Lighthouse has a new layout. Prefer the old one? Return to the old layout, and switch back any time from the link at the top of each page.

Re-write command line tools to support auth w/o properties file.

#247

Hello,

Tools like RD-Jobs currently use a clear-text password stored on the local file system to authenticate the user. We have written a python script that uses an encrypted storage space to decrypt and send to the API via https.

If you could write the command line tools to use the new API in 1.2, and provide another optional means of getting the password (like from stdin, or a script to execute), then I believe that will satisfy the security requirements of most companies.

Another, less important feature, would be to implement a Console.readPassword() call with a java command line tool, since it uses "secure" memory to store the char[] array.

I'm sure you have better ideas than I do, but the general idea is secure password storage and using the 1.2 API.

Thanks,

Aaron Meier, RightNow Technologies

Reported by aaron.meier · March 23rd, 2011 @ 08:41 AM

State: new
Milestone: none
Assigned to: Alex-SF Alex-SF

Activity

  1. Alex-SF
    Alex-SF
    • Assigned user set to Alex-SF

    March 23rd, 2011 @ 08:42 AM

  2. Deleted User
    Deleted User

    To clarify, you're speaking of the password stored in framework.properties correct?

    March 23rd, 2011 @ 08:47 AM

  3. aaron.meier
    aaron.meier

    Yes I am, sorry for the confusion.

    March 23rd, 2011 @ 08:50 AM

  4. Alex-SF
    Alex-SF
    • Tag set to cli, credentials, enhancement, user

    July 9th, 2011 @ 02:01 PM

Please Sign in or create a free account to add a new ticket.

With your very own profile, you can contribute to projects, track your activity, watch tickets, receive and update tickets through your email and much more.