After multiple changes to a file on Surfer via WebDAV, further connections timeout with ETIMEDOUT

[d19dotca]

I've recently started using Enpass as a password manager, and am using it to sync on the Surfer app via WebDAV connection. It works most of the time but if I'm going through and making a bunch of changes to items (it syncs after every change pretty much, or ever record save rather), it eventually fails to sync with the WebDAV server and when I look at the logs on Surfer, it shows the following repeatedly during the issue:

Nov 20 17:08:52 LDAP error Error: connect ETIMEDOUT 172.18.0.1:3002
Nov 20 17:08:52 at TCPConnectWrap.afterConnect [as oncomplete] (net.js:1141:16) {
Nov 20 17:08:52 errno: 'ETIMEDOUT',
Nov 20 17:08:52 code: 'ETIMEDOUT',
Nov 20 17:08:52 syscall: 'connect',
Nov 20 17:08:52 address: '172.18.0.1',
Nov 20 17:08:52 port: 3002
Nov 20 17:08:52 }

Any ideas there? Is this perhaps caused by rate limiting perhaps or something weird like that that Enpass is maybe making too many calls for when I'm actively changing items in the Enpass app which writes to the file system via WebDAV in Surfer?

All I have to do is restart the Surfer app and everything works again after that, but it periodically comes back after I'm in there making a bunch of changes. (I imported a bunch of data so I'm busy trying to clean it up, so lots of saves going on)

[necrevistonnezr]

@d19dotca OT serious question: Why use the not properly audited Enpass with a custom web access via Surfer when the regularly audited Bitwarden with en par or better apps and a proper web frontend is available on Cloudron?
It’s a serious question- I used (and bought) Enpass before and liked it but Bitwarden seems more mature in every aspect.

[nebulon]

Regardless of the use-case that seems like a bug in surfer then. I have to see how I can reproduce this for debugging.

[marcusquinn]

@necrevistonnezr Fan of both Enpass & Bitwarden. Currently use Enpass for personal and the shortcut for the pop-up is super handy. Bitwarden for work. Hoping for the day that Bitwarden extension becomes multi-server. Both recommended for their respective strengths.

[d19dotca]

@necrevistonnezr Totally a great question and worthy of a discussion (but probably in a different thread entirely). So not to go too far off topic (let's try to keep this thread to the ETIMEDOUT issue), but since you asked... I've been using Bitwarden on and off for years now, but there are too many things that frustrate me with it and I prefer the overall user experience of Enpass.

• Tagging/tags is the biggest feature I utilize a lot in my workflows to stay organized and that's a feature Enpass has that Bitwarden doesn't. In fact it's one of the most requested features of Bitwarden based on their community feature requests section, but still a no-go after years of development. I'm sure they'll bring it someday, but it's too powerful a feature for me to be missing all together for likely a while longer.
• I still "own" my data as it resides on a server I trust (mine, lol), so I feel very similar in it's approach for Enpass as Bitwarden with the benefit that Enpass requires no real overhead as I'm not running a dedicated server for Enpass. Owning my data is the most important aspect to me - so that basically keeps me bouncing between Enpass and Bitwarden as those are about the only two where I have full control.
• Enpass is much faster on my phone, IMO, and the searching capabilities too are way beyond Bitwarden at this time. I find search infuriating in Bitwarden to be honest, not to mention they don't have consistency in search power between desktop and mobile apps. Enpass is way better when it comes to actually finding the records you need. I currently have over 600 records, so searching is important to me and it's bitten me too many times in Bitwarden.
• Smaller features like their Apple Watch app, a "One-time Passwords" view of all 2FA codes in one list, expansive templates functionality allowing me to have 100% control over the field names, ordering of fields, type of fields, whether to include passwords in the password audit or not, etc. This control over how the data is presented and used pleases my OCD.

That's just off the top of my head. I want to love Bitwarden - and I do love Bitwarden - it's just not quite "there" yet from a functionality perspective for what is important in my own workflow. I personally recommend Bitwarden a lot to friends and family, and even run my own instance of it for myself and others too.

