Re: promoting maven @work / fail on proxy uname/pwd
Thanx wayne.. i'll do my best :) worst that can happen, we'll stay to current 450 lines ant xml script and i'll have a competitive edge over my colleagues :)) regards marco On 11/4/07, Wayne Fay <[EMAIL PROTECTED]> wrote: > > The file is protected by NTFS ACL/security. If they don't trust that, > what do they trust?? And its not like having the proxy name/pass is > going to do a hacker a lot of good, unless it is a common name/pass > that is shared across a lot of your equipment which is definitely not > a best practice! > > A lot of people yell "security!" when they have no other reason to > complain about something, but they just don't like it (change is > hard/scary and Maven is "new"). Its a lot like the boy who cried wolf. > If you can really drill down into their issue/problem, many times you > can convince them that they are simply wrong... > > Wayne > > On 11/4/07, Marco Mistroni <[EMAIL PROTECTED]> wrote: > > Yes, thanks brett > > that's what i m trying to put in my colleagues mind.. they still > think > > that having an http proxy username and password > > can open the door to even the most protected software in our company.. > > I'll keep u posted on this... it'll be really silly to drop > > maven/artifactory just for that/.. > > thanks again and regards > > marco > > > > On 11/3/07, Brett Porter <[EMAIL PROTECTED]> wrote: > > > > > > Right - at the very least, even if you still need to use the proxy > > > from there, you only have to configure the u/p in one place and it can > > > be locked down to system administrators. > > > > > > - Brett > > > > > > On 04/11/2007, Marco Mistroni <[EMAIL PROTECTED]> wrote: > > > > Yep, will certainly do > > > > > > > > On 11/3/07, Wayne Fay <[EMAIL PROTECTED]> wrote: > > > > > > > > > > Yea, we talked it out a bit and he realized that actually only his > > > > > Artifactory instance will be going outside the firewall (through > the > > > > > proxy), so he needs to focus his attention on giving that box > > > > > permission to get out to the Internet. I suggested a few > approaches > > > > > I've used/seen and he's going to work on it next week... > > > > > > > > > > Marco, do reply back when you solve it, for the benefit of other > > > > > people who have similar configurations. > > > > > > > > > > Wayne > > > > > > > > > > On 11/3/07, Brett Porter <[EMAIL PROTECTED]> wrote: > > > > > > Ah, I misunderstood - I thought you were going to configure your > > > > > > username and password for your repo manager/proxy :) > > > > > > > > > > > > Good luck, > > > > > > Brett > > > > > > > > > > > > On 03/11/2007, Marco Mistroni <[EMAIL PROTECTED]> wrote: > > > > > > > Brett, > > > > > > > i talked with Wayne (Fay) on the issue. > > > > > > > for the way i want to imlpement it (an INternal repository) it > is > > > > > NOT a > > > > > > > maven problem > > > > > > > proxy will be configured in Artifactory... so it's there where > i > > > > > should > > > > > > > focus my attention.. > > > > > > > > > > > > > > thanks a lot for reply and regards > > > > > > > marco > > > > > > > > > > > > > > On 11/2/07, Brett Porter <[EMAIL PROTECTED]> wrote: > > > > > > > > > > > > > > > > On 03/11/2007, Marco Mistroni <[EMAIL PROTECTED]> wrote: > > > > > > > > > - how you developers are tackling the issue right now? > > > > > > > > > - does mvn 2.1 really provides that feature? > > > > > > > > > - if so, when it will be out? > > > > > > > > > > > > > > > > I started a little work on it quite some time back, but it > was > > > not > > > > > yet > > > > > > > > integrated into Maven and there were still some open > questions. > > > > > > > > > > > > > > > > At this point, it is scheduled for 2.1, but I'd say it's no > > > > > certainty > > > > > > > > to be included, unfortunately. > > > > > > > > > > > > > > > > the issue to watch is MNG-553. > > > > > > > > > > > > > > > > Regards, > > > > > > > > Brett > > > > > > > > > > > > > > > > -- > > > > > > > > Brett Porter > > > > > > > > Blog: http://www.devzuz.org/blogs/bporter/ > > > > > > > > > > > > > > > > > > > > > > - > > > > > > > > To