On 14/04/2008, Carl Trieloff <[EMAIL PROTECTED]> wrote:

> > 2) Provide a facility for a user to "log in" once by supplying plain
> credentials and storing them securely in the user's private directory.  The
> qpid utilities could then check for stored credentials in lieu of supplied
> credentials.  A Kerberos-5 implementation will eventually provide this kind
> of single-sign-on capability but for PLAIN authentication, explicit storage
> would be needed.  Perhaps we should just hurry up and implement GSSAPI/Krb5.
> >
>
> This is much the same as what svn does and would be my preference. It has
> been proven to work.

Yes, I would support this too.

For simplicity is is important to have a command line flag, e.g. -u
myuser -p mypass, but the app must modify the args line so that the
password is not visible from ps output. Typically what you do in
production is source a script in the home dir that sets the
appropriate environment variables then in your scripts you just refer
to $USERNAME and $PASSWORD.

RG

Reply via email to