Lastpass with version 10.1.3.0

Hi mad,

Do you have something relevant in Help -> View application log?

Best regards,

HI Jean-François

Found something, hope this helps:

System.Security.Cryptography.CryptographicException: Padding is invalid and cannot be removed.
at System.Security.Cryptography.RijndaelManagedTransform.DecryptData(Byte[] inputBuffer, Int32 inputOffset, Int32 inputCount, Byte[]& outputBuffer, Int32 outputOffset, PaddingMode paddingMode, Boolean fLast)
at System.Security.Cryptography.RijndaelManagedTransform.TransformFinalBlock(Byte[] inputBuffer, Int32 inputOffset, Int32 inputCount)
at System.Security.Cryptography.CryptoStream.FlushFinalBlock()
at System.Security.Cryptography.CryptoStream.Dispose(Boolean disposing)
at System.IO.Stream.Close()
at System.IO.StreamReader.Dispose(Boolean disposing)
at System.IO.TextReader.Dispose()
at A.ce5cdbfab62bddca6d1f0705e37f16697.c0c5f6d8def7921f4d43601ad370a1c4b(Byte[] cf240bffc7f254380293920c78358f453, Byte[] c12a73028415c323b59f52d5eca03c3bd, CipherMode c17de7030565f43077466095dd50c1438, Byte[] cfc2303882919b4e87539c56808e7283a)
at A.ce5cdbfab62bddca6d1f0705e37f16697.c32d0718a0b51ac6bb61e344e7bcac0f8(Byte[] cf240bffc7f254380293920c78358f453, Byte[] c12a73028415c323b59f52d5eca03c3bd)
at A.ce5cdbfab62bddca6d1f0705e37f16697.cd82c1388540647ba3d6b76653e594455(Byte[] cf240bffc7f254380293920c78358f453, Byte[] c12a73028415c323b59f52d5eca03c3bd)
at A.ce5cdbfab62bddca6d1f0705e37f16697.c3a7b62c737cc4eef3f54d3a7686dbcd6.c2a5085bf4986bb4d73694df8a65c303f(BinaryReader cc0992f72cffa2d76c83ea61f45873e07)
at A.ce5cdbfab62bddca6d1f0705e37f16697.ca8eb2a2ccead37cee74ab9a325db2737[c4e3b7728c5a2d93941e03b3c83a4ed5d](Byte[] cbeffd487a7bbb9033a7b3abfb3d6f9f0, Func`2 c6cc9ab02b2ea9ccd42c7c0497677bcc2)
at A.ce5cdbfab62bddca6d1f0705e37f16697.cf24dfd8ebb24b5b67ba616e2c6ad8b1a(c47732d29f47abf4aafafb8b7b3283455 cd9c605ff86a71d78bffde4b0fdbaefd3, Byte[] c12a73028415c323b59f52d5eca03c3bd, SharedFolder ce94177f20b09281e05a26037df31f52b)
at LastPassManagement.Vault.c543d324ad17c7e45dddcfd51ae610bb3.c4fde28f558fdd6024fe809de4068cd69(BinaryReader cc0992f72cffa2d76c83ea61f45873e07)
at A.ce5cdbfab62bddca6d1f0705e37f16697.cb257d7eb936ac42fcf7b8927ced875be.c29074c630375c8e9cefa316fecabd820(BinaryReader cc0992f72cffa2d76c83ea61f45873e07)
at A.ce5cdbfab62bddca6d1f0705e37f16697.ca8eb2a2ccead37cee74ab9a325db2737[c4e3b7728c5a2d93941e03b3c83a4ed5d](Byte[] cbeffd487a7bbb9033a7b3abfb3d6f9f0, Func`2 c6cc9ab02b2ea9ccd42c7c0497677bcc2)
at A.ce5cdbfab62bddca6d1f0705e37f16697.ca8eb2a2ccead37cee74ab9a325db2737(Byte[] cbeffd487a7bbb9033a7b3abfb3d6f9f0, Action`1 c6cc9ab02b2ea9ccd42c7c0497677bcc2)
at LastPassManagement.Vault..ctor(Blob c172ca74f7d85eb1da8a95dfaf0a6cf51, Byte[] c12a73028415c323b59f52d5eca03c3bd)
at LastPassManagement.Vault.Create(Blob blob, String username, String password)
at LastPassManagement.Vault.Create(String username, String password, String mobilePortalUUID, TwoFactorAuthenticatorOptions multifactorOptions)
at Devolutions.RemoteDesktopManager.Managers.LastPassManager.cbdbd2fb55c1951358370c883621cef38(String c4c707ece3170514f8504b161d5b38c17, String ceb81d1ee93f91e0bc57f34876c263863)
at Devolutions.RemoteDesktopManager.Managers.LastPassManager.cf86d4a45b8080500f4f72fa4e5167a76(CredentialsConnection caaf45d46a41951024171ab0324bc974f)
at Devolutions.RemoteDesktopManager.Managers.LastPassManager.cbdbd2fb55c1951358370c883621cef38(CredentialsConnection caaf45d46a41951024171ab0324bc974f)
at Devolutions.RemoteDesktopManager.Managers.LastPassManager.Init(CredentialsConnection credentialsConnection)
at Devolutions.RemoteDesktopManager.Business.LastPassCredentialResolverConnectionTypeDescriptor.BrowseDynamicValue(Connection connection, Connection credentials, String credentialDynamicValue, String credentialDynamicDescription)
at Devolutions.RemoteDesktopManager.Managers.CredentialTypeManager.BrowseDynamicValue(Connection connection, Connection credential, String credentialDynamicValue, String credentialDynamicDescription)
at Devolutions.RemoteDesktopManager.Forms.FrmConnectionBase.BrowseCredentialDynamicParameter()
at Devolutions.RemoteDesktopManager.Forms.FrmConnection.cf916cde3c36faa6c47f5a

AND

LastPassManagement.LoginException: WebException occured ---> System.Net.WebException: The remote server returned an error: (403) Forbidden.
at System.Net.WebClient.UploadValues(Uri address, String method, NameValueCollection data)
at System.Net.WebClient.UploadValues(String address, NameValueCollection data)
at A.c742d87b017db352032a6b32ad8eade85.c3efb8c5142ba4f73e73630d7a8c1d884(String c8010101d2efded353a8dda8a963b6b97, NameValueCollection c8010101d2efded353a8dda8a963b6b97)
at A.c74510d628c19d42fdbeff3a4a39148de.c5243a46e7a2f5b24d5d355f987bdcc9d(String c4c707ece3170514f8504b161d5b38c17, String ceb81d1ee93f91e0bc57f34876c263863, String c7ee38a24ff954f83727d722ef2f25250, TwoFactorAuthenticatorOptions c03acf4e76c521e26389f96399e39b03e, Int32 cf4e2fab350ed67cf2b76efbc09a9e022, IWebClient ccd406ff848636051dd9c61d6082fa5d8)
--- End of inner exception stack trace ---
at A.c74510d628c19d42fdbeff3a4a39148de.c5243a46e7a2f5b24d5d355f987bdcc9d(String c4c707ece3170514f8504b161d5b38c17, String ceb81d1ee93f91e0bc57f34876c263863, String c7ee38a24ff954f83727d722ef2f25250, TwoFactorAuthenticatorOptions c03acf4e76c521e26389f96399e39b03e, Int32 cf4e2fab350ed67cf2b76efbc09a9e022, IWebClient ccd406ff848636051dd9c61d6082fa5d8)
at A.c74510d628c19d42fdbeff3a4a39148de.c5243a46e7a2f5b24d5d355f987bdcc9d(String c4c707ece3170514f8504b161d5b38c17, String ceb81d1ee93f91e0bc57f34876c263863, String c7ee38a24ff954f83727d722ef2f25250, TwoFactorAuthenticatorOptions c03acf4e76c521e26389f96399e39b03e, IWebClient ccd406ff848636051dd9c61d6082fa5d8)
at A.c74510d628c19d42fdbeff3a4a39148de.c5243a46e7a2f5b24d5d355f987bdcc9d(String c4c707ece3170514f8504b161d5b38c17, String ceb81d1ee93f91e0bc57f34876c263863, String c7ee38a24ff954f83727d722ef2f25250, TwoFactorAuthenticatorOptions c03acf4e76c521e26389f96399e39b03e)
at LastPassManagement.Vault.Download(String username, String password, String mobilePortalUUID, TwoFactorAuthenticatorOptions multifactorOptions)
at LastPassManagement.Vault.Create(String username, String password, String mobilePortalUUID, TwoFactorAuthenticatorOptions multifactorOptions)
at Devolutions.RemoteDesktopManager.Managers.LastPassManager.cbdbd2fb55c1951358370c883621cef38(String c4c707ece3170514f8504b161d5b38c17, String ceb81d1ee93f91e0bc57f34876c263863)
at Devolutions.RemoteDesktopManager.Managers.LastPassManager.cf86d4a45b8080500f4f72fa4e5167a76(CredentialsConnection caaf45d46a41951024171ab0324bc974f)
at Devolutions.RemoteDesktopManager.Managers.LastPassManager.cbdbd2fb55c1951358370c883621cef38(CredentialsConnection caaf45d46a41951024171ab0324bc974f)

Best regards.
Patrick

Just to let you know, we can't use RDM at the moment (team of 9) as all our credentials are in Lastpass, so it's completly secure.. so we had to switch back to our old remote software until this is solved. So hope you find the problem fast, thank you very much in advance.

