorilla::MoveDialogSource -expand 1"
(procedure "gorilla::MoveDialog" line 18)
invoked from within
"gorilla::MoveDialog Login"
(procedure "gorilla::MoveLogin" line 2)
invoked from within
"gorilla::MoveLogin"
invoked from within
".#mbar.#mbar#login invoke active"
("uplevel" body line 1)
invoked from within
"uplevel #0 [list $w invoke active]"
(procedure "tk::MenuInvoke" line 50)
invoked from within
"tk::MenuInvoke .#mbar.#mbar#login 1"
(command bound to event)

Then the "move login" dialog appears empty...

If you need more information on my environment, feel free to ask!

Cheers

I'm trying to use the latest version with xmonad and its managehooks, which look at window properties such as WM_NAME and WM_CLASS. Unfortunately, these are not named very well, and some of them change after the window is created. For example, when the "database locked" window appears after a database has been open, a new window is created, and then that window picks up the new name "Password Gorilla". Its WM_CLASS info is "lockedDialog, Toplevel" as well, which is pretty useless.

Code in gorilla-1.5.2.8 (commit 6f5b3f0) dont show menu entries "Preferences ..." and "Exit" on non-Mac. Trivial patch needed.

In v1.5.3.4-76-g08a7164 on the pre-release branch, if you try to copy the username to the clipboard, it actually copies the password instead. If you watch the status bar very carefully, it appears that it copies the username, and then immediately copies the password too, overwriting the username on the clipboard with the password.

Sources lacks Makefile that compile and install shared libraries.

Just noticed today (because this is the first time I left it open long enough to notice) that if one has the detailed merge report window open when the gorilla auto-lock timer expires, that gorilla forgets to unmap the detailed merge report window from the screen (this is with the 1.42 starkit).

Other windows (such as the edit pw entry window) will be unmapped upon auto-lock timer expiration. The merge report window probably should be unmapped as well, because while it does not display much critical data (no pw's etc.) it does display some data (login ids) that might be of use to someone.

Move login (item) is missing in contextual (right clic) menu, please add it.

... and please add a "browse items" tree view in it (in menu and context menu)

Many thanks, PG is great!!!

Please forgive me if I should not have entered this here.

Can the application be modified remember its window positions? (even after shutdown)

Thank you for this great program. I do us it and tell others about it.

(1)When I open the window it always takes center screen. If I move it to location X:Y and use it, next it will lock and open a database locked window back to center screen (and stealing focus) interrupting what I am doing. If/when I log back into database it opens the window back to center screen (and stealing focus). I wish it would forget about "center screen" and just remember where it last was positioned and open there.

(2)When timer runs out and the database locks it interrupts what the user is doing by opening window in Center Screen and stealing focus. Would be nice if it would simply lock down in the task bar. And not interrupt current user application.

[user@Workstation82] ~> uname -a
FreeBSD Workstation82 8.2-RELEASE FreeBSD 8.2-RELEASE #7: Wed Feb 16 12:19:08 PST 2011 [email protected]:/usr/obj/usr/local_storage/pcbsd-build82/fbsd-source/8.2/sys/PCBSD i386

This is a show-stopper: though it says that it is putting passwords into the clipboard when I double-click, it doesn't.
Luckily, I can still cut and paste out of the "Edit Login" window.

I have a new failure with Gorilla on the pre-release version of Ubuntu (11.04, "Natty"). When I launch Gorilla from the command-line, the whole screen flashes, then returns to the terminal window, where it appears that Gorilla is running, i.e. it holds on the gorilla process, doesn't return to the terminal prompt, and searching 'ps auxww' for gorilla shows a running process:

allison 2201 2.1 1.0 24460 10156 pts/0 Sl+ 13:32 0:01 ./gorilla1534.bin

But, the Gorilla window doesn't appear anywhere. I can terminate the Gorilla process with Ctrl-C, but never can get the window to appear. I am able to consistently repeat this issue on the latest standalone Linux version 1.5.3.4 (gorilla1534.bin), with both Ubuntu Unity and Ubuntu Classic.

This could be a problem with the version upgrade in Ubuntu Natty from tcl 8.4.16 to tcl 8.5.9. However, Gorilla says that it supports 8.5, so this shouldn't be the cause.

The problem seems to be display-related, rather than the core code, because running:

$ gorilla --help

Does properly print out the help information in the terminal window and exit.

Using the 1.5.3 starkit, if one opens preferences and changes the font size to 16, the font sizes grow, but the line height of each line in the tree of login id's (the main GUI) does not appear to change, resulting in the bottom edges of the lines of text in the tree being cut off

First, I kinda don't see why this is there. Even at the maximum value, it still takes a more or less imperceptible time to open a file on my laptop, and the hashes are sha256, which is intended for speed anyway.

But worse than that, it doesn't seem to check when setting >65565 iterations, so you can save a database that gorilla won't open.

S/W: v1.5.4
OS: v10.6.3

The menu to the right of the "Edit" menu, now called "Record" is labelled "Datensatz" on an English version of the software.

email notification

15351 crashes whenever I try to save a new password file in the users "Documents" folder. The user is a standard user. I reverted to 1534 and all was good.

S/W: v1.5.4
OS: v10.6.3

All preferences from the previous release versions are lost and returned to defaults in this version.

After downloading 1.5.3, Password Gorilla failed to launch.

I have running an older version of Gorilla, not sure which one exactly
(the one that crashes when going to the help item)

I have Mac OS X 10.5.8

This is from the error report:
Exception Type: EXC_BREAKPOINT (SIGTRAP)
Exception Codes: 0x0000000000000002, 0x0000000000000000
Crashed Thread: 0

Dyld Error Message:
Library not loaded: @executable_path/../Frameworks/Tk.framework/Versions/8.5/Tk
Referenced from: /Users/macnimrod/Desktop/Password Gorilla.app/Contents/MacOS/PWgorilla
Reason: no suitable image found. Did find:
/Users/macnimrod/Desktop/Password Gorilla.app/Contents/MacOS/../Frameworks/Tk.framework/Versions/8.5/Tk: unknown required load command 0x80000022
/Users/macnimrod/Desktop/Password Gorilla.app/Contents/MacOS/../Frameworks/Tk.framework/Versions/8.5/Tk: unknown required load command 0x80000022

I downloaded the "Executable Starkit" for Linux (Fedora 15 64-bit) and when I ran the "gorilla1535.bin" I got this:

This application requires Tk 8.5, which does not seem to be available.
couldn't load file "/tmp/tclYO4HoG": libXss.so.1: cannot open shared object file: No such file or directory

I got the same thing for the "gorilla1534.bin" file. I have an older "gorilla1533.bin" that I downloaded from the older site and that works fine. The old file is also about 400kB bigger than the two new ones.

I tried running from source, but it crashes when it times out and tries to lock itself. To run it, I had to install "tk" and "itcl", so when running the above binaries, which are supposed to include Tk 8.5, I already have Tk 8.5 installed and they still don't work.

Any ideas?

OS: Kubuntu Lucid

New user, spent a fair amount of time entering data. Got sidetracked on something and Gorilla timed out and went to 'enter password' dialog. Not exactly sure what happened next, but I got an error dialog that popped up saying something like "grab is being used by another program." I think I clicked 'OK'. At that point I entered my password into the password dialog, and hit the 'OK' button. The button animates and depresses on the dialog box, but nothing happens. Also tried the 'CANCEL' button, no response. Had to kill the program.

Lost a fair amount of data/time. Not happy.

Other programs running at the time were Konsole, Firefox, and Thunderbird.

The pop-up alert that appears when attempting to open a PW database that is not found contains a misspelling.

The current language is: "The password database "---name of file" does not exists or can not be read."

The misspelling is that "exists" should be "exist" (note no "s").

the latest Mac package (gorilla1534-universal.zip) gives me a "access denied" message when trying to download. can you fix?

