RTC-SCM-CLI: lscm login command accepts wrong password (if the user is already logged in)
1) When lscm.bat is called via command prompt, with the below login command:
3) I still provided wrong password and pressed enter.
The feedback is:
What's going on here ? Is it using any of my previous successful login credentials internally ? if yes, how can I clear that cache ?
Thanks for your help in advance.
it asks for the user password like:lscm login -r <server> -u <user>
When I type the wrong password and press enter, I get the feedback as:Password (<user> @ <server>):
2) Then, I continued executing lscm.bat with the below "create workspace" commandLogged in to <server>
it now asks for the user password again like:lscm create workspace -e -r <server> <workspace_name>
(I think, the password is asked again, because I provided wrong password during step-1)Password (<user> @ <server>):
3) I still provided wrong password and pressed enter.
The feedback is:
To my surprise, when I checked in the web client, this workspace is actually created from the same user of step-1Workspace (1051) "<workspace_name>" successfully created
What's going on here ? Is it using any of my previous successful login credentials internally ? if yes, how can I clear that cache ?
Thanks for your help in advance.
Accepted answer
I would suggest to read the help e.g. https://jazz.net/help-dev/clm/topic/com.ibm.team.scm.doc/topics/login.html which also clearly mentions that the credentials are stored. Just below that command you find the logout command and a description what it does with the credentials. The image below shows the topic and also an example demonstrating how to search the help.
Comments
You are right. The "logout" command clears the cache.
When I executed the steps:
1. Execute logout CLI command
2. Execute login CLI command with wrong password
Proper error message is displayed:lesson learnt:
Could not log in to <server> as user <user>: CRJAZ0124I Invalid username or password.
Thanks for your help. Setting as correct answer.In case if you are building a wrapper tool around CLI, and when the user triggers the login command from this wrapper, then internally call the logout CLI command before calling the login CLI command, so that the wrong credentials provided by the user can be captured.
Comments
Karl Weinert
JAZZ DEVELOPER Oct 10 '13, 9:25 a.m.What version of the SCM tool and the server?
Have you or anyone else on this client ever logged in with the -c switch?
I'm thinking maybe the cached credentials are being used if you have.
Karthikeyan Baskaran
Oct 11 '13, 2:58 a.m.I'm using CLI tool from the package: RTC-scmTools-Win-4.0.3
Rational Jazz Team Server version: 4.0.4
I'm the only person who has logged into this PC so far and I'm sure I didn't use -c switch on this PC.
However I've logged into the web client several times from this PC (with the "Remember my User ID" option enabled. Do you think this web client would have cached my credentials ? If yes, how to clear the cache, so that I could re-evaluate the CLI ?