You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@maven.apache.org by Magne Nordtveit <mn...@offsim.no> on 2012/09/21 11:52:19 UTC
How to make release:prepare ask for password?
How can I make the release-plugin ask for a password when it needs it, rather than having to either a) provide it as a property when building, or b) putting it in a settings.xml file or equivalent. I don't like the fact that I have to have the password stored in a batch history file somewhere, or in a settings.xml file everybody knows where is...
Thanks,
--
Magne Nordtveit
Senior Systems Engineer
Mobile: +47 957 20 187
Offshore Simulator Centre AS
Visiting address: Borgundvegen 340, N-6009, Aalesund, Norway
Postal address: Borgundvegen 340, N-6009, Aalesund, Norway
www.offsim.no<http://www.offsim.no/>
Re: How to make release:prepare ask for password?
Posted by "Lyons, Roy" <Ro...@cmegroup.com>.
If this is related to your Nexus authentication, 2.1 is an awesome release
with regards to this. They introduced an API token authentication
approach, so that you won't be handing over the keys to the castle if
someone compromises your API token password.
We are using it with encryption as well, and are storing the master
settings-security.xml in a secure location, pointing to it with a
relocation tag in the HOME/.m2/settings-security.xml file.
If you are already in linux, simply chmod go-rwx it.
Also, use SSL as a connection, so that the password cannot be sniffed.
Again, that might be overkill since it isn't a system account password.
If this is for your SCM, you may want to consider git instead of svn. You
can use an ssh key with that, and will allow you to connect without
revealing a password.
Thanks,
Roy Lyons
Senior Configuration Engineer
(312) 648-3659 [w]
(773) 551-8335 [c]
Roy.Lyons@cmegroup.com
<mailto:Roy.Lyons@cmegroup.com?subject=Contact%20from%20email%20signature>
CME Group
20 S. Wacker Drive
Chicago, Illinois 60606
Self Help
https://wiki.chicago.cme.com/confluence/display/CM/Home
On 9/21/12 7:54 AM, "Anders Hammar" <an...@hammar.net> wrote:
>Feature requests are good. Patches are even better. :-)
>
>/Anders
>
>On Fri, Sep 21, 2012 at 1:29 PM, Magne Nordtveit <mn...@offsim.no> wrote:
>> That puts us back to having the password stored in some bash history
>>file, in plain text... Looks like I might have to put in for a feature
>>request. Just have to figure out where to put it :-P
>>
>> Magne
>>
>> -----Original Message-----
>> From: anders.g.hammar@gmail.com [mailto:anders.g.hammar@gmail.com] On
>>Behalf Of Anders Hammar
>> Sent: Friday, 21 September, 2012 12:58
>> To: Maven Users List
>> Subject: Re: How to make release:prepare ask for password?
>>
>> Don't think you can have it ask for the password, but you can provide
>>it as a Java (system) property on command-line.
>> mvn release:prepare -Dpassword=blabla
>>
>> /Anders
>>
>> On Fri, Sep 21, 2012 at 11:52 AM, Magne Nordtveit <mn...@offsim.no> wrote:
>>> How can I make the release-plugin ask for a password when it needs it,
>>>rather than having to either a) provide it as a property when building,
>>>or b) putting it in a settings.xml file or equivalent. I don't like the
>>>fact that I have to have the password stored in a batch history file
>>>somewhere, or in a settings.xml file everybody knows where is...
>>>
>>> Thanks,
>>> --
>>> Magne Nordtveit
>>> Senior Systems Engineer
>>>
>>> Mobile: +47 957 20 187
>>>
>>> Offshore Simulator Centre AS
>>> Visiting address: Borgundvegen 340, N-6009, Aalesund, Norway
>>> Postal address: Borgundvegen 340, N-6009, Aalesund, Norway
>>> www.offsim.no<http://www.offsim.no/>
>>>
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: users-unsubscribe@maven.apache.org
>> For additional commands, e-mail: users-help@maven.apache.org
>>
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: users-unsubscribe@maven.apache.org
>> For additional commands, e-mail: users-help@maven.apache.org
>>
>
>---------------------------------------------------------------------
>To unsubscribe, e-mail: users-unsubscribe@maven.apache.org
>For additional commands, e-mail: users-help@maven.apache.org
>
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@maven.apache.org
For additional commands, e-mail: users-help@maven.apache.org
Re: How to make release:prepare ask for password?
Posted by Anders Hammar <an...@hammar.net>.
Feature requests are good. Patches are even better. :-)
/Anders
On Fri, Sep 21, 2012 at 1:29 PM, Magne Nordtveit <mn...@offsim.no> wrote:
> That puts us back to having the password stored in some bash history file, in plain text... Looks like I might have to put in for a feature request. Just have to figure out where to put it :-P
>
> Magne
>
> -----Original Message-----
> From: anders.g.hammar@gmail.com [mailto:anders.g.hammar@gmail.com] On Behalf Of Anders Hammar
> Sent: Friday, 21 September, 2012 12:58
> To: Maven Users List
> Subject: Re: How to make release:prepare ask for password?
>
> Don't think you can have it ask for the password, but you can provide it as a Java (system) property on command-line.
> mvn release:prepare -Dpassword=blabla
>
> /Anders
>
> On Fri, Sep 21, 2012 at 11:52 AM, Magne Nordtveit <mn...@offsim.no> wrote:
>> How can I make the release-plugin ask for a password when it needs it, rather than having to either a) provide it as a property when building, or b) putting it in a settings.xml file or equivalent. I don't like the fact that I have to have the password stored in a batch history file somewhere, or in a settings.xml file everybody knows where is...
>>
>> Thanks,
>> --
>> Magne Nordtveit
>> Senior Systems Engineer
>>
>> Mobile: +47 957 20 187
>>
>> Offshore Simulator Centre AS
>> Visiting address: Borgundvegen 340, N-6009, Aalesund, Norway
>> Postal address: Borgundvegen 340, N-6009, Aalesund, Norway
>> www.offsim.no<http://www.offsim.no/>
>>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@maven.apache.org
> For additional commands, e-mail: users-help@maven.apache.org
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@maven.apache.org
> For additional commands, e-mail: users-help@maven.apache.org
>
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@maven.apache.org
For additional commands, e-mail: users-help@maven.apache.org
RE: How to make release:prepare ask for password?
Posted by Magne Nordtveit <mn...@offsim.no>.
That puts us back to having the password stored in some bash history file, in plain text... Looks like I might have to put in for a feature request. Just have to figure out where to put it :-P
Magne
-----Original Message-----
From: anders.g.hammar@gmail.com [mailto:anders.g.hammar@gmail.com] On Behalf Of Anders Hammar
Sent: Friday, 21 September, 2012 12:58
To: Maven Users List
Subject: Re: How to make release:prepare ask for password?
Don't think you can have it ask for the password, but you can provide it as a Java (system) property on command-line.
mvn release:prepare -Dpassword=blabla
/Anders
On Fri, Sep 21, 2012 at 11:52 AM, Magne Nordtveit <mn...@offsim.no> wrote:
> How can I make the release-plugin ask for a password when it needs it, rather than having to either a) provide it as a property when building, or b) putting it in a settings.xml file or equivalent. I don't like the fact that I have to have the password stored in a batch history file somewhere, or in a settings.xml file everybody knows where is...
>
> Thanks,
> --
> Magne Nordtveit
> Senior Systems Engineer
>
> Mobile: +47 957 20 187
>
> Offshore Simulator Centre AS
> Visiting address: Borgundvegen 340, N-6009, Aalesund, Norway
> Postal address: Borgundvegen 340, N-6009, Aalesund, Norway
> www.offsim.no<http://www.offsim.no/>
>
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@maven.apache.org
For additional commands, e-mail: users-help@maven.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@maven.apache.org
For additional commands, e-mail: users-help@maven.apache.org
Re: How to make release:prepare ask for password?
Posted by Anders Hammar <an...@hammar.net>.
Don't think you can have it ask for the password, but you can provide
it as a Java (system) property on command-line.
mvn release:prepare -Dpassword=blabla
/Anders
On Fri, Sep 21, 2012 at 11:52 AM, Magne Nordtveit <mn...@offsim.no> wrote:
> How can I make the release-plugin ask for a password when it needs it, rather than having to either a) provide it as a property when building, or b) putting it in a settings.xml file or equivalent. I don't like the fact that I have to have the password stored in a batch history file somewhere, or in a settings.xml file everybody knows where is...
>
> Thanks,
> --
> Magne Nordtveit
> Senior Systems Engineer
>
> Mobile: +47 957 20 187
>
> Offshore Simulator Centre AS
> Visiting address: Borgundvegen 340, N-6009, Aalesund, Norway
> Postal address: Borgundvegen 340, N-6009, Aalesund, Norway
> www.offsim.no<http://www.offsim.no/>
>
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@maven.apache.org
For additional commands, e-mail: users-help@maven.apache.org
RE: How to make release:prepare ask for password?
Posted by Magne Nordtveit <mn...@offsim.no>.
That doesn't really answer my question though - that's just a replacement of a plain text password by an encrypted one. The value of that isn't really high when it requires the master password to be stored in a different file IMHO, but that's a different discussion all together. I want to be asked for password when one is required - that way NO passwords are stored longer than they have to.
Magne
-----Original Message-----
From: Aliaksei Lahachou [mailto:aliaksei.lahachou@gmail.com]
Sent: Friday, 21 September, 2012 11:58
To: Maven Users List
Subject: Re: How to make release:prepare ask for password?
Hi,
you can encrypt passwords in settings.xml:
http://maven.apache.org/guides/mini/guide-encryption.html.
Regards,
htfv (Aliaksei Lahachou)
On Fri, Sep 21, 2012 at 11:52 AM, Magne Nordtveit <mn...@offsim.no> wrote:
> How can I make the release-plugin ask for a password when it needs it,
> rather than having to either a) provide it as a property when
> building, or
> b) putting it in a settings.xml file or equivalent. I don't like the
> fact that I have to have the password stored in a batch history file
> somewhere, or in a settings.xml file everybody knows where is...
>
> Thanks,
> --
> Magne Nordtveit
> Senior Systems Engineer
>
> Mobile: +47 957 20 187
>
> Offshore Simulator Centre AS
> Visiting address: Borgundvegen 340, N-6009, Aalesund, Norway
> Postal address: Borgundvegen 340, N-6009, Aalesund, Norway
> www.offsim.no<http://www.offsim.no/>
>
>
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@maven.apache.org
For additional commands, e-mail: users-help@maven.apache.org
Re: How to make release:prepare ask for password?
Posted by Aliaksei Lahachou <al...@gmail.com>.
Hi,
you can encrypt passwords in settings.xml:
http://maven.apache.org/guides/mini/guide-encryption.html.
Regards,
htfv (Aliaksei Lahachou)
On Fri, Sep 21, 2012 at 11:52 AM, Magne Nordtveit <mn...@offsim.no> wrote:
> How can I make the release-plugin ask for a password when it needs it,
> rather than having to either a) provide it as a property when building, or
> b) putting it in a settings.xml file or equivalent. I don't like the fact
> that I have to have the password stored in a batch history file somewhere,
> or in a settings.xml file everybody knows where is...
>
> Thanks,
> --
> Magne Nordtveit
> Senior Systems Engineer
>
> Mobile: +47 957 20 187
>
> Offshore Simulator Centre AS
> Visiting address: Borgundvegen 340, N-6009, Aalesund, Norway
> Postal address: Borgundvegen 340, N-6009, Aalesund, Norway
> www.offsim.no<http://www.offsim.no/>
>
>