[jira] [Commented] (SQOOP-501) Infrastructure to support input of sensitive information like passwords in the client shell

["Cheolsoo Park (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/SQOOP-501?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13397285#comment-13397285 ] 

Cheolsoo Park commented on SQOOP-501:
-------------------------------------

While working on SQOOP-494, I realized that it should be not too hard to implement this. In Java, if we call read() or readLine() on a BufferedReader or similar, characters that we type do not show up unless we explicitly print them back to stdout. In fact, ssh behaves in the same way, so it does not print any characters when we type password.

Only thing that we have to handle seems like backspace (as Bilung pointed out at last meeting). We should interpret backpsace and delete a previous char rather than save it as input. Other than that, I believe that it should be straightforward to implement this.

We might go fancy by printing a mask character instead of printing nothing, but only if time permits, I guess... :-)


                
> Infrastructure to support input of sensitive information like passwords in the client shell
> -------------------------------------------------------------------------------------------
>
>                 Key: SQOOP-501
>                 URL: https://issues.apache.org/jira/browse/SQOOP-501
>             Project: Sqoop
>          Issue Type: Task
>            Reporter: Arvind Prabhakar
>             Fix For: 2.0.0
>
>
> For example, a password should be entered in a manner that keeps it secure through the input and the remaining session.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira