RTC-SCM-CLI: lscm login command accepts wrong password (if the user is already logged in)
Karthikeyan Baskaran (45●8●13)
| asked Oct 10 '13, 8:33 a.m.
retagged Oct 12 '13, 12:54 p.m. by Ralph Earle (257●3●9)
1) When lscm.bat is called via command prompt, with the below login command:
it asks for the user password like:lscm login -r <server> -u <user> When I type the wrong password and press enter, I get the feedback as:Password (<user> @ <server>): 2) Then, I continued executing lscm.bat with the below "create workspace" commandLogged in to <server> it now asks for the user password again like:lscm create workspace -e -r <server> <workspace_name> (I think, the password is asked again, because I provided wrong password during step-1)Password (<user> @ <server>): 3) I still provided wrong password and pressed enter. The feedback is: To my surprise, when I checked in the web client, this workspace is actually created from the same user of step-1Workspace (1051) "<workspace_name>" successfully created What's going on here ? Is it using any of my previous successful login credentials internally ? if yes, how can I clear that cache ? Thanks for your help in advance. |
Accepted answer
Ralph Schoon (61.1k●3●36●43)
| answered Oct 11 '13, 4:34 a.m.
FORUM ADMINISTRATOR / FORUM MODERATOR / JAZZ DEVELOPER
I would suggest to read the help e.g. https://jazz.net/help-dev/clm/topic/com.ibm.team.scm.doc/topics/login.html which also clearly mentions that the credentials are stored. Just below that command you find the logout command and a description what it does with the credentials. The image below shows the topic and also an example demonstrating how to search the help.
Karthikeyan Baskaran selected this answer as the correct answer
Comments You are right. The "logout" command clears the cache.
Proper error message is displayed:lesson learnt: Thanks for your help. Setting as correct answer.In case if you are building a wrapper tool around CLI, and when the user triggers the login command from this wrapper, then internally call the logout CLI command before calling the login CLI command, so that the wrong credentials provided by the user can be captured. |
Comments
What version of the SCM tool and the server?
Have you or anyone else on this client ever logged in with the -c switch?
I'm thinking maybe the cached credentials are being used if you have.
I'm using CLI tool from the package: RTC-scmTools-Win-4.0.3
Rational Jazz Team Server version: 4.0.4
I'm the only person who has logged into this PC so far and I'm sure I didn't use -c switch on this PC.
However I've logged into the web client several times from this PC (with the "Remember my User ID" option enabled. Do you think this web client would have cached my credentials ? If yes, how to clear the cache, so that I could re-evaluate the CLI ?