unsubscribe, e-mail: [EMAIL PROTECTED] > > > > > > > > For additional commands, e-mail: [EMAIL PROTECTED] > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > -- > > > > > > Brett Porter > > > > > > Blog: http://www.devzuz.org/blogs/bporter/ > > > > > > > > > > > > > > > - > > > > > > To unsubscribe, e-mail: [EMAIL PROTECTED] > > > > > > For additional commands, e-mail: [EMAIL PROTECTED] > > > > > > > > > > > > > > > > > > > > > > > - > > > > > To unsubscribe, e-mail: [EMAIL PROTECTED] > > > > > For additional commands, e-mail: [EMAIL PROTECTED] > > > > > > > > > > > > > > > > > > > > > > > -- > > > Brett Porter > > > Blog: http://www.devzuz.org/blogs/bp
Re: promoting maven @work / fail on proxy uname/pwd
The file is protected by NTFS ACL/security. If they don't trust that, what do they trust?? And its not like having the proxy name/pass is going to do a hacker a lot of good, unless it is a common name/pass that is shared across a lot of your equipment which is definitely not a best practice! A lot of people yell "security!" when they have no other reason to complain about something, but they just don't like it (change is hard/scary and Maven is "new"). Its a lot like the boy who cried wolf. If you can really drill down into their issue/problem, many times you can convince them that they are simply wrong... Wayne On 11/4/07, Marco Mistroni <[EMAIL PROTECTED]> wrote: > Yes, thanks brett > that's what i m trying to put in my colleagues mind.. they still think > that having an http proxy username and password > can open the door to even the most protected software in our company.. > I'll keep u posted on this... it'll be really silly to drop > maven/artifactory just for that/.. > thanks again and regards > marco > > On 11/3/07, Brett Porter <[EMAIL PROTECTED]> wrote: > > > > Right - at the very least, even if you still need to use the proxy > > from there, you only have to configure the u/p in one place and it can > > be locked down to system administrators. > > > > - Brett > > > > On 04/11/2007, Marco Mistroni <[EMAIL PROTECTED]> wrote: > > > Yep, will certainly do > > > > > > On 11/3/07, Wayne Fay <[EMAIL PROTECTED]> wrote: > > > > > > > > Yea, we talked it out a bit and he realized that actually only his > > > > Artifactory instance will be going outside the firewall (through the > > > > proxy), so he needs to focus his attention on giving that box > > > > permission to get out to the Internet. I suggested a few approaches > > > > I've used/seen and he's going to work on it next week... > > > > > > > > Marco, do reply back when you solve it, for the benefit of other > > > > people who have similar configurations. > > > > > > > > Wayne > > > > > > > > On 11/3/07, Brett Porter <[EMAIL PROTECTED]> wrote: > > > > > Ah, I misunderstood - I thought you were going to configure your > > > > > username and password for your repo manager/proxy :) > > > > > > > > > > Good luck, > > > > > Brett > > > > > > > > > > On 03/11/2007, Marco Mistroni <[EMAIL PROTECTED]> wrote: > > > > > > Brett, > > > > > > i talked with Wayne (Fay) on the issue. > > > > > > for the way i want to imlpement it (an INternal repository) it is > > > > NOT a > > > > > > maven problem > > > > > > proxy will be configured in Artifactory... so it's there where i > > > > should > > > > > > focus my attention.. > > > > > > > > > > > > thanks a lot for reply and regards > > > > > > marco > > > > > > > > > > > > On 11/2/07, Brett Porter <[EMAIL PROTECTED]> wrote: > > > > > > > > > > > > > > On 03/11/2007, Marco Mistroni <[EMAIL PROTECTED]> wrote: > > > > > > > > - how you developers are tackling the issue right now? > > > > > > > > - does mvn 2.1 really provides that feature? > > > > > > > > - if so, when it will be out? > > > > > > > > > > > > > > I started a little work on it quite some time back, but it was > > not > > > > yet > > > > > > > integrated into Maven and there were still some open questions. > > > > > > > > > > > > > > At this point, it is scheduled for 2.1, but I'd say it's no > > > > certainty > > > > > > > to be included, unfortunately. > > > > > > > > > > > > > > the