[JIRA] [mask-passwords-plugin] (JENKINS-25735) Mask Passwords doen't mask Credentials Parameter
Title: Message Title Oleg Nenashev commented on JENKINS-25735 Re: Mask Passwords doen't mask Credentials Parameter Workaround: Use masking features of EnvInject plugin Add Comment This message was sent by Atlassian JIRA (v6.4.2#64017-sha1:e244265) -- You received this message because you are subscribed to the Google Groups Jenkins Issues group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[JIRA] [mask-passwords-plugin] (JENKINS-25735) Mask Passwords doen't mask Credentials Parameter
Marshall GSEIT commented on JENKINS-25735 Mask Passwords doent mask Credentials Parameter Daniel, thank you so much for your time. If I enable "This build is parameterized", and add an existing "Username with password" credential. The build outputs a GUID. E.g. @echo oracleCredentialParameter=%oracleCredentialParameter% will display oracleCredentialParameter=3F2504E0-4F89-41D3-9A0C-0305E82C3301 The behavior is the same whether I select "Mask passwords" or not. I also tried adding a "String Parameter". In this case the build output the correct information. E.g. @echo oracleUsername=%oracleUsername% will display oracleUsername=ThisIsMyOracleUsername But, like above, the behavior is the same whether I select "Mask passwords" or not. This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators. For more information on JIRA, see: http://www.atlassian.com/software/jira -- You received this message because you are subscribed to the Google Groups Jenkins Issues group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[JIRA] [mask-passwords-plugin] (JENKINS-25735) Mask Passwords doen't mask Credentials Parameter
Daniel Beck commented on JENKINS-25735 Mask Passwords doent mask Credentials Parameter The behavior is the same whether I select "Mask passwords" or not. That parameter type only provides the UUID (which isn't particularly sensitive), and needs plugins to cooperate to get the data out from the credentials store. However, I expect if the password were printed somehow, it'd be masked correctly. This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators. For more information on JIRA, see: http://www.atlassian.com/software/jira -- You received this message because you are subscribed to the Google Groups Jenkins Issues group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[JIRA] [mask-passwords-plugin] (JENKINS-25735) Mask Passwords doen't mask Credentials Parameter
Marshall GSEIT commented on JENKINS-25735 Mask Passwords doent mask Credentials Parameter Nope, this is a bug. When selecting "Mask passwords", the build job's configuration page then states: Password Parameters, or any other type of build parameters selected for masking in Hudson's/Jenkins' main configuration screen (Manage Hudson Configure System), will be automatically masked. Emphasis mine. As long Jenkins' main configuration screen presents end-users with the option of "Credentials Parameter" under Mask Passwords; this is a bug. This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators. For more information on JIRA, see: http://www.atlassian.com/software/jira -- You received this message because you are subscribed to the Google Groups Jenkins Issues group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[JIRA] [mask-passwords-plugin] (JENKINS-25735) Mask Passwords doen't mask Credentials Parameter
Daniel Beck commented on JENKINS-25735 Mask Passwords doent mask Credentials Parameter "Credentials Parameter" is what you select in "This build is parameterized", "Add Parameter", "Credentials Parameter". "Use secret text(s) or file(s)" is not a build parameter. This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators. For more information on JIRA, see: http://www.atlassian.com/software/jira -- You received this message because you are subscribed to the Google Groups Jenkins Issues group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[JIRA] [mask-passwords-plugin] (JENKINS-25735) Mask Passwords doen't mask Credentials Parameter
Marshall GSEIT
created JENKINS-25735
Mask Passwords doent mask Credentials Parameter
Issue Type:
Bug
Assignee:
Daniel Petisme
Components:
mask-passwords-plugin
Created:
21/Nov/14 4:34 PM
Description:
After installing Mask Passwords Plugin 2.7.2, it allows the system configuration to set the passwords to be masked. One of which is Credentials Parameter.
However, in a project, if mask passwords is selected and an existing credential is used in the build step, the information is still displayed plaintext within the console output.
Steps To Reproduce:
Configure System
Mask Passwords - Parameters to automatically mask
x Non-Stored Password Parameter
x Credentials Parameter
x Password Parameter
Mask Passwords - Global name/password pairs
None added.
I already have several "Username with password" Global credentials
Create freestyle project
x Mask passwords (and enable global passwords)
Responce: Password Parameters, or any other type of build parameters selected for masking in Hudson's/Jenkins' main configuration screen (Manage Hudson Configure System), will be automatically masked.
x Use secret text(s) or file(s)
Add: Username and password
Variable: oracleCredential
Credentials
*) Specific credentials
my_oracle_username/* (Oracle remote login)
parameter _expression_: ${oracleCredential}
Add build step: Execute Windows batch command
Command: @echo %oracleCredential%
Save
Build Now, and examine Console Output
Expected: ** is displayed in place of %oracleCredential%
Actual:Actual username:password value of %oracleCredential% is displayed.
Environment:
Jenkins 1.580.1 running as a Windows service
Windows Server 2008 R2 SP1 64-bit
Firefox 33.1.1
Plugins: (abbreviated list)
* Credentials Binding Plugin 1.2
* Credentials Plugin 1.18
* Plain Credentials Plugin 1.0
* SSH Credentials Plugin 1.10
* Mask Passwords Plugin 2.7.2
Project:
Jenkins
Labels:
plugin,
jenkins,
security,
credentials,
mask-passwords
Priority:
Minor
Reporter:
Marshall GSEIT
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators.
For more information on JIRA, see: http://www.atlassian.com/software/jira
--
You received this message because you are subscribed to the Google Groups Jenkins Issues group.
To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
[JIRA] [mask-passwords-plugin] (JENKINS-25735) Mask Passwords doen't mask Credentials Parameter
Daniel Beck updated JENKINS-25735 Mask Passwords doent mask Credentials Parameter Looks like the Credentials Binding variable, not being a build parameter, is simply not covered by the existing build options. This is more a new feature, unless you can show that actual build parameters (entries on the "Build with Parameters" form) are also affected. Change By: Daniel Beck (21/Nov/14 6:13 PM) Issue Type: Bug NewFeature Labels: credentials,jenkins,mask-passwordsplugin,security, This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators. For more information on JIRA, see: http://www.atlassian.com/software/jira -- You received this message because you are subscribed to the Google Groups Jenkins Issues group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
