Jazz Forum Welcome to the Jazz Community Forum Connect and collaborate with IBM Engineering experts and users

Password saved in clear text

Questions
Tags
Users
Badges
Harel Fishgrund
(26●2●2) Aug 31 '11, 5:22 a.m.
Hi there,
I looked into my .metdata/.log file and I found out that whenever I'm using scm command, the command is written to the log file while saving my password in clear text to it! :shock:
Is there a way to avoid this password saving or it least mask it?
Thanx in advance,
Harel

0 votes

3 answers
4,892 views
0 votes

3 answers

Permanent link
Michael Valenta
FORUM MODERATOR / JAZZ DEVELOPER (3.7k●3) Aug 31 '11, 10:17 a.m.
This is due to OSGi which our command line uses. Here's an RTC work item that tracks the issue;

https://jazz.net/jazz/web/projects/Rational%20Team%20Concert#action=com.ibm.team.workitem.viewWorkItem&id=158182

but the fix would need to come from OSGi. Here's the work item at that level:

https://bugs.eclipse.org/bugs/show_bug.cgi?id=341541

0 votes

Permanent link
Evan Hughes
JAZZ DEVELOPER (2.4k●13●18) Aug 31 '11, 10:18 a.m.
Hi Harel,

See https://jazz.net/jazz/resource/itemName/com.ibm.team.workitem.WorkItem/158182.

Comment 8 is most relevant. You should use 'scm login' whenever possible (since it relies on filesystem permissions to prevent your password from leaking).

e

0 votes

Permanent link
Harel Fishgrund
(26●2●2) Aug 31 '11, 2:01 p.m.
Thanx guys, I'll give it a try :)

0 votes

Your answer

Register or log in to post your answer.

Dashboards and work items are no longer publicly available, so some links may be invalid. We now provide similar information through other means. Learn more here.

Ask a question
Guidelines
FAQ
Search context
Follow this question

By Email: 

Once you sign in you will be able to subscribe for any updates here.

By RSS:

Answers
Answers and Comments
Question details

Question asked: Aug 31 '11, 5:22 a.m.

Question was seen: 4,892 times

Last updated: Aug 31 '11, 5:22 a.m.

Confirmation Cancel Confirm