issue to watch is MNG-553. > > > > > > > > > > > > > > Regards, > > > > > > > Brett > > > > > > > > > > > > > > -- > > > > > > > Brett Porter > > > > > > > Blog: http://www.devzuz.org/blogs/bporter/ > > > > > > > > > > > > > > > > > > - > > > > > > > To unsubscribe, e-mail: [EMAIL PROTECTED] > > > > > > > For additional commands, e-mail: [EMAIL PROTECTED] > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > -- > > > > > Brett Porter > > > > > Blog: http://www.devzuz.org/blogs/bporter/ > > > > > > > > > > > > - > > > > > To unsubscribe, e-mail: [EMAIL PROTECTED] > > > > > For additional commands, e-mail: [EMAIL PROTECTED] > > > > > > > > > > > > > > > > > > - > > > > To unsubscribe, e-mail: [EMAIL PROTECTED] > > > > For additional commands, e-mail: [EMAIL PROTECTED] > > > > > > > > > > > > > > > > > -- > > Brett Porter > > Blog: http://www.devzuz.org/blogs/bporter/ > > > > - > > To unsubscribe, e-mail: [EMAIL PROTECTED] > > For additional commands, e-mail: [EMAIL PROTECTED] > > > > > - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: promoting maven @work / fail on proxy uname/pwd
Yes, thanks brett that's what i m trying to put in my colleagues mind.. they still think that having an http proxy username and password can open the door to even the most protected software in our company.. I'll keep u posted on this... it'll be really silly to drop maven/artifactory just for that/.. thanks again and regards marco On 11/3/07, Brett Porter <[EMAIL PROTECTED]> wrote: > > Right - at the very least, even if you still need to use the proxy > from there, you only have to configure the u/p in one place and it can > be locked down to system administrators. > > - Brett > > On 04/11/2007, Marco Mistroni <[EMAIL PROTECTED]> wrote: > > Yep, will certainly do > > > > On 11/3/07, Wayne Fay <[EMAIL PROTECTED]> wrote: > > > > > > Yea, we talked it out a bit and he realized that actually only his > > > Artifactory instance will be going outside the firewall (through the > > > proxy), so he needs to focus his attention on giving that box > > > permission to get out to the Internet. I suggested a few approaches > > > I've used/seen and he's going to work on it next week... > > > > > > Marco, do reply back when you solve it, for the benefit of other > > > people who have similar configurations. > > > > > > Wayne > > > > > > On 11/3/07, Brett Porter <[EMAIL PROTECTED]> wrote: > > > > Ah, I misunderstood - I thought you were going to configure your > > > > username and password for your repo manager/proxy :) > > > > > > > > Good luck, > > > > Brett > > > > > > > > On 03/11/2007, Marco Mistroni <[EMAIL PROTECTED]> wrote: > > > > > Brett, > > > > > i talked with Wayne (Fay) on the issue. > > > > > for the way i want to imlpement it (an INternal repository) it is > > > NOT a > > > > > maven problem > > > > > proxy will be configured in Artifactory... so it's there where i > > > should > > > > > focus my attention.. > > > > > > > > > > thanks a lot for reply and regards > > > > > marco > > > > > > > > > > On 11/2/07, Brett Porter <[EMAIL PROTECTED]> wrote: > > > > > > > > > > > > On 03/11/2007, Marco Mistroni <[EMAIL PROTECTED]> wrote: > > > > > > > - how you developers are tackling the issue right now? > > > > > > > - does mvn 2.1 really provides that feature? > > > > > > > - if so, when it will be out? > > > > > > > > > > > > I started a little work on it quite some time back, but it was > not > > > yet > > > > > > integrated into Maven and there were still some open questions. > > > > > > > > > > > > At this point, it is scheduled for 2.1, but I'd say it's no > > > certainty > > > > > > to be included, unfortunately. > > > > > > > > > > > > the issue to watch is MNG-553. > > > > > > > > > > > > Regards, > > > > > > Brett > > > > > > > > > > > > -- > > > > > > Brett Porter > > > > > > Blog: http://www.devzuz.org/blogs/bporter/ > > > > > > > > > > > > > > > - > > > > > > To unsubscribe, e-mail: [EMAIL PROTECTED] > > > > > > For additional commands, e-mail: [EMAIL PROTECTED] > > > > > > > > > > > > > > > > > > > > > > > > > > > > > -- > > > > Brett Porter > > > > Blog: http://www.devzuz.org/blogs/bporter/ > > > > > > > > > - > > > > To unsubscribe, e-mail: [EMAIL PROTECTED] > > > > For additional commands, e-mail: [EMAIL PROTECTED] > > > > > > > > > > > > > > - > > > To unsubscribe, e-mail: [EMAIL PROTECTED] > > > For additional commands, e-mail: [EMAIL PROTECTED] > > > > > > > > > > > -- > Brett Porter > Blog: http://www.devzuz.org/blogs/bporter/ > > - > To unsubscribe, e-mail: [EMAIL PROTECTED] > For additional commands, e-mail: [EMAIL PROTECTED] > >