Greetings
Patrick

Hello,

We've been working on the padding invalid error, but the http 403 error is a first.

Private message me if you're willing to go through a diagnostics process to help identify the issue.

Thank you in advance

hmmm, I just thought of something

Maybe the authorization code for mobile devices has been reset.

When you go in your lastpass settings, the mobile devices tab. Is there a UUID that shows as not being permitted?

Mad has been kind enough to go through a lot of diagnostics steps with me.

I have confirmed that the chunks of data from LastPass are downloaded successfully, yet a WebException is triggered at the end of the download.

I will have to add instrumentation code in order the help identify the root cause.

Our LastPass Enterprise accounts work fine though, and we have many shared folders with a significant number of entries.

Thank you Maurice. If there anything else i can do, just let me know. I can also try out a new build etc.
It's also working when I take my private lastpass account, just not with our company enterprise account.

I also checked all the policies in lastpass, but could not find any which should block access.

All the best.
Patrick

Hello Maurice

Is there any way we can fix this soon? We can't use RDM anymore until we have our passwords via Lastpass back :-(

Best regards.
Patrick

The diagnostics code is in the repo, we are waiting on a build to be published.

At that time, it would be helpful if you could try it out.

I am anxious too ;)

Hi Patrick,

Could you try RDM 10.1.5.

You can download it here: http://remotedesktopmanager.com/Home/Download

Best regards,

Hello,

I've tried RDM 10.1.5 but it still doesn't work. I've got the following error message and application log:





Best regards,
Patrick

just to manage expectations, we hadn't implemented a fix, just more diagnostics information. Hopefully this will allow us to identify the issue.

Can you follow the In-Depth debugging process described at the bottom of http://help.remotedesktopmanager.com/troubleshooting_debugging.htm

Please set the debug level to 1

Thank you,

just sent you all the files. Did you get them?

Best regards
Patrick

yessir, we'll need to send that along to the developer of the third-party library though, it seems to be related to the lastpass content more than the web communication

Hi Maurice

Any news yet? We can't use RDM since two weeks and we really hope for a solution this week.

Best regards
Patrick

Hello,

This needs to be fixed by the provider of our third-party library. We cannot say when it will be fixed.

Sorry about the delay.

Note that by looking in the LastPass CLI, we've seen that they in fact ignore some decryption errors and just skip the faulty data block, therefore just hiding some data. It will probably have to be a method that we'll follow as well.

Hi Maurice

Ok, I hope they will fix this soon, if we can help in any way to speed this up, we are here.

So you are saying there are some decryption error at the moment, which create the problem?

What do you mean by: " It will probably have to be a method that we'll follow as well." You mean so you will change the way of accessing lastpass instead via a thirdparty app, directly via the CLI?

Best regards.
Patrick

yes, the invalid padding error is caused by that.

we cannot use the code found in the LastPass CLI because its not adapted to Windows. We would need too many dependencies installed. We will implement the same constructs though.

We were just surprised that they themselves ran in to decryption issues.
edited by mcote on 1/28/2015

Could you send an email to Maurice mcote@devolutions.net

He is our expert with the LastPass integration. You could also install RDM 10.1.7 to be sure that you have the latest version

http://remotedesktopmanager.com/Home/Download

HI David

I already sent him an email and he is waiting for the external company. I also tried it with RDM 10.1.7 still the same problem.

We can't use RDM since 3 weeks and hope for a fix.

Best regards.
Patrick

Hello Maurice

Any news from the third party? We are without RDM for 4 weeks now.. hope you can get a fix soon.

Best regards.
Patrick

No fix in view yet. We do not have full control over his schedule.

Hopefully it will be fixed soon.

Could you try to create another lastpass account with only one entry and try to use it?

I will make sure to push the priority.

I tried it with my private lastpass account and it worked. But Maurice could verify in the logs, that our account is OK. We also can use it everywhere else without problems. I even opend a ticket with lastpass and they checked it also.

Thanks for pushing the priority. Whatever I can do to help, I'm here.