Jazz Forum Welcome to the Jazz Community Forum Connect and collaborate with IBM Engineering experts and users

Password saved in clear text

Hi there,
I looked into my .metdata/.log file and I found out that whenever I'm using scm command, the command is written to the log file while saving my password in clear text to it! :shock:
Is there a way to avoid this password saving or it least mask it?
Thanx in advance,
Harel

0 votes



3 answers

Permanent link
This is due to OSGi which our command line uses. Here's an RTC work item that tracks the issue;

https://jazz.net/jazz/web/projects/Rational%20Team%20Concert#action=com.ibm.team.workitem.viewWorkItem&id=158182

but the fix would need to come from OSGi. Here's the work item at that level:

https://bugs.eclipse.org/bugs/show_bug.cgi?id=341541

0 votes


Permanent link
Hi Harel,

See https://jazz.net/jazz/resource/itemName/com.ibm.team.workitem.WorkItem/158182.

Comment 8 is most relevant. You should use 'scm login' whenever possible (since it relies on filesystem permissions to prevent your password from leaking).

e

0 votes


Permanent link
Thanx guys, I'll give it a try :)

0 votes

Your answer

Register or log in to post your answer.

Dashboards and work items are no longer publicly available, so some links may be invalid. We now provide similar information through other means. Learn more here.

Search context
Follow this question

By Email: 

Once you sign in you will be able to subscribe for any updates here.

By RSS:

Answers
Answers and Comments
Question details

Question asked: Aug 31 '11, 5:22 a.m.

Question was seen: 4,892 times

Last updated: Aug 31 '11, 5:22 a.m.

Confirmation Cancel Confirm