Re: promoting maven @work / fail on proxy uname/pwd
Right - at the very least, even if you still need to use the proxy from there, you only have to configure the u/p in one place and it can be locked down to system administrators. - Brett On 04/11/2007, Marco Mistroni <[EMAIL PROTECTED]> wrote: > Yep, will certainly do > > On 11/3/07, Wayne Fay <[EMAIL PROTECTED]> wrote: > > > > Yea, we talked it out a bit and he realized that actually only his > > Artifactory instance will be going outside the firewall (through the > > proxy), so he needs to focus his attention on giving that box > > permission to get out to the Internet. I suggested a few approaches > > I've used/seen and he's going to work on it next week... > > > > Marco, do reply back when you solve it, for the benefit of other > > people who have similar configurations. > > > > Wayne > > > > On 11/3/07, Brett Porter <[EMAIL PROTECTED]> wrote: > > > Ah, I misunderstood - I thought you were going to configure your > > > username and password for your repo manager/proxy :) > > > > > > Good luck, > > > Brett > > > > > > On 03/11/2007, Marco Mistroni <[EMAIL PROTECTED]> wrote: > > > > Brett, > > > > i talked with Wayne (Fay) on the issue. > > > > for the way i want to imlpement it (an INternal repository) it is > > NOT a > > > > maven problem > > > > proxy will be configured in Artifactory... so it's there where i > > should > > > > focus my attention.. > > > > > > > > thanks a lot for reply and regards > > > > marco > > > > > > > > On 11/2/07, Brett Porter <[EMAIL PROTECTED]> wrote: > > > > > > > > > > On 03/11/2007, Marco Mistroni <[EMAIL PROTECTED]> wrote: > > > > > > - how you developers are tackling the issue right now? > > > > > > - does mvn 2.1 really provides that feature? > > > > > > - if so, when it will be out? > > > > > > > > > > I started a little work on it quite some time back, but it was not > > yet > > > > > integrated into Maven and there were still some open questions. > > > > > > > > > > At this point, it is scheduled for 2.1, but I'd say it's no > > certainty > > > > > to be included, unfortunately. > > > > > > > > > > the issue to watch is MNG-553. > > > > > > > > > > Regards, > > > > > Brett > > > > > > > > > > -- > > > > > Brett Porter > > > > > Blog: http://www.devzuz.org/blogs/bporter/ > > > > > > > > > > > > - > > > > > To unsubscribe, e-mail: [EMAIL PROTECTED] > > > > > For additional commands, e-mail: [EMAIL PROTECTED] > > > > > > > > > > > > > > > > > > > > > > > -- > > > Brett Porter > > > Blog: http://www.devzuz.org/blogs/bporter/ > > > > > > - > > > To unsubscribe, e-mail: [EMAIL PROTECTED] > > > For additional commands, e-mail: [EMAIL PROTECTED] > > > > > > > > > > - > > To unsubscribe, e-mail: [EMAIL PROTECTED] > > For additional commands, e-mail: [EMAIL PROTECTED] > > > > > -- Brett Porter Blog: http://www.devzuz.org/blogs/bporter/ - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: promoting maven @work / fail on proxy uname/pwd
Yep, will certainly do On 11/3/07, Wayne Fay <[EMAIL PROTECTED]> wrote: > > Yea, we talked it out a bit and he realized that actually only his > Artifactory instance will be going outside the firewall (through the > proxy), so he needs to focus his attention on giving that box > permission to get out to the Internet. I suggested a few approaches > I've used/seen and he's going to work on it next week... > > Marco, do reply back when you solve it, for the benefit of other > people who have similar configurations. > > Wayne > > On 11/3/07, Brett Porter <[EMAIL PROTECTED]> wrote: > > Ah, I misunderstood - I thought you were going to configure your > > username and password for your repo manager/proxy :) > > > > Good luck, > > Brett > > > > On 03/11/2007, Marco Mistroni <[EMAIL PROTECTED]> wrote: > > > Brett, > > > i talked with Wayne (Fay) on the issue. > > > for the way i want to imlpement it (an INternal repository) it is > NOT a > > > maven problem > > > proxy will be configured in Artifactory... so it's there where i > should > > > focus my attention.. > > > > > > thanks a lot for reply and regards > > > marco > > > > > > On 11/2/07, Brett Porter <[EMAIL PROTECTED]> wrote: > > > > > > > > On 03/11/2007, Marco Mistroni <[EMAIL PROTECTED]> wrote: > > > > > - how you developers are tackling the issue right now? > > > > > - does mvn 2.1 really provides that feature? > > > > > - if so, when it will be out? > > > > > > > > I started a little work on it quite some time back, but it was not > yet > > > > integrated into Maven and there were still some open questions. > > > > > > > > At this point, it is scheduled for 2.1, but I'd say it's no > certainty > > > > to be included, unfortunately. > > > > > > > > the issue to watch is MNG-553. > > > > > > > > Regards, > > > > Brett > > > > > > > > -- > > > > Brett Porter > > > > Blog: http://www.devzuz.org/blogs/bporter/ > > > > > > > > > - > > > > To unsubscribe, e-mail: [EMAIL PROTECTED] > > > > For additional commands, e-mail: [EMAIL PROTECTED] > > > > > > > > > > > > > > > > > -- > > Brett Porter > > Blog: http://www.devzuz.org/blogs/bporter/ > > > > - > > To unsubscribe, e-mail: [EMAIL PROTECTED] > > For additional commands, e-mail: [EMAIL PROTECTED] > > > > > > - > To unsubscribe, e-mail: [EMAIL PROTECTED] > For additional commands, e-mail: [EMAIL PROTECTED] > >
Re: promoting maven @work / fail on proxy uname/pwd
Yea, we talked it out a bit and he realized that actually only his Artifactory instance will be going outside the firewall (through the proxy), so he needs to focus his attention on giving that box permission to get out to the Internet. I suggested a few approaches I've used/seen and he's going to work on it next week... Marco, do reply back when you solve it, for the benefit of other people who have similar configurations. Wayne On 11/3/07, Brett Porter <[EMAIL PROTECTED]> wrote: > Ah, I misunderstood - I thought you were going to configure your > username and password for your repo manager/proxy :) > > Good luck, > Brett > > On 03/11/2007, Marco Mistroni <[EMAIL PROTECTED]> wrote: > > Brett, > > i talked with Wayne (Fay) on the issue. > > for the way i want to imlpement it (an INternal repository) it is NOT a > > maven problem > > proxy will be configured in Artifactory... so it's there where i should > > focus my attention.. > > > > thanks a lot for reply and regards > > marco > > > > On 11/2/07, Brett Porter <[EMAIL PROTECTED]> wrote: > > > > > > On 03/11/2007, Marco Mistroni <[EMAIL PROTECTED]> wrote: > > > > - how you developers are tackling the issue right now? > > > > - does mvn 2.1 really provides that feature? > > > > - if so, when it will be out? > > > > > > I started a little work on it quite some time back, but it was not yet > > > integrated into Maven and there were still some open questions. > > > > > > At this point, it is scheduled for 2.1, but I'd say it's no certainty > > > to be included, unfortunately. > > > > > > the issue to watch is MNG-553. > > > > > > Regards, > > > Brett > > > > > > -- > > > Brett Porter > > > Blog: http://www.devzuz.org/blogs/bporter/ > > > > > > - > > > To unsubscribe, e-mail: [EMAIL PROTECTED] > > > For additional commands, e-mail: [EMAIL PROTECTED] > > > > > > > > > > > -- > Brett Porter > Blog: http://www.devzuz.org/blogs/bporter/ > > - > To unsubscribe, e-mail: [EMAIL PROTECTED] > For additional commands, e-mail: [EMAIL PROTECTED] > > - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: promoting maven @work / fail on proxy uname/pwd