My personal preference at the moment though is Enpass for myself. Been flipping between them for years, always trying to give Bitwarden a try and go all-in but can't quite stick there long enough yet, too many disadvantages for me still. Each has their own pros and cons though, there isn't really a right or wrong one to use, IMO. One day I suspect I'll go back all-in on Bitwarden, most likely once it gets tagging functionality as that is the most critical one for me.

[necrevistonnezr]

@d19dotca
Thanks, that was really interesting and helpful!

I never really used tagging and have no problem finding entries as I usually just need / search for the URL (and I have roughly 1.500 entries - lots of zombie sites accumulated over the years...). But it's interesting to see how Enpass has evolved and what else is out there.

[d19dotca]

@necrevistonnezr Oh wow that's a lot of entries! I'm surprised you haven't experienced any searching headaches, but that's good to hear.

Tip (you may already know of this one though): One thing I love tagging for is tagging all my records with what credit card I may have on file with them. This became invaluable a couple of years ago when I had my first "compromised" credit card which had an unexpected charge on it. My bank then replaced the card which of course gives me a new credit card number and expiry date, and it took me forever to go and replace my credit card on all the services I had it stored on and it ended up causing some trouble on one service where it basically didn't warn me and just axed my services right away when it couldn't charge the old card. So I started tagging them appropriately so that when the next occurrence happens I'll know exactly where I need to go update it on. And also I can occasionally comb through and be like "I haven't used this service in a while, may as well remove my credit card" and clean it up that way. I then expanded that for other data as well such as my email address on file including my work one so I know where to update if I changed employers for example, phone numbers on file, etc.

[marcusquinn]

@d19dotca Very interesting. Wish I'd known your foresight 10 years ago Definitely gonna start doing that.

[A Former User]

@d19dotca I need to be doing this... I changed my phone number and deleted an email recently thinking I moved everything over. Boy oh boy was I wrong...

[necrevistonnezr]

@d19dotca said in After multiple changes to a file on Surfer via WebDAV, further connections timeout with ETIMEDOUT:

Tip (you may already know of this one though): One thing I love tagging for is tagging all my records with what credit card I may have on file with them. This became invaluable a couple of years ago when I had my first "compromised" credit card which had an unexpected charge on it.

Great tip. I just never use my credit card directly, always through an intermediary (Apple Pay, Paypal, Klarna, etc.) - they were "invented" for that exact scenario. If a shop doesn't offer it, I don't use it.

[d19dotca]

@necrevistonnezr said in After multiple changes to a file on Surfer via WebDAV, further connections timeout with ETIMEDOUT:

If a shop doesn't offer it, I don't use it.

gasp you... you don't use... Netflix or Amazon Prime? haha

lol Yeah I hear ya, I use Apple Pay wherever I can, but being in Canada there's not a lot of Canadian business online that use Apple Pay yet. Thankfully many in-person payments can be done over Apple Pay though, but just not really online yet. I mostly am forced to use US-based companies for things like Netflix and Amazon Prime - neither of which accept Apple Pay or even PayPal in Canada at least. But hey, McDonald's just started taking Apple Pay through their app in Canada. So we're slowly getting there. hahaha

I'd love to see more businesses adopt those services though, it's way more secure and solves that problem of what happens when a credit card is compromised, and much more.

[necrevistonnezr]

@d19dotca said in After multiple changes to a file on Surfer via WebDAV, further connections timeout with ETIMEDOUT:

@necrevistonnezr said in After multiple changes to a file on Surfer via WebDAV, further connections timeout with ETIMEDOUT:

If a shop doesn't offer it, I don't use it.

gasp you... you don't use... Netflix or Amazon Prime? haha

I bought Netflix through the iOS App so it's just part of my iTunes subscription.

Indeed, Amazon is directly connected to my debit account (not credit card) and they have a direct debit mandate - an "acceptable risk" since (i) I hope Amazon knows their shit security wise and (ii) my bank (as any European bank) will not accept direct debits unless you have a properly authorized direct debit mandate - you are insured against fraudulent payments.

[nebulon]

I have fixed this WebDAV/LDAP issue now with the just release app package. Please let me know if there is still some problem or if it works now.