I always use scpexe instead of scp, thus enabling me to use ssh-agent (or
pageant if you're using putty on windows) to hold my credentials. That way
the only thing that is in the file is the location of my key and my
username. The passphrase must be entered by me externally.

-K


On 4/26/06 3:22 PM, "Kenney Westerhof" <[EMAIL PROTECTED]> wrote:

> On Wed, 26 Apr 2006, Shukla, Sanjay wrote:
> 
>> Maven needs proxy server url and credential information.
>> 
>> However this poses a security risk as your password is in a plain text
>> format. Is there some way to circumvent this ?
> 
> I don't think so. But you can use unix file/directory permissions to
> disallow anybody but you access to that file. Ofcourse root can always
> access your files but they usually also manage the proxy accounts.
> 
> -- Kenney
> 
>> 
>> .m2/settings.xml
>> 
>>   <proxies>
>>      <proxy>
>>       <id>1001</id>
>>       <active>true</active>
>>       <protocol>http</protocol>
>>       <username>me</username>
>>       <password>pass</password>
>>       <host>ip</host>
>>       <port>port</port>
>>       <nonProxyHosts>localhost</nonProxyHosts>
>>     </proxy>
>>     </proxies>
>> 
>> 
>> Sanjay Shukla,
>> HPI Product Engineering, 2 Penn Plaza, NY.
>> 212 904 3629 Office
>> 732 692 4419 Cell
>> 
>> 
>> 
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: [EMAIL PROTECTED]
>> For additional commands, e-mail: [EMAIL PROTECTED]
>> 
>> 
> 
> --
> Kenney Westerhof
> http://www.neonics.com
> GPG public key: http://www.gods.nl/~forge/kenneyw.key
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
> 


---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to