Ah, I misunderstood - I thought you were going to configure your username and password for your repo manager/proxy :) Good luck, Brett On 03/11/2007, Marco Mistroni <[EMAIL PROTECTED]> wrote: > Brett, > i talked with Wayne (Fay) on the issue. > for the way i want to imlpement it (an INternal repository) it is NOT a > maven problem > proxy will be configured in Artifactory... so it's there where i should > focus my attention.. > > thanks a lot for reply and regards > marco > > On 11/2/07, Brett Porter <[EMAIL PROTECTED]> wrote: > > > > On 03/11/2007, Marco Mistroni <[EMAIL PROTECTED]> wrote: > > > - how you developers are tackling the issue right now? > > > - does mvn 2.1 really provides that feature? > > > - if so, when it will be out? > > > > I started a little work on it quite some time back, but it was not yet > > integrated into Maven and there were still some open questions. > > > > At this point, it is scheduled for 2.1, but I'd say it's no certainty > > to be included, unfortunately. > > > > the issue to watch is MNG-553. > > > > Regards, > > Brett > > > > -- > > Brett Porter > > Blog: http://www.devzuz.org/blogs/bporter/ > > > > - > > To unsubscribe, e-mail: [EMAIL PROTECTED] > > For additional commands, e-mail: [EMAIL PROTECTED] > > > > > -- Brett Porter Blog: http://www.devzuz.org/blogs/bporter/ - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: promoting maven @work / fail on proxy uname/pwd
Brett, i talked with Wayne (Fay) on the issue. for the way i want to imlpement it (an INternal repository) it is NOT a maven problem proxy will be configured in Artifactory... so it's there where i should focus my attention.. thanks a lot for reply and regards marco On 11/2/07, Brett Porter <[EMAIL PROTECTED]> wrote: > > On 03/11/2007, Marco Mistroni <[EMAIL PROTECTED]> wrote: > > - how you developers are tackling the issue right now? > > - does mvn 2.1 really provides that feature? > > - if so, when it will be out? > > I started a little work on it quite some time back, but it was not yet > integrated into Maven and there were still some open questions. > > At this point, it is scheduled for 2.1, but I'd say it's no certainty > to be included, unfortunately. > > the issue to watch is MNG-553. > > Regards, > Brett > > -- > Brett Porter > Blog: http://www.devzuz.org/blogs/bporter/ > > - > To unsubscribe, e-mail: [EMAIL PROTECTED] > For additional commands, e-mail: [EMAIL PROTECTED] > >
Re: promoting maven @work / fail on proxy uname/pwd
On 03/11/2007, Marco Mistroni <[EMAIL PROTECTED]> wrote: > - how you developers are tackling the issue right now? > - does mvn 2.1 really provides that feature? > - if so, when it will be out? I started a little work on it quite some time back, but it was not yet integrated into Maven and there were still some open questions. At this point, it is scheduled for 2.1, but I'd say it's no certainty to be included, unfortunately. the issue to watch is MNG-553. Regards, Brett -- Brett Porter Blog: http://www.devzuz.org/blogs/bporter/ - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
promoting maven @work / fail on proxy uname/pwd
hi all, i am very close to promote Maven @work, where we are currently using a 400 lines long ant build script... (don't need to list the miracles we are doing in it to get some jobs done...) i thought i would have had no problems in showing what Mvn can bring us (in 4 yrs using it, i found out almost all the features and all the benfits that mvn can give)... until i got some comments that having plain username and password for maven proxy (we r behind a firewall) is a potential security threat my idea was to setup an internal repository on one machine, so that machine would be a dedicated one with a dedicated user account.. I thougth, that other than setting up some read permission on the file would have sufficed to win seems it might not be enough... i read somewhere that in release 2.1 ther will be an option to encrypt uname/pwd on proxy.. well i have then few questions for the list: - how you developers are tackling the issue right now? - does mvn 2.1 really provides that feature? - if so, when it will be out? i know myself that wth an http username and password you won't be able to asssault a bank (i work in one..) but i needs facts. anyone could help? thanks an dregars marco