Skip to content

Plaintext password #16

@acornejo

Description

@acornejo

Our bugzilla server requires authentication. Are the only two options available either to write the password in plaintext on a file, or write in plaintext on the command line?

Either of these two options is very insecure, since anyone with access to the machine can now see the password (in my setting is worse since we use shared dev machines for a lot of dev tasks, and bugzilla authenticates with ldap which means this password controls everything else and not just bugzilla).

It would be nice if when password is required but not provided bugzillatools asked for it through standard input. Even better if bugzilla cached the authentication tokens for later reuse (pybugz has this feature but bugzilla tools is better in a lot other ways).

Are these features likely to be accepted if contributed?

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions