You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@cayenne.apache.org by Michael Gentry <bl...@gmail.com> on 2006/11/20 15:17:43 UTC
Password Encoding
If anyone has time ...
http://cwiki.apache.org/confluence/display/CAY/Password+Encoding
Feedback welcome. Thanks!
/dev/mrg
RE: Re: Re: Re: Re: Re: Password Encoding
Posted by Kevin Menard <km...@servprise.com>.
Nothing important to say. I just wanted to get another "re" in the
subject line.
Enjoy.
--
Kevin
> -----Original Message-----
> From: Michael Gentry [mailto:blacknext@gmail.com]
> Sent: Wednesday, December 06, 2006 12:35 PM
> To: cayenne-dev@incubator.apache.org
> Subject: Re: Re: Re: Re: Re: Re: Password Encoding
>
> I hope no one actually tried the modeler changes I had made.
> I slipped a few silly bugs into the last snapshot I uploaded.
> The modeler would exception out when loading in a legacy
> model. I had that working at one point, but made a few
> changes, and never re-tested with an old model -- had focused
> too much on the new format. Sorry about that. I just
> uploaded a fixed version. The files in question can be
> downloaded from http://homepage.mac.com/blacknext and are:
>
> cayenne-1.2-dev-macosx.dmg
> cayenne-1.2-dev.tar.gz
>
> Thanks,
>
> /dev/mrg
Re: Re: Re: Re: Re: Re: Password Encoding
Posted by Michael Gentry <bl...@gmail.com>.
I hope no one actually tried the modeler changes I had made. I
slipped a few silly bugs into the last snapshot I uploaded. The
modeler would exception out when loading in a legacy model. I had
that working at one point, but made a few changes, and never re-tested
with an old model -- had focused too much on the new format. Sorry
about that. I just uploaded a fixed version. The files in question
can be downloaded from http://homepage.mac.com/blacknext and are:
cayenne-1.2-dev-macosx.dmg
cayenne-1.2-dev.tar.gz
Thanks,
/dev/mrg
On 12/1/06, Michael Gentry <bl...@gmail.com> wrote:
> I've put a snapshot with the updated modeler/etc on my .Mac account:
>
> http://homepage.mac.com/blacknext
>
> Notes: This was built on a 1.2 baseline. I'd copy models to a temp
> directory and open/save/etc there just in case I have a bug somewhere.
>
> I've also added a little bit more content to the wiki page:
>
> http://cwiki.apache.org/confluence/display/CAY/Password+Encoding
>
> Thanks,
>
> /dev/mrg
>
> PS. I can add this to the 3.0 baseline at some point if people like it.
>
>
> On 11/29/06, Michael Gentry <bl...@gmail.com> wrote:
> > I've got more of the encoding done. All reads (and some writes on
> > save) go through the encoder classes for the JDBC driver adapter. Two
> > standard encoders supplied (plain text, rot13), but you can provide
> > your own.
> >
> > * Read/write password and save into model. If using the plain text
> > encoder, this is just like the current Cayenne. Although you can use
> > Rot13/custom and save into the model file, too.
> >
> > * Read/write password and save to file system. Puts the password
> > through the encoder and reads/writes from/to a filename you specify in
> > the same location as the .xml files. You can move the external
> > password file elsewhere at deploy time, though, as long as it is in
> > the CLASSPATH.
> >
> > * Read password from URL. I've tested file: and http: URLs (such as
> > http://localhost/~mrg/mrg.pw or
> > file:/Users/mrg/Projects/eclipse/workspace/MySQLTest/src/mrg.pw).
> > Does not write the password. If someone twists my arm enough, I might
> > do it if it begins with file: prefix.
> >
> > I still haven't added running an external program to obtain the password.
> >
> > If anyone has thoughts, now would be a good time to add them. :-)
> >
> > Thanks!
> >
> > /dev/mrg
> >
>
Re: Re: Re: Re: Re: Password Encoding
Posted by Michael Gentry <bl...@gmail.com>.
I've put a snapshot with the updated modeler/etc on my .Mac account:
http://homepage.mac.com/blacknext
Notes: This was built on a 1.2 baseline. I'd copy models to a temp
directory and open/save/etc there just in case I have a bug somewhere.
I've also added a little bit more content to the wiki page:
http://cwiki.apache.org/confluence/display/CAY/Password+Encoding
Thanks,
/dev/mrg
PS. I can add this to the 3.0 baseline at some point if people like it.
On 11/29/06, Michael Gentry <bl...@gmail.com> wrote:
> I've got more of the encoding done. All reads (and some writes on
> save) go through the encoder classes for the JDBC driver adapter. Two
> standard encoders supplied (plain text, rot13), but you can provide
> your own.
>
> * Read/write password and save into model. If using the plain text
> encoder, this is just like the current Cayenne. Although you can use
> Rot13/custom and save into the model file, too.
>
> * Read/write password and save to file system. Puts the password
> through the encoder and reads/writes from/to a filename you specify in
> the same location as the .xml files. You can move the external
> password file elsewhere at deploy time, though, as long as it is in
> the CLASSPATH.
>
> * Read password from URL. I've tested file: and http: URLs (such as
> http://localhost/~mrg/mrg.pw or
> file:/Users/mrg/Projects/eclipse/workspace/MySQLTest/src/mrg.pw).
> Does not write the password. If someone twists my arm enough, I might
> do it if it begins with file: prefix.
>
> I still haven't added running an external program to obtain the password.
>
> If anyone has thoughts, now would be a good time to add them. :-)
>
> Thanks!
>
> /dev/mrg
>
Re: Re: Re: Re: Password Encoding
Posted by Michael Gentry <bl...@gmail.com>.
I've got more of the encoding done. All reads (and some writes on
save) go through the encoder classes for the JDBC driver adapter. Two
standard encoders supplied (plain text, rot13), but you can provide
your own.
* Read/write password and save into model. If using the plain text
encoder, this is just like the current Cayenne. Although you can use
Rot13/custom and save into the model file, too.
* Read/write password and save to file system. Puts the password
through the encoder and reads/writes from/to a filename you specify in
the same location as the .xml files. You can move the external
password file elsewhere at deploy time, though, as long as it is in
the CLASSPATH.
* Read password from URL. I've tested file: and http: URLs (such as
http://localhost/~mrg/mrg.pw or
file:/Users/mrg/Projects/eclipse/workspace/MySQLTest/src/mrg.pw).
Does not write the password. If someone twists my arm enough, I might
do it if it begins with file: prefix.
I still haven't added running an external program to obtain the password.
If anyone has thoughts, now would be a good time to add them. :-)
Thanks!
/dev/mrg
Re: Re: Re: Password Encoding
Posted by Michael Gentry <bl...@gmail.com>.
I've got a lot of the Swing stuff done (I think). I'm able to load in
this type of XML model for the node now:
<?xml version="1.0" encoding="utf-8"?>
<driver project-version="1.2" class="com.mysql.jdbc.Driver">
<url value="jdbc:mysql://localhost:3306/mrg?autoReconnect=true"/>
<connectionPool min="1" max="1" />
<login userName="root" password="sbbone" encoderSalt="foo"
encoderClass="org.objectstyle.cayenne.conf.Rot13PasswordEncoder"
passwordLocation="" passwordSource="model" />
</driver>
Still more work to be done, but getting closer.
/dev/mrg
On 11/20/06, Michael Gentry <bl...@gmail.com> wrote:
> I was thinking of separating them at one point, but it is kind of all
> integrated. I'm open to suggestions to layout/etc, though. I did put
> all the new stuff after the original stuff (except min/max
> connections) to try and make it clearer, but it can probably be
> improved upon. At the moment, I'm more interested in getting it all
> working than making it prettier. I'm also planning on making the
> current XML auto-upgrade. If the new fields are missing, it'll assume
> an old model and use the current Cayenne method (plain text stored in
> the model). If I knew Swing, I might've finished by now. :-)
>
> Thanks,
>
> /dev/mrg
>
>
> On 11/20/06, Andrus Adamchik <an...@objectstyle.org> wrote:
> > Looks great to me. My only suggestion would be to try to separate
> > password encoding fields in a separate visual group so that users who
> > do not change the defaults are not overwhelmed with information. We
> > can play with layouts after this functionality is added though.
> >
> > Andrus
> >
> >
> > On Nov 20, 2006, at 9:17 AM, Michael Gentry wrote:
> >
> > > If anyone has time ...
> > >
> > > http://cwiki.apache.org/confluence/display/CAY/Password+Encoding
> > >
> > > Feedback welcome. Thanks!
> > >
> > > /dev/mrg
> > >
> >
> >
>
Re: Re: Password Encoding
Posted by Michael Gentry <bl...@gmail.com>.
I was thinking of separating them at one point, but it is kind of all
integrated. I'm open to suggestions to layout/etc, though. I did put
all the new stuff after the original stuff (except min/max
connections) to try and make it clearer, but it can probably be
improved upon. At the moment, I'm more interested in getting it all
working than making it prettier. I'm also planning on making the
current XML auto-upgrade. If the new fields are missing, it'll assume
an old model and use the current Cayenne method (plain text stored in
the model). If I knew Swing, I might've finished by now. :-)
Thanks,
/dev/mrg
On 11/20/06, Andrus Adamchik <an...@objectstyle.org> wrote:
> Looks great to me. My only suggestion would be to try to separate
> password encoding fields in a separate visual group so that users who
> do not change the defaults are not overwhelmed with information. We
> can play with layouts after this functionality is added though.
>
> Andrus
>
>
> On Nov 20, 2006, at 9:17 AM, Michael Gentry wrote:
>
> > If anyone has time ...
> >
> > http://cwiki.apache.org/confluence/display/CAY/Password+Encoding
> >
> > Feedback welcome. Thanks!
> >
> > /dev/mrg
> >
>
>
Re: Password Encoding
Posted by Andrus Adamchik <an...@objectstyle.org>.
Looks great to me. My only suggestion would be to try to separate
password encoding fields in a separate visual group so that users who
do not change the defaults are not overwhelmed with information. We
can play with layouts after this functionality is added though.
Andrus
On Nov 20, 2006, at 9:17 AM, Michael Gentry wrote:
> If anyone has time ...
>
> http://cwiki.apache.org/confluence/display/CAY/Password+Encoding
>
> Feedback welcome. Thanks!
>
> /dev/mrg
>