You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@maven.apache.org by "Vincent Siveton (JIRA)" <ji...@codehaus.org> on 2008/08/04 13:01:27 UTC

[jira] Created: (MPH-44) Hide passwords for effective-settings

Hide passwords for effective-settings
-------------------------------------

                 Key: MPH-44
                 URL: http://jira.codehaus.org/browse/MPH-44
             Project: Maven 2.x Help Plugin
          Issue Type: Improvement
    Affects Versions: 2.0.2
            Reporter: Vincent Siveton


Actually all passwords (server and proxy) are displayed. We should hide them by default.

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.codehaus.org/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

[jira] Closed: (MPH-44) Hide passwords for effective-settings

Posted by "Vincent Siveton (JIRA)" <ji...@codehaus.org>.
     [ http://jira.codehaus.org/browse/MPH-44?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Vincent Siveton closed MPH-44.
------------------------------

         Assignee: Vincent Siveton
       Resolution: Fixed
    Fix Version/s: 2.1

fixed in [r682328|http://svn.apache.org/viewvc?rev=682328&view=rev]

> Hide passwords for effective-settings
> -------------------------------------
>
>                 Key: MPH-44
>                 URL: http://jira.codehaus.org/browse/MPH-44
>             Project: Maven 2.x Help Plugin
>          Issue Type: Improvement
>    Affects Versions: 2.0.2
>            Reporter: Vincent Siveton
>            Assignee: Vincent Siveton
>             Fix For: 2.1
>
>
> Actually all passwords (server and proxy) are displayed. We should hide them by default.

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.codehaus.org/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

[jira] (MPH-44) Hide passwords for effective-settings

Posted by "Rob Juurlink (JIRA)" <ji...@codehaus.org>.
    [ https://jira.codehaus.org/browse/MPH-44?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=300552#comment-300552 ] 

Rob Juurlink edited comment on MPH-44 at 6/7/12 9:55 AM:
---------------------------------------------------------

When help:effective-settings is active, the password is internally truncated also. Looking at the deploy module, it tries to login with the password "***", and so the deploy fails:

[ERROR] Failed to execute goal org.apache.maven.plugins:maven-deploy-plugin:2.5:deploy (default-deploy) on project fwg: Failed to deploy artifacts: Could not transfer artifact nl.fwg:fwg:pom:3.09.031 from/to releases (http://xxx/nexus/content/repositories/releases): Access denied to: http://xxx/nexus/content/repositories/releases/nl/fwg/fwg/3.09.031/fwg-3.09.031.pom -> [Help 1]

Logged with tcpdump, the Authorization header is:
Authorization: Basic dGVzdDoqKio=

Which decodes to "test:***"

maven-help-plugin, version: 2.1.1
maven, version 3.0.4
                
      was (Author: kozmoz):
    When help:effective-settings is active, the password is internally truncated also. Looking at the deploy module, it tries to login with the password "***", and so the deploy fails:

[ERROR] Failed to execute goal org.apache.maven.plugins:maven-deploy-plugin:2.5:deploy (default-deploy) on project fwg: Failed to deploy artifacts: Could not transfer artifact nl.fwg:fwg:pom:3.09.031 from/to releases (http://xxx/nexus/content/repositories/releases): Access denied to: http://xxx/nexus/content/repositories/releases/nl/fwg/fwg/3.09.031/fwg-3.09.031.pom -> [Help 1]

Logged with tcpdump, the Authorization header is:
Authorization: Basic dGVzdDoqKio=

Which decodes to "test:***"

maven-help-plugin
Version: 2.1.1
                  
> Hide passwords for effective-settings
> -------------------------------------
>
>                 Key: MPH-44
>                 URL: https://jira.codehaus.org/browse/MPH-44
>             Project: Maven 2.x Help Plugin
>          Issue Type: Improvement
>    Affects Versions: 2.0.2
>            Reporter: Vincent Siveton
>            Assignee: Vincent Siveton
>             Fix For: 2.1
>
>
> Actually all passwords (server and proxy) are displayed. We should hide them by default.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://jira.codehaus.org/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

[jira] (MPH-44) Hide passwords for effective-settings

Posted by "Rob Juurlink (JIRA)" <ji...@codehaus.org>.
    [ https://jira.codehaus.org/browse/MPH-44?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=300552#comment-300552 ] 

Rob Juurlink commented on MPH-44:
---------------------------------

When help:effective-settings is active, the password is internally truncated also. Looking at the deploy module, it tries to login with the password "***", and so the deploy fails:

[ERROR] Failed to execute goal org.apache.maven.plugins:maven-deploy-plugin:2.5:deploy (default-deploy) on project fwg: Failed to deploy artifacts: Could not transfer artifact nl.fwg:fwg:pom:3.09.031 from/to releases (http://xxx/nexus/content/repositories/releases): Access denied to: http://xxx/nexus/content/repositories/releases/nl/fwg/fwg/3.09.031/fwg-3.09.031.pom -> [Help 1]

Logged with tcpdump, the Authorization header is:
Authorization: Basic dGVzdDoqKio=

Which decodes to "test:***"

maven-help-plugin
Version: 2.1.1
                
> Hide passwords for effective-settings
> -------------------------------------
>
>                 Key: MPH-44
>                 URL: https://jira.codehaus.org/browse/MPH-44
>             Project: Maven 2.x Help Plugin
>          Issue Type: Improvement
>    Affects Versions: 2.0.2
>            Reporter: Vincent Siveton
>            Assignee: Vincent Siveton
>             Fix For: 2.1
>
>
> Actually all passwords (server and proxy) are displayed. We should hide them by default.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://jira.codehaus.org/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira