macOS Messages.app keychain integration is broken

Originator:neilalexanderr
Number:rdar://36903714 Date Originated:26/01/2018
Status:Open Resolved:
Product:Other Product Version:
Classification:Serious Bug Reproducible:Always
 
Summary:
- Messages.app on macOS does not store and retrieve stored passwords for Jabber/XMPP accounts properly in the Keychain.
- When creating a Jabber/XMPP account in Messages.app, a Keychain entry is incorrectly created for "a@b.com@b.com" instead of "a@b.com". Manually correcting this to "a@b.com" in the Keychain does not fix the issue either.
- When Messages.app connects to the Jabber/XMPP server, the user is prompted for their account password every time, regardless of whether the password was remembered or stored in the keychain.

Steps to Reproduce:
- Install macOS Server and enable Messages.
- Either log into macOS Server in Internet Accounts, enabling the Messages feature, or manually create a Jabber/XMPP account.
- Set status to Online. The user will be prompted for their password. Check the box to remember password.
- The next time you set status to Online, i.e. after closing Messages.app or restarting the system, the user is incorrectly prompted for the password again and the Keychain entry is ignored.

Expected Results:
- The user should not be prompted for the saved Jabber/XMPP password when setting their status to Online.

Actual Results:
- The password is stored in the Keychain against the wrong username.
- The user is incorrectly prompted for their password every time they set their status to Online, even if the password supplied when configuring the account or remembering the password is correct.

Version/Build:
macOS High Sierra 10.13.2.

Configuration:
macOS Server running Messages on macOS High Sierra 10.13.2, with other macOS Messages.app clients also running macOS High Sierra 10.13.2.

Comments


Please note: Reports posted here will not necessarily be seen by Apple. All problems should be submitted at bugreport.apple.com before they are posted here. Please only post information for Radars that you have filed yourself, and please do not include Apple confidential information in your posts. Thank you!