Thanks!

• e

Hello,

could you please modify checks in gorilla.tcl so it takes itcl* and tcllib from system rather then from gorilla's source? it would make packagers more happy not to patch the script or not to have double copies of this itcl/tcllib code.

It should work even I would remove itcl* and tcllib subdir in gorilla's source.

Thank you.

jirib

S/W: v1.5b4
OS: v10.6.3

If, when browsing, a person selects a database file without a suffix, the browser incorrectly appends one (.psafe3), causing a "File not found" error. It should just attempt to open the indicated file, as occurs if one manually types in the full path in the text box for "Database:".

I hate the stupid "comment and close" button. I would like #39 to be re-opened, please.

email notificatio

If I move Password Gorilla to a non-main monitor, right click on nodes stops working. I am getting error messages like this one (if expand to details):

expected integer but got "--2393"
expected integer but got "--2393"
    (reading increment)
    invoked from within
"incr xpos -$rootx"
    (procedure "gorilla::GetSelectedNode" line 8)
    invoked from within
"gorilla::GetSelectedNode"
    invoked from within
"gorilla::TreeNodePopup [gorilla::GetSelectedNode]"
    (command bound to event)

Number remains the same if I click different nodes, but changes if I move window to another monitor, or move it to main monitor and then back to a secondary monitor.

(Windows 7 Ent x64)

Encountering my previous misspelling on the "not found" alert also reminded me of a pet-peeve regarding the open pw database dialog that I never got around to fixing after I discovered I could pass db files in as command line parameters to open them.

The file selector dropdown (the "LRU" list of previously used files) does not check for presence of each file before populating the list. If an entry in the LRU no longer exists on disk, adding the entry to the LRU pulldown is somewhat useless as there is no file to open by that name.

My suggestion is to include a "if { [ file exists $filename ] } { add_to_lru_list } in the loop that loads the LRU list instead of simply loading what was stored in the preferences file blindly.

Now, you may ask how entries end up in the LRU list but no longer exist on disk. That one is easy. Two machines, say a desktop and a laptop. Copy desktop .psafe3 file to laptop to perform a merge. When the merge is done, the laptop's prefs file will contain an entry for the file copied from the desktop. But to prevent opening/using the wrong file, I like to delete those "other machine" files locally (delete the desktop .psafe3 from the laptop) after the merge is complete. So I end up with LRU entries without corresponding disk files on disk.

Lines 590 and 591 in gorilla.tcl should be changed from the current
set relx [incr xpos -$rootx]
set rely [incr ypos -$rooty]
to the better:
set relx [expr {$xpos - $rootx}]
set rely [expr {$ypos - $rooty}]

Yes. I know this doesn't update xpos/ypos, but they're not used in the next (last) line of the function. So I assume relx/rely can also be replaced by xpos/ypos.

Anyway, the reason this change is needed, is that... rootx/rooty can be negative(!). This happens on my multi-monitor setup, where the primary screen (containing the 0,0) is not the leftmost: moving the Gorilla window to the left screen, any popup produces the error "expected integer but got --745" (-745 is $rootx in my case). Current incr-based implementation of the calculation can not deal with this -- and neither would "incr -($rootx)". So expr is the way to go...

An attempt to lock the database (or whenever the autolock runs) causes the following error:

window name "right" already exists in parent
    while executing
"ttk::frame $top.right -padding {10 10}"
    (procedure "LockDatabase" line 81)
    invoked from within
"LockDatabase"
    (procedure "::gorilla::IdleTimeout" line 2)
    invoked from within
"::gorilla::IdleTimeout"
    ("after" script)

This is on Password Gorilla 1.5.3.5 under Linux x86_64.

Fully tested Russian translation can be found here: http://git.altlinux.org/people/evg/packages/?p=gorilla.git;a=blob_plain;f=sources/msgs/ru.msg;hb=HEAD (branch master, file ru.msg).

It would be nice to have preference to disable all console output.

When I try to run gorrila.tcl on ubuntu 10.04 it quites with the following message:

This application requires Tk 8.5, which does not seem to be available. You are working with 8.5.8
can't find package Tk 8.5

I have tk 8.4.16.2 installed (the default ubuntu tk)

1. It reports the wrong version number (1.5.3.2)
2. If opened while the db is locked, it can't be selected or closed. To close it, you seem to have to unlock the db first.

Data files are protected by user with read only attribute to protect against accidental/inadvertent change to files. Opening and editing and closing causes a file to be created with the same name and now unprotected, ignoring the intent and purpose of read only file attributes.

I just downloaded the universal package from:
http://zdia.de/packages/gorilla/

When I run it, an error windows pops-up with the following error-message:
"The Password Gorilla requires the [incr Tcl] add-on to Tcl. Please install [incr Tcl] package."

I'm running Mac OS X version 10.5.8, and I have no clue whatsoever about [incr Tcl].
Should I install it or?

New Windows version 1.50 doesn't read network files, neither on UNC paths nor on mapped network drive. Error "The password database ... does not exists or can not be read."

Additional minor annoyance: The icon of the windows executable doesn't show the Gorilla logo but a Tk logo.

In the preferences -> defaults tab, the descriptive text regarding these settings and new databases states "go to db prefs" in the "manage" menu.

But with the 1.5.3 starkit, the "manage" menu is now "security" and "db prefs" is now "customize".

S/W: v1.5.4
OS: v10.6.3

Drag and drop support for moving logins and groups has been lost in this version.

Something is not set right for resizing of the edit password dialog. Resizing the dialog results in the position of the internal widgets getting messed up. If the dialog is "packed" it looks like some missing -anchor's, -expand's and -fill's. If the dialog is "gridded" it looks like a lack of -sticky's and/or proper -weight's on rows/columns for the appropriate internal widgets.

Overwriting a read only file and then re-protecting it doesn't do the correct thing. Changing the file when it is write-protected is a violation of file permissions. I don't want some files to be changed, accidentally or otherwise. Password Safe forces me to do a Save As to keep the changes in another file, or gives me the opportunity to abort.

In testing the "autolock hides merge report window" I did a "self merge" (merged the same file I opened with linux 1.5.3.1 starkit). Then I left the merge window open to verify that the auto-lock timer also unmapped the merge report window. It did, so that bug is fixed.

Next I unlocked, dismissed the merge report window (it did reappear), and upon choosing file->exit and answering "no - don't save" (nothing had really changed) I was greeted with a tk error: "Error: bad window path name ".mergeReport".

The details info was:

 bad window path name ".mergeReport"
 bad window path name ".mergeReport"
     while executing
 "wm geometry $top"
     (procedure "SavePreferencesToRCFile" line 67)
     invoked from within
 "SavePreferencesToRCFile"
     (procedure "SavePreferences" line 5)
     invoked from within
 "SavePreferences"
     (procedure "gorilla::Exit" line 49)
     invoked from within
 "gorilla::Exit"
     invoked from within
 ".#mbar.#mbar#file invoke active"
     ("uplevel" body line 1)
     invoked from within
 "uplevel #0 [list $w invoke active]"
     (procedure "tk::MenuInvoke" line 50)
     invoked from within
 "tk::MenuInvoke .#mbar.#mbar#file 1"
     (command bound to event)

Password-gorilla currently requires a title for each entry. In many cases, this is redundant to the username or URL fields. This isn't really a bug so much as a user-interface issue. I find myself cutting and pasting other fields into the title field all the time, because of this requirement.

Is it possible for password-gorilla to use an auto-incremented index field to build the tree, rather than the $title? If not, there should probably be a widget next to the username and URL fields allowing the user to sync that field with $title.

There are no instructions on how to install from a source checkout. Being able to install gorilla would be make things a lot easier than needing to cd to a checkout directory all the time. The .run file doesn't work for me with library issues, but the source checkout does.