How to make release:prepare ask for password?

2012-09-21 Thread Magne Nordtveit
How can I make the release-plugin ask for a password when it needs it, rather 
than having to either a) provide it as a property when building, or b) putting 
it in a settings.xml file or equivalent. I don't like the fact that I have to 
have the password stored in a batch history file somewhere, or in a 
settings.xml file everybody knows where is...

Thanks,
--
Magne Nordtveit
Senior Systems Engineer

Mobile: +47 957 20 187

Offshore Simulator Centre AS
Visiting address: Borgundvegen 340, N-6009, Aalesund, Norway
Postal address:   Borgundvegen 340, N-6009, Aalesund, Norway
www.offsim.nohttp://www.offsim.no/



Re: How to make release:prepare ask for password?

2012-09-21 Thread Aliaksei Lahachou
Hi,

you can encrypt passwords in settings.xml:
http://maven.apache.org/guides/mini/guide-encryption.html.


Regards,
htfv (Aliaksei Lahachou)


On Fri, Sep 21, 2012 at 11:52 AM, Magne Nordtveit m...@offsim.no wrote:

 How can I make the release-plugin ask for a password when it needs it,
 rather than having to either a) provide it as a property when building, or
 b) putting it in a settings.xml file or equivalent. I don't like the fact
 that I have to have the password stored in a batch history file somewhere,
 or in a settings.xml file everybody knows where is...

 Thanks,
 --
 Magne Nordtveit
 Senior Systems Engineer

 Mobile: +47 957 20 187

 Offshore Simulator Centre AS
 Visiting address: Borgundvegen 340, N-6009, Aalesund, Norway
 Postal address:   Borgundvegen 340, N-6009, Aalesund, Norway
 www.offsim.nohttp://www.offsim.no/




RE: How to make release:prepare ask for password?

2012-09-21 Thread Magne Nordtveit
That doesn't really answer my question though - that's just a replacement of a 
plain text password by an encrypted one. The value of that isn't really high 
when it requires the master password to be stored in a different file IMHO, but 
that's a different discussion all together. I want to be asked for password 
when one is required - that way NO passwords are stored longer than they have 
to.

Magne

-Original Message-
From: Aliaksei Lahachou [mailto:aliaksei.lahac...@gmail.com] 
Sent: Friday, 21 September, 2012 11:58
To: Maven Users List
Subject: Re: How to make release:prepare ask for password?

Hi,

you can encrypt passwords in settings.xml:
http://maven.apache.org/guides/mini/guide-encryption.html.


Regards,
htfv (Aliaksei Lahachou)


On Fri, Sep 21, 2012 at 11:52 AM, Magne Nordtveit m...@offsim.no wrote:

 How can I make the release-plugin ask for a password when it needs it, 
 rather than having to either a) provide it as a property when 
 building, or
 b) putting it in a settings.xml file or equivalent. I don't like the 
 fact that I have to have the password stored in a batch history file 
 somewhere, or in a settings.xml file everybody knows where is...

 Thanks,
 --
 Magne Nordtveit
 Senior Systems Engineer

 Mobile: +47 957 20 187

 Offshore Simulator Centre AS
 Visiting address: Borgundvegen 340, N-6009, Aalesund, Norway
 Postal address:   Borgundvegen 340, N-6009, Aalesund, Norway
 www.offsim.nohttp://www.offsim.no/



-
To unsubscribe, e-mail: users-unsubscr...@maven.apache.org
For additional commands, e-mail: users-h...@maven.apache.org



Re: How to make release:prepare ask for password?

2012-09-21 Thread Anders Hammar
Don't think you can have it ask for the password, but you can provide
it as a Java (system) property on command-line.
mvn release:prepare -Dpassword=blabla

/Anders

On Fri, Sep 21, 2012 at 11:52 AM, Magne Nordtveit m...@offsim.no wrote:
 How can I make the release-plugin ask for a password when it needs it, rather 
 than having to either a) provide it as a property when building, or b) 
 putting it in a settings.xml file or equivalent. I don't like the fact that I 
 have to have the password stored in a batch history file somewhere, or in a 
 settings.xml file everybody knows where is...

 Thanks,
 --
 Magne Nordtveit
 Senior Systems Engineer

 Mobile: +47 957 20 187

 Offshore Simulator Centre AS
 Visiting address: Borgundvegen 340, N-6009, Aalesund, Norway
 Postal address:   Borgundvegen 340, N-6009, Aalesund, Norway
 www.offsim.nohttp://www.offsim.no/


-
To unsubscribe, e-mail: users-unsubscr...@maven.apache.org
For additional commands, e-mail: users-h...@maven.apache.org



RE: How to make release:prepare ask for password?

2012-09-21 Thread Magne Nordtveit
That puts us back to having the password stored in some bash history file, in 
plain text... Looks like I might have to put in for a feature request. Just 
have to figure out where to put it :-P

Magne

-Original Message-
From: anders.g.ham...@gmail.com [mailto:anders.g.ham...@gmail.com] On Behalf Of 
Anders Hammar
Sent: Friday, 21 September, 2012 12:58
To: Maven Users List
Subject: Re: How to make release:prepare ask for password?

Don't think you can have it ask for the password, but you can provide it as a 
Java (system) property on command-line.
mvn release:prepare -Dpassword=blabla

/Anders

On Fri, Sep 21, 2012 at 11:52 AM, Magne Nordtveit m...@offsim.no wrote:
 How can I make the release-plugin ask for a password when it needs it, rather 
 than having to either a) provide it as a property when building, or b) 
 putting it in a settings.xml file or equivalent. I don't like the fact that I 
 have to have the password stored in a batch history file somewhere, or in a 
 settings.xml file everybody knows where is...

 Thanks,
 --
 Magne Nordtveit
 Senior Systems Engineer

 Mobile: +47 957 20 187

 Offshore Simulator Centre AS
 Visiting address: Borgundvegen 340, N-6009, Aalesund, Norway
 Postal address:   Borgundvegen 340, N-6009, Aalesund, Norway
 www.offsim.nohttp://www.offsim.no/


-
To unsubscribe, e-mail: users-unsubscr...@maven.apache.org
For additional commands, e-mail: users-h...@maven.apache.org


-
To unsubscribe, e-mail: users-unsubscr...@maven.apache.org
For additional commands, e-mail: users-h...@maven.apache.org



Re: How to make release:prepare ask for password?

2012-09-21 Thread Anders Hammar
Feature requests are good. Patches are even better. :-)

/Anders

On Fri, Sep 21, 2012 at 1:29 PM, Magne Nordtveit m...@offsim.no wrote:
 That puts us back to having the password stored in some bash history file, in 
 plain text... Looks like I might have to put in for a feature request. Just 
 have to figure out where to put it :-P

 Magne

 -Original Message-
 From: anders.g.ham...@gmail.com [mailto:anders.g.ham...@gmail.com] On Behalf 
 Of Anders Hammar
 Sent: Friday, 21 September, 2012 12:58
 To: Maven Users List
 Subject: Re: How to make release:prepare ask for password?

 Don't think you can have it ask for the password, but you can provide it as a 
 Java (system) property on command-line.
 mvn release:prepare -Dpassword=blabla

 /Anders

 On Fri, Sep 21, 2012 at 11:52 AM, Magne Nordtveit m...@offsim.no wrote:
 How can I make the release-plugin ask for a password when it needs it, 
 rather than having to either a) provide it as a property when building, or 
 b) putting it in a settings.xml file or equivalent. I don't like the fact 
 that I have to have the password stored in a batch history file somewhere, 
 or in a settings.xml file everybody knows where is...

 Thanks,
 --
 Magne Nordtveit
 Senior Systems Engineer

 Mobile: +47 957 20 187

 Offshore Simulator Centre AS
 Visiting address: Borgundvegen 340, N-6009, Aalesund, Norway
 Postal address:   Borgundvegen 340, N-6009, Aalesund, Norway
 www.offsim.nohttp://www.offsim.no/


 -
 To unsubscribe, e-mail: users-unsubscr...@maven.apache.org
 For additional commands, e-mail: users-h...@maven.apache.org


 -
 To unsubscribe, e-mail: users-unsubscr...@maven.apache.org
 For additional commands, e-mail: users-h...@maven.apache.org


-
To unsubscribe, e-mail: users-unsubscr...@maven.apache.org
For additional commands, e-mail: users-h...@maven.apache.org



Re: How to make release:prepare ask for password?

2012-09-21 Thread Lyons, Roy
If this is related to your Nexus authentication, 2.1 is an awesome release
with regards to this.  They introduced an API token authentication
approach, so that you won't be handing over the keys to the castle if
someone compromises your API token password.

We are using it with encryption as well, and are storing the master
settings-security.xml in a secure location, pointing to it with a
relocation tag in the HOME/.m2/settings-security.xml file.

If you are already in linux, simply chmod go-rwx it.

Also, use SSL as a connection, so that the password cannot be sniffed.
Again, that might be overkill since it isn't a system account password.

If this is for your SCM, you may want to consider git instead of svn.  You
can use an ssh key with that, and will allow you to connect without
revealing a password.


Thanks,

Roy Lyons
Senior Configuration Engineer
(312) 648-3659 [w] 
(773) 551-8335 [c] 
roy.ly...@cmegroup.com
mailto:roy.ly...@cmegroup.com?subject=Contact%20from%20email%20signature
CME Group 
20 S. Wacker Drive
Chicago, Illinois 60606
Self Help 
https://wiki.chicago.cme.com/confluence/display/CM/Home
 






On 9/21/12 7:54 AM, Anders Hammar and...@hammar.net wrote:

Feature requests are good. Patches are even better. :-)

/Anders

On Fri, Sep 21, 2012 at 1:29 PM, Magne Nordtveit m...@offsim.no wrote:
 That puts us back to having the password stored in some bash history
file, in plain text... Looks like I might have to put in for a feature
request. Just have to figure out where to put it :-P

 Magne

 -Original Message-
 From: anders.g.ham...@gmail.com [mailto:anders.g.ham...@gmail.com] On
Behalf Of Anders Hammar
 Sent: Friday, 21 September, 2012 12:58
 To: Maven Users List
 Subject: Re: How to make release:prepare ask for password?

 Don't think you can have it ask for the password, but you can provide
it as a Java (system) property on command-line.
 mvn release:prepare -Dpassword=blabla

 /Anders

 On Fri, Sep 21, 2012 at 11:52 AM, Magne Nordtveit m...@offsim.no wrote:
 How can I make the release-plugin ask for a password when it needs it,
rather than having to either a) provide it as a property when building,
or b) putting it in a settings.xml file or equivalent. I don't like the
fact that I have to have the password stored in a batch history file
somewhere, or in a settings.xml file everybody knows where is...

 Thanks,
 --
 Magne Nordtveit
 Senior Systems Engineer

 Mobile: +47 957 20 187

 Offshore Simulator Centre AS
 Visiting address: Borgundvegen 340, N-6009, Aalesund, Norway
 Postal address:   Borgundvegen 340, N-6009, Aalesund, Norway
 www.offsim.nohttp://www.offsim.no/


 -
 To unsubscribe, e-mail: users-unsubscr...@maven.apache.org
 For additional commands, e-mail: users-h...@maven.apache.org


 -
 To unsubscribe, e-mail: users-unsubscr...@maven.apache.org
 For additional commands, e-mail: users-h...@maven.apache.org


-
To unsubscribe, e-mail: users-unsubscr...@maven.apache.org
For additional commands, e-mail: users-h...@maven.apache.org



-
To unsubscribe, e-mail: users-unsubscr...@maven.apache.org
For additional commands, e-mail: users-h...@maven